NGC Catalog
CLASSIC
Welcome Guest
Models
Llama 3.1 70B Instruct

Llama 3.1 70B Instruct

For downloads and more information, please view on a desktop device.
Logo for Llama 3.1 70B Instruct
Description
The Meta Llama 3.1 collection of multilingual large language models (LLMs) is a collection of pre-trained and instruction-tuned generative models in 8B, 70B, and 405B sizes (text in/text out).
Publisher
Meta
Latest Version
2.0
Modified
April 14, 2025
Size
131.43 GB

Model Description

The Meta Llama 3.1 collection of multilingual large language models (LLMs) is a collection of pretrained and instruction tuned generative models in 8B, 70B and 405B sizes (text in/text out). The Llama 3.1 instruction tuned text only models (8B, 70B, 405B) are optimized for multilingual dialogue use cases and outperform many of the available open source and closed chat models on common industry benchmarks.

This model is ready for commercial and non-commercial use.

Third-Party Community Consideration

This model is not owned or developed by NVIDIA. This model has been developed and built to a third-party’s requirements for this application and use case; see link to Non-NVIDIA Llama-3.1-70B-Instruct Model Card.

Model Developer: Meta

License/Terms of Use

GOVERNING TERMS: The use of this model is governed by the NVIDIA Open Model License Agreement.
ADDITIONAL INFORMATION: Llama 3.1 Community License Agreement, Built with Llama.

Deployment Geography: Global

Model Release Date: July 23, 2024

Status: This is a static model trained on an offline dataset. Future versions of the tuned models will be released as we improve model safety with community feedback.

Llama 3.1 family of models. Token counts refer to pre-training data only. All model versions use Grouped-Query Attention (GQA) for improved inference scalability.

Llama 3.1 Systems

Large language models, including Llama 3.1, are not designed to be deployed in isolation but instead should be deployed as part of an overall AI system with additional safety guardrails as required. Developers are expected to deploy system safeguards when building agentic systems. Safeguards are key to achieve the right helpfulness-safety alignment as well as mitigating safety and security risks inherent to the system and any integration of the model or system with external tools. As part of our responsible release approach, we provide the community with safeguards that developers should deploy with Llama models or other LLMs, including Llama Guard 3, Prompt Guard and Code Shield. All our reference implementations demos contain these safeguards by default so developers can benefit from system-level safety out-of-the-box.

Intended Use

Intended Use Cases Llama 3.1 is intended for commercial and research use in multiple languages. Instruction tuned text only models are intended for assistant-like chat, whereas pretrained models can be adapted for a variety of natural language generation tasks. The Llama 3.1 model collection also supports the ability to leverage the outputs of its models to improve other models including synthetic data generation and distillation. The Llama 3.1 Community License allows for these use cases.

Out-of-scope Use in any manner that violates applicable laws or regulations (including trade compliance laws). Use in any other way that is prohibited by the Acceptable Use Policy and Llama 3.1 Community License. Use in languages beyond those explicitly referenced as supported in this model card.

Note: Llama 3.1 has been trained on a broader collection of languages than the 8 supported languages.

Developers may fine-tune Llama 3.1 models for languages beyond the 8 supported languages provided they comply with the Llama 3.1 Community License and the Acceptable Use Policy and in such cases are responsible for ensuring that any uses of Llama 3.1 in additional languages is done in a safe and responsible manner.

New Capabilities

Note that this release introduces new capabilities, including a longer context window, multilingual inputs and outputs and possible integrations by developers with third party tools. Building with these new capabilities requires specific considerations in addition to the best practices that generally apply across all Generative AI use cases.

Tool-use: Just like in standard software development, developers are responsible for the integration of the LLM with the tools and services of their choice. They should define a clear policy for their use case and assess the integrity of the third party services they use to be aware of the safety and security limitations when using this capability. Refer to the Responsible Use Guide for best practices on the safe deployment of the third party safeguards.

Multilinguality: Llama 3.1 supports 7 languages in addition to English: French, German, Hindi, Italian, Portuguese, Spanish, and Thai. Llama may be able to output text in other languages than those that meet performance thresholds for safety and helpfulness. We strongly discourage developers from using this model to converse in non-supported languages without implementing finetuning and system controls in alignment with their policies and the best practices shared in the Responsible Use Guide.

Model Architecture:

  • Architecture Type: Transformer
  • Network Architecture: Llama 3.1

Llama 3.1 is an auto-regressive language model that uses an optimized transformer architecture. The tuned versions use supervised fine-tuning (SFT) and reinforcement learning with human feedback (RLHF) to align with human preferences for helpfulness and safety. This model was developed based on Llama-3.1-70B. This model has 70B of model parameters.

