Shieldstral 1.0 3B
Mistral AI · European Union · Apache 2.0
Commercial use: Yes — free for commercial use
Apache 2.0. Unrestricted.
A small model whose only job is checking whether text going into or out of your AI is a problem.
Why it should matter to you
Guardrails are the part of an AI build that gets cut first and missed most. A general model asked to police itself is unreliable, because the same prompt injection that redirects the model redirects its self-check. A separate classifier is a different, harder target.
How it connects to our work
We run guardrails as a distinct layer outside the model, because a model that follows its instructions 98% of the time is an impressive research result and an unacceptable compliance posture. Hidden prompt injection is the attack that makes this concrete.
From our field notesHidden prompt injection is the attack vector nobody's demo covers.
Advantages
- A dedicated safety classifier rather than a general model asked to police itself
- Tiny and fast enough to sit in front of every request without adding noticeable latency
- Apache 2.0 and EU-origin, so it can run inside a GDPR-constrained pipeline
Disadvantages
- Classifier only — it does not generate
- No classifier catches everything, particularly prompt injection hidden inside documents
- Adds a step to every request, so it needs to be genuinely fast in your stack
Reach for it when
Filtering input and output around a production agent, especially where you need the guardrail itself to stay in the EU.
Where it falls down
Being the whole safety story. It is one layer; policy enforcement, blast-radius limits and logging are the others.
Running it
4 GB. Runs on almost anything. See the hardware sizing tables for how that maps to specific chips and cards, and the quantisation guide for what you give up at each bit width.
Free tiers carrying this model
| Provider | Type | The catch | Live limits |
|---|---|---|---|
| Mistral La Plateforme | First-party API | Not every Mistral model is commercially free even when the weights are public — Codestral ships under a non-production licence. Check per model, not per vendor. | check → |
Jurisdiction: European Union
Mistral is the only EU-headquartered lab shipping frontier-adjacent open weights. Contracting with an EU entity removes the international-transfer question entirely rather than solving it with a framework. Most of the Mistral open range is Apache 2.0, so you can also self-host and remove the vendor from the data path altogether.
Watch for: EU jurisdiction is not the same as EU data residency, and neither is the same as EU-only sub-processors. Ask for all three in writing if it matters to you. Also note that Codestral ships under a non-production licence — being a European vendor does not make every model commercially free.
Frequently asked
Can I use Shieldstral 1.0 3B commercially?
Apache 2.0. Unrestricted.
What hardware do I need to run Shieldstral 1.0 3B?
4 GB. Runs on almost anything. Weights alone are roughly 2 GB at Q4_K_M and 3.5 GB at Q8_0. Add KV cache on top of that, which grows with your context length.
What licence is Shieldstral 1.0 3B released under?
Apache 2.0. Full commercial use, modification and redistribution. Patent grant included. The most permissive licence in common use for open-weight models.
Where can I use Shieldstral 1.0 3B for free?
Free tiers carrying it include Mistral La Plateforme. Limits differ per provider and change often, so check each provider's own limits page. You can also self-host the weights, which has no rate limit at all.
Similar models
Mistral Large 3 675B
Multi-GPU datacentre, or hosted on La Plateforme.
DeepSeek-V4-Flash
Hosted, or 256 GB+ unified memory at Q4. Not a laptop model.
GLM-5.3-Flash
80-96 GB at Q4_K_M. A workstation or Ultra-class Mac.
Qwen3.8 27B
24 GB GPU at Q4_K_M, or a 32 GB Mac at Q6_K.
Wiring Shieldstral 1.0 3B into something real?
We build the evaluation harness, the failover and the cost ceilings around a model like this, so it survives contact with production.
Maps to AI agent development, AI automation development and AI strategy and consulting. Or see it working: our case studies.