NeMo Guardrails

NVIDIA

Open Source

Open source guardrails framework for LLM and agent safety with a dedicated Colang DSL.

Curated by Tiberiu ArvaStale

Apache 2.0Version 0.24.1Released 2026-09-167,109

Strengths

  • Purpose-built guardrails DSL
  • Conversation flow controls
  • NVIDIA ecosystem alignment

Practitioner note

Good fit when teams want code-defined conversational and retrieval guardrails they can run themselves, accepting more engineering ownership than a managed service.

Warning

NeMo Guardrails: Repository moved from NVIDIA/NeMo-Guardrails to NVIDIA-NeMo/Guardrails.

Where it sits in the stack

Listed under Guardrails & security in the Control plane layer.

  1. Build & orchestrate
  2. Control plane
  3. Use

Governance posture

Reviewed 2026-05-26
YesData residency

Self-hosted library; residency fully operator-controlled.

Source
YesDeployment model

Open-source Python library deployed by the operator; NVIDIA NIM cloud separate. (self-hosted)

Source
N/AAudit logging

No built-in audit logging; operators add their own.

N/ASOC 2

Self-hosted library; certification applies to the operator.

N/AISO 27001

Self-hosted library; certification applies to the operator's ISMS.

N/AISO 42001

Self-hosted library; applies to the operator.

N/AEU AI Act

OSS library component; deployers carry obligations for systems they build. (role: not-applicable)

YesLicense risk

Apache-2.0 — permissive, OSI-approved. (low)

Source

EU AI Act obligations

Risk tier: Not applicable · as of 2026-10-10

Source-backed information mapped from NeMo Guardrails's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.

Change history

Source-backed and auto-detected events for this tool, newest first.

  1. Release

    NeMo Guardrails 0.24.1 fixed benchmark concurrency measurement, Nemotron 3.5 response parsing, server overload handling, and combined-config loading.

    Release v0.24.1 · NVIDIA-NeMo/Guardrails
  2. ReleaseHigh impact

    NeMo Guardrails 0.23.0 expanded IORails with streaming and non-streaming tool-call validation, added a standalone /v1/checks validation endpoint, and improved OpenTelemetry observability for production guardrail pipelines.

    Release v0.23.0 · NVIDIA-NeMo/Guardrails
  3. Release
    NeMo Guardrails adds parallel IORails safety execution

    NeMo Guardrails' March 12 release introduced IORails for parallel input/output safety execution, plus OpenAI-compatible server support and standalone async rail validation.

    Releases · NVIDIA-NeMo/Guardrails
  4. Auto-detected
    lastRelease: 2026-07-01 → 2026-09-16

    From snapshot diff 2026-09-13 → 2026-10-10.

  5. Auto-detected
    version: 0.23.0 → 0.24.1

    From snapshot diff 2026-09-13 → 2026-10-10.

  6. Auto-detected
    githubStars: 6869 → 7109

    From snapshot diff 2026-08-22 → 2026-09-13.

  7. Auto-detected
    githubStars: 6661 → 6869

    From snapshot diff 2026-07-17 → 2026-08-04.

  8. Auto-detected
    githubStars: 6367 → 6661

    From snapshot diff 2026-06-07 → 2026-07-17.

  9. Auto-detected
    lastRelease: 2026-05-22 → 2026-07-01

    From snapshot diff 2026-06-07 → 2026-07-17.

  10. Auto-detected
    version: 0.22.0 → 0.23.0

    From snapshot diff 2026-06-07 → 2026-07-17.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.