Input

  • Input Type: Text
  • Input Format: String
  • Input Parameters: One-Dimensional (1D)

Output

  • Output Type: Text
  • Output Format: String
  • Output Parameters: One-Dimensional (1D)
Training Data Params Input modalities Output modalities Context Length GQA Token count Knowledge cutoff
8B Multilingual Text Multilingual Text and code 128k Yes 15T+ December 2023
Llama 3.1 (text only) A new mix of publicly available online data. 70B Multilingual Text Multilingual Text and code 128k Yes 15T+ December 2023
405B Multilingual Text Multilingual Text and code 128k Yes 15T+ December 2023

Supported languages: English, German, French, Italian, Portuguese, Hindi, Spanish, and Thai.

Hardware And Software

Software Integration

  • Runtime Engine(s): NeMo Framework 25.02

  • Supported Hardware Microarchitecture Compatibility:

    • NVIDIA Ampere
    • NVIDIA Hopper
  • Supported Operating System(s): Linux

Model Version(s):

Llama-3.1-70B-Instruct 1.0 (July 23, 2024)

Training Details

Training Factors We used custom training libraries, Meta's custom built GPU cluster, and production infrastructure for pretraining. Fine-tuning, annotation, and evaluation were also performed on production infrastructure.

Training Energy Use Training utilized a cumulative of 39.3M GPU hours of computation on H100-80GB (TDP of 700W) type hardware, per the table below. Training time is the total GPU time required for training each model and power consumption is the peak power capacity per GPU device used, adjusted for power usage efficiency.

Training Greenhouse Gas Emissions Estimated total location-based greenhouse gas emissions were 11,390 tons CO2eq for training. Since 2020, Meta has maintained net zero greenhouse gas emissions in its global operations and matched 100% of its electricity use with renewable energy, therefore the total market-based greenhouse gas emissions for training were 0 tons CO2eq.

Training Time (GPU hours) Training Power Consumption (W) Training Location-Based Greenhouse Gas Emissions (tons CO2eq) Training Market-Based Greenhouse Gas Emissions (tons CO2eq)
Llama 3.1 8B 1.46M 700 420 0
Llama 3.1 70B 7.0M 700 2,040 0
Llama 3.1 405B 30.84M 700 8,930 0
Total 39.3M - 11,390 0

The methodology used to determine training energy use and greenhouse gas emissions can be found here. Since Meta is openly releasing these models, the training energy use and greenhouse gas emissions will not be incurred by others.

Training Data

  • Data Collection Method by Dataset: Hybrid: Automated, Human, Synthetic
  • Labeling Method by Dataset: Hybrid: Automated, Human, Synthetic

Overview: Llama 3.1 was pretrained on ~15 trillion tokens of data from publicly available sources. The fine-tuning data includes publicly available instruction datasets, as well as over 25M synthetically generated examples.

Data Freshness: The pretraining data has a cutoff of December 2023.

Benchmarks - English Text

In this section, we report the results for Llama 3.1 models on standard automatic benchmarks. For all the evaluations, we use our internal evaluations library.

Base pre-trained models

Category Benchmark # Shots Metric Llama 3 8B Llama 3.1 8B Llama 3 70B Llama 3.1 70B Llama 3.1 405B
General MMLU 5 macro_avg/acc_char 66.7 66.7 79.5 79.3 85.2
General MMLU PRO (CoT) 5 macro_avg/acc_char 36.2 37.1 55.0 53.8 61.6
General AGIEval English 3-5 average/acc_char 47.1 47.8 63.0 64.6 71.6
General CommonSenseQA 7 acc_char 72.6 75.0 83.8 84.1 85.8
General Winogrande 5 acc_char - 60.5 - 83.3 86.7
General BIG-Bench Hard (CoT) 3 average/em 61.1 64.2 81.3 81.6 85.9
General ARC-Challenge 25 acc_char 79.4 79.7 93.1 92.9 96.1
Knowledge reasoning TriviaQA-Wiki 5 em 78.5 77.6 89.7 89.8 91.8
Reading comprehension SQuAD 1 em 76.4 77.0 85.6 81.8 89.3
Reading comprehension QuAC (F1) 1 f1 44.4 44.9 51.1 51.1 53.6
Reading comprehension BoolQ 0 acc_char 75.7 75.0 79.0 79.4 80.0
Reading comprehension DROP (F1) 3 f1 58.4 59.5 79.7 79.6 84.8

