NemoClaw

NemoClaw agents, sandboxed on your terms

NemoClaw-sandboxed OpenClaw agents deployed with NVIDIA NeMo Guardrails—age-appropriate content rails, topical confinement, and GPU-accelerated inference for your district. On ibl.ai you own all the code and the data, run it model-agnostic across any LLM, and pay with no per-seat pricing — so you can deploy anywhere, from your own cloud to a fully air-gapped network. No need to choose build vs. buy — you get both.

1.6M+Platform Users
400+Organizations
Syracuse UniversitySUNYGoogleNVIDIAMicrosoftOpenAIKaplan

“ibl.ai does amazing work and are great people.”

Paul LeBlanc, former President and CEO, Southern New Hampshire University
Don’t take our word for it?See what our partners say →
Want to read the source?View the code on GitHub →
On the ibl.ai cloudStart at $0, usage-based from thereFree tier with renewable monthly credits, no credit card. Move to your own infrastructure anytime, nothing to rebuild.Hosted deploymentSee pricing
On your infrastructureRun it in your own environmentYour cloud, on-premise or air-gapped, under your control. Backend and infrastructure under a perpetual license.Full code license

Prefer to build together? Our AI Transformation team builds agents and apps with yours, on your systems.

NVIDIA NeMo Guardrails on agents you own

ibl.ai runs NemoClaw-sandboxed OpenClaw agents with NVIDIA NeMo Guardrails: programmable rails, jailbreak and injection defense, PII redaction, audit logging and network isolation. Deployed through ibl.ai, the whole stack stays in your perimeter.

Where agents runNemoClaw deployed by ibl.aiYour GPUs, your network, air-gapped if neededHosted agent platformsThe vendor's cloud
GuardrailsNemoClaw deployed by ibl.aiNeMo Guardrails you configure and auditHosted agent platformsVendor policy, opaque
ModelsNemoClaw deployed by ibl.aiAny, including open-weight on your hardwareHosted agent platformsThe vendor's models
PricingNemoClaw deployed by ibl.aiUsage or flat license; no per-seat feesHosted agent platformsPer seat, per month

NemoClaw - OpenClaw AI Agents with NVIDIA NeMo Guardrails for K-12

Deploy OpenClaw AI agents with NVIDIA NeMo Guardrails—programmable safety rails that enforce age-appropriate content, prevent jailbreaks, block harmful interactions, and keep agents within approved topics.

ibl.ai combines the open-source OpenClaw agent framework with NVIDIA's NeMo Guardrails engine and NIM inference microservices, giving your district guardrailed AI agents with COPPA/CIPA/FERPA compliance and student safety built into every interaction.

What This Is

NemoClaw is NVIDIA's open-source reference stack for running agents such as OpenClaw inside OpenShell sandboxes. ibl.ai deploys NVIDIA NeMo Guardrails, a separate open-source library, alongside it, adding programmable safety rails that intercept every input and output. Where OpenClaw provides the agent runtime—orchestration, memory, skills, multi-channel deployment—NeMo Guardrails adds the student-safety envelope that K-12 environments demand.

NeMo Guardrails uses Colang, a domain-specific modeling language, to define rails declaratively. Input rails filter student messages for harmful content before they reach the LLM. Output rails enforce age-appropriate language and block unsuitable content. Topical rails confine tutoring agents to their subject area. Content safety rails provide multi-layer protection calibrated by grade band.

ibl.ai deploys NemoClaw on NVIDIA NIM inference microservices for GPU-accelerated model serving, integrates it with your district systems (PowerSchool, Clever, Google Classroom), and configures guardrail policies specific to K-12 compliance requirements. Every guardrail definition, every agent configuration, every integration adapter belongs to your district.