Instruction-Tuned Models

Category Benchmark # Shots Metric Llama 3 8B Instruct Llama 3.1 8B Instruct Llama 3 70B Instruct Llama 3.1 70B Instruct Llama 3.1 405B Instruct
General MMLU 5 macro_avg/acc 68.5 69.4 82.0 83.6 87.3
General MMLU (CoT) 0 macro_avg/acc 65.3 72.7 80.9 85.9 88.6
General MMLU PRO (CoT) 5 micro_avg/acc_char 45.5 48.3 63.4 65.1 73.3
Reasoning ARC-C 0 acc 82.4 83.4 94.4 94.8 96.9
Reasoning GPQA 0 em 34.6 30.4 39.5 41.7 50.7
Reasoning MuSR 0 correct 56.3 45.7 55.1 58.1 56.7
Steerability IFEval 76.8 80.4 82.9 87.5 88.6
Code HumanEval 0 pass@1 60.4 72.6 81.7 80.5 89.0
Code MBPP ++ base version 0 pass@1 70.6 72.8 82.5 86.0 88.6
Math GSM-8K (CoT) 8 em_maj1@1 80.6 84.5 93.0 95.1 96.8
Math MATH (CoT) 0 final_em 29.1 51.9 51.0 68.0 73.8
Tool Use API-Bank 0 acc 83.6 82.6 85.1 90.0 92.0
Tool Use Berkeley Function Calling 0 acc 76.1 76.1 83.0 85.1 88.5
Tool Use Gorilla Benchmark API Bench 0 acc 8.8 8.2 14.7 29.7 35.3
Tool Use Nexus (0-shot) 0 macro_avg/acc 37.6 38.5 47.8 56.7 58.7
Multilingual Multilingual MGSM 8 em - 68.2 - 85.6 90.3

Multilingual Benchmarks

Category Benchmark Language Llama 3.1 8B Llama 3.1 70B Llama 3.1 405B
Portuguese 62.12 80.13 84.95
Spanish 62.45 80.05 85.08
Italian 61.63 80.4 85.04
General MMLU (5-shot, macro_avg/acc) German 60.59 79.27 84.36
French 62.34 79.82 84.66
Hindi 50.88 74.52 80.31
Thai 50.32 72.95 78.21

Inference

Engine: Triton
Test Hardware:

  • H100

Responsibility & Safety

As part of our Responsible release approach, we followed a three-pronged strategy to managing trust & safety risks:

  • Enable developers to deploy helpful, safe and flexible experiences for their target audience and for the use cases supported by Llama.

  • Protect developers against adversarial users aiming to exploit Llama capabilities to potentially cause harm.

  • Provide protections for the community to help prevent the misuse of our models.

Responsible Deployment

Llama is a foundational technology designed to be used in a variety of use cases, examples on how Meta's Llama models have been responsibly deployed can be found in our Community Stories webpage. Our approach is to build the most helpful models enabling the world to benefit from the technology power, by aligning our model safety for the generic use cases addressing a standard set of harms. Developers are then in the driver seat to tailor safety for their use case, defining their own policy and deploying the models with the necessary safeguards in their Llama systems. Llama 3.1 was developed following the best practices outlined in our Responsible Use Guide, you can refer to the Responsible Use Guide to learn more.

Llama 3.1 Instruct

Main objectives for conducting safety fine-tuning are to provide the research community with a valuable resource for studying the robustness of safety fine-tuning, as well as to offer developers a readily available, safe, and powerful model for various applications to reduce the developer workload to deploy safe AI systems. For more details on the safety mitigations implemented please read the Llama 3 paper.

Fine-Tuning Data

Meta employed a multi-faceted approach to data collection, combining human-generated data from our vendors with synthetic data to mitigate potential safety risks. Meta developed many large language model (LLM)-based classifiers that enabled them to thoughtfully select high-quality prompts and responses, enhancing data quality control.

Refusals And Tone

Building on the work we started with Llama 3, Meta put a great emphasis on model refusals to benign prompts as well as refusal tone. They included both borderline and adversarial prompts in their safety data strategy, and modified their safety data responses to follow tone guidelines.

Evaluations

Meta evaluated Llama models for common use cases as well as specific capabilities. Common use cases evaluations measure safety risks of systems for most commonly built applications including chat bot, coding assistant, tool calls. We built dedicated, adversarial evaluation datasets and evaluated systems composed of Llama models and Llama Guard 3 to filter input prompt and output response. It is important to evaluate applications in context, and Meta recommends building dedicated evaluation dataset for your use case. Prompt Guard and Code Shield are also available if relevant to the application.