Why NemoClaw for K-12 Education

Age-Appropriate Content RailsDefine content safety guardrails calibrated by grade band—K-2, 3-5, 6-8, 9-12. NeMo Guardrails filters both input and output to ensure interactions remain developmentally appropriate. Rails are configurable per school, grade level, or individual student accommodations.
Jailbreak PreventionNeMo Guardrails detects jailbreak attempts—prompt injection, role-playing exploits, instruction override attacks—and blocks them before they reach the LLM. Students cannot trick agents into bypassing safety controls.
Topical ConfinementMath tutors stay in math. Science assistants stay in science. Topical rails prevent agents from answering questions outside their assigned subject area—no matter how creatively a student phrases the request.
PII Protection for MinorsInput and output rails automatically detect and redact personally identifiable information—student names, addresses, parent contact information—before it enters the LLM context. COPPA compliance by design.
GPU-Accelerated InferenceNVIDIA NIM microservices serve your LLMs on GPU-optimized containers with high-throughput, low-latency inference. Fast response times keep students engaged. Run open models like Nemotron 3, Llama, or Mistral on your own GPUs or connect to cloud-hosted models through the same guardrail pipeline.

NVIDIA NeMo Guardrails

Input RailsEvery student message passes through input rails before reaching the LLM. Rails check for harmful content, inappropriate language, personal information disclosure, and off-topic requests. Blocked inputs return a safe, age-appropriate response.
Output RailsEvery agent response passes through output rails before reaching the student. Rails enforce age-appropriate language, block unsuitable content, redact sensitive data, and validate educational accuracy against curriculum materials.
Topical RailsDefine approved conversation topics per agent and per grade level. A 3rd-grade math tutor stays within 3rd-grade math. Topical rails prevent agents from discussing topics outside the approved curriculum scope.
Dialog RailsControl conversational flows for student safety. Define mandatory escalation to teachers for concerning interactions, require disclosure statements, and enforce break reminders for extended sessions.
Retrieval RailsSecure your RAG pipeline. Retrieval rails ensure agents only surface age-appropriate content, filter out materials above a student's grade level, and prevent access to restricted administrative documents.
Colang Policy LanguageGuardrails are defined in Colang—a human-readable, version-controllable modeling language. Curriculum coordinators and technology directors can review safety policies. Engineers can test and version them like code.

Enterprise Hardening by ibl.ai

Security Patching & CVE Monitoring

We monitor both OpenClaw and NeMo Guardrails security advisories and apply patches before they reach your production environment.

Our team tracks CVEs across the full NemoClaw stack and manages updates aligned with your district's change management process.

Role-Based Access Controls

Deploy agents with granular permissions tied to your identity provider. Student agents have age-appropriate boundaries and strict content rails.

Teacher agents access different data and have different guardrail policies than administrator agents. All enforced at the infrastructure level.

Audit Logging & Compliance

Every agent action, guardrail trigger, blocked input, filtered output, and tool invocation is logged to your logging infrastructure.

COPPA/CIPA/FERPA-compliant by design. Guardrail audit trails provide evidence for district compliance reporting and parent transparency.

Network Isolation & Data Boundaries

Agents and NIM inference containers run in isolated network segments with strict egress controls. Student data never leaves your perimeter.

Guardrail evaluation happens within your security boundary—no student data sent to external services.

Defense-in-Depth Security

NemoClaw provides multiple independent security layers: OpenClaw's NanoClaw container isolation, NeMo Guardrails' content filtering, CIPA-compliant content moderation, and ibl.ai's enterprise hardening.

Each layer operates independently for maximum student safety.

District System Integrations

Student Information Systems

Connect NemoClaw agents to PowerSchool, Infinite Campus, Skyward, or Aeries.

Retrieval rails ensure agents only surface records appropriate for the user's role. PII redaction prevents student data from leaking into agent responses.

Learning Platforms

Integrate with Google Classroom, Canvas, Schoology, or Brightspace.

Topical rails keep tutoring agents within the assigned subject and grade level. Output rails validate responses against your adopted curriculum materials.

Rostering & Single Sign-OnConnect agents to Clever, ClassLink, or OneRoster for automatic rostering. Guardrail policies automatically apply based on school, grade, and section assignments.
Identity & Access ManagementIntegrate with Google Workspace for Education, Microsoft 365 Education, or Clever SSO. Agent permissions and content safety rails inherit from your existing role hierarchy.

Deployment Options

On-Premises (District Data Center) with NVIDIA GPUsFull deployment on your district infrastructure with NVIDIA NIM containers running on your GPU servers. Complete network isolation, data sovereignty, and maximum student data protection.
Private Cloud (Your AWS/Azure/GCP Account)Deploy in your own cloud tenancy with GPU instances, VPC isolation, private endpoints, and your encryption keys. NIM containers scale with demand. We configure; you own everything.
Hybrid (District + Cloud)Student data processing on-premises, compute-intensive inference in your cloud. Guardrails evaluate consistently across both environments. Secure tunnels with consistent safety controls.