Capability evaluations measure vulnerabilities of Llama models inherent to specific capabilities, for which were crafted dedicated benchmarks including long context, multilingual, tools calls, coding, or memorization.

Red Teaming

For both scenarios, Meta conducted recurring red teaming exercises with the goal of discovering risks via adversarial prompting and used the learnings to improve our benchmarks and safety tuning datasets. Meta partnered early with subject-matter experts in critical risk areas to understand the nature of these real-world harms and how such models may lead to unintended harm for society. Based on these conversations, Meta derived a set of adversarial goals for the red team to attempt to achieve, such as extracting harmful information or reprogramming the model to act in a potentially harmful capacity. The red team consisted of experts in cybersecurity, adversarial machine learning, responsible AI, and integrity in addition to multilingual content specialists with background in integrity issues in specific geographic markets.

Critical And Other Risks

Meta specifically focused their efforts on mitigating the following critical risk areas:

1- CBRNE (Chemical, Biological, Radiological, Nuclear, and Explosive materials) helpfulness

To assess risks related to proliferation of chemical and biological weapons, Meta performed uplift testing designed to assess whether use of Llama 3.1 models could meaningfully increase the capabilities of malicious actors to plan or carry out attacks using these types of weapons.

2. Child Safety

Child Safety risk assessments were conducted using a team of experts, to assess the model's capability to produce outputs that could result in Child Safety risks and inform on any necessary and appropriate risk mitigations via fine tuning. Meta leveraged those expert red teaming sessions to expand the coverage of our evaluation benchmarks through Llama 3 model development. For Llama 3, Meta conducted new in-depth sessions using objective based methodologies to assess the model risks along multiple attack vectors including the additional languages Llama 3 is trained on. Meta also partnered with content specialists to perform red teaming exercises assessing potentially violating content while taking account of market specific nuances or experiences.

3. Cyber Attack Enablement

A cyber attack uplift study investigated whether LLMs can enhance human capabilities in hacking tasks, both in terms of skill level and speed. The attack automation study focused on evaluating the capabilities of LLMs when used as autonomous agents in cyber offensive operations, specifically in the context of ransomware attacks. This evaluation was distinct from previous studies that considered LLMs as interactive assistants. The primary objective was to assess whether these models could effectively function as independent agents in executing complex cyber-attacks without human intervention. Meta's study of Llama-3.1-405B's social engineering uplift for cyber attackers was conducted to assess the effectiveness of AI models in aiding cyber threat actors in spear phishing campaigns. Please read the Llama 3.1 Cyber security whitepaper to learn more.

Community

Generative AI safety requires expertise and tooling, and Meta believes in the strength of the open community to accelerate its progress. Meta is an active member of open consortiums, including the AI Alliance, Partnership on AI and MLCommons, actively contributing to safety standardization and transparency. Meta encourages the community to adopt taxonomies like the MLCommons Proof of Concept evaluation to facilitate collaboration and transparency on safety and content evaluations. Meta Purple Llama tools are open sourced for the community to use and widely distributed across ecosystem partners including cloud service providers. Meta encourages community contributions to their Github repository.

Meta also set up the Llama Impact Grants program to identify and support the most compelling applications of Meta's Llama model for societal benefit across three categories: education, climate and open innovation. The 20 finalists from the hundreds of applications can be found here. Finally, Meta put in place a set of resources including an output reporting mechanism and bug bounty program to continuously improve the Llama technology with the help of the community.

Ethical Considerations And Limitations

The core values of Llama 3.1 are openness, inclusivity and helpfulness. It is meant to serve everyone, and to work for a wide range of use cases. It is thus designed to be accessible to people across many different backgrounds, experiences and perspectives. Llama 3.1 addresses users and their needs as they are, without insertion unnecessary judgment or normativity, while reflecting the understanding that even content that may appear problematic in some cases can serve valuable purposes in others. It respects the dignity and autonomy of all users, especially in terms of the values of free thought and expression that power innovation and progress.

But Llama 3.1 is a new technology, and like any new technology, there are risks associated with its use. Testing conducted to date has not covered, nor could it cover, all scenarios. For these reasons, as with all LLMs, Llama 3.1's potential outputs cannot be predicted in advance, and the model may in some instances produce inaccurate, biased or other objectionable responses to user prompts. Therefore, before deploying any applications of Llama 3.1 models, developers should perform safety testing and tuning tailored to their specific applications of the model. Please refer to available resources including our Responsible Use Guide, Trust and Safety solutions, and other resources to learn more about responsible development.

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal model team to ensure this model meets requirements for the relevant industry and use case and addresses unforeseen product misuse. Please report security vulnerabilities or NVIDIA AI Concerns here.