What You Own

NemoClaw deployment with all guardrail policies, agent configurations, and content safety settings documented
Colang guardrail definitions—age-appropriate content rails, topical rails, dialog rails—in version-controlled repositories
Agent definitions, tool schemas, and system prompts alongside their safety policies
NVIDIA NIM container configurations for GPU-accelerated inference
District system integration adapters with full source code
Infrastructure as Code (Terraform/Helm) for repeatable deployments including GPU provisioning
Content safety dashboards, guardrail monitoring, and alerting configurations
Security runbooks and parent-facing transparency documentation

Engagement Model

Safety & Guardrail Assessment (1-2 weeks):Evaluate your infrastructure, COPPA/CIPA/FERPA requirements, and integration landscape. Define content safety baselines, guardrail policies per grade band, and approved topic boundaries.
Hardening & Guardrail Configuration (3-6 weeks):Apply district security, configure NeMo Guardrails with age-appropriate Colang policies, deploy NIM containers, build SIS/LMS integrations, and establish guardrail audit logging.
Agent Development & Safety Testing (2-4 weeks):Build your first set of guardrailed agents—subject tutors, teacher assistants, administrative aids. Red-team test content safety rails with age-inappropriate scenarios and jailbreak attempts.
Production Launch & Training (1-2 weeks):Controlled rollout with content safety monitoring dashboards. Knowledge transfer to your team for ongoing agent development, guardrail policy updates, and NIM operations.

Get Started

Architecture Review:Free 30-minute session to assess your district infrastructure readiness, GPU capacity, and student safety requirements.
Proof of Concept:Deploy one guardrailed tutoring agent with district integrations and NIM inference to validate the approach before broader investment.
District-Wide Deployment:Full-scale NemoClaw infrastructure with grade-band content safety policies, comprehensive agent library, NIM containers, monitoring, and ongoing support.
  • Free

    Get started

    $0per
    month

    No credit card required

    Get Started Free

    This includes:

    • Monthly credits to try agents, renewed each month
    • Build agents on any model, trained on your own documents
    • Chat on web, desktop and mobile
    • Documentation and community support

    For one person trying things out

  • Most popular

    Pro

    For everyday work

    $15per
    month

    Billed monthly

    Subscribe to Pro

    Everything in Free, plus:

    • More credits every month, with auto-recharge when you want it
    • Voice, workflows and your tools through MCP
    • Analytics, embedding and the API
    • Email support

    For professionals and small teams running agents every day

  • Max

    For all-day work

    $50per
    month

    Billed monthly

    Subscribe to Max

    Everything in Pro, plus:

    • A much larger monthly credit allowance
    • Evaluations, spend limits and monetization
    • Roles and teams for access control
    • Priority support and early access

    For teams and departments that depend on agents

  • Ultra

    For your largest deployments

    $100per
    month

    Billed monthly

    Subscribe to Ultra

    Everything in Max, plus:

    • The largest monthly credit allowance
    • Several organizations and single sign-on
    • Hand-off to human agents
    • Dedicated support and hands-on onboarding

    For organizations formalizing agents across many teams

  • Recommended

    Enterprise

    Own the Platform

    Custom quote

    Pilots from $15K · one-time

    Contact us

    This includes:

    • Full codebase ownership under a perpetual license
    • Deploy anywhere — on-prem, your VPC, air-gapped, or managed SaaS
    • Start with a pilot — prove value on real data first
    • Custom AI engineering — integrations, SSO, SIS, LMS, agents
    • Run any LLM — Claude, GPT, Gemini, Llama; switch anytime
    • SOC 2 & compliance — enterprise security with audit support

Enterprise — Own the Platform. Own the entire platform. We transfer the full source under a perpetual license and deploy it on-premise, in your cloud, or air-gapped — zero vendor lock-in, run any LLM. Start with a pilot, then scale with our engineers wiring it into your data and systems.

Self-serve prices in USD, billed monthly; change or cancel your plan anytime from Billing in the app. Enterprise is scoped with our team: a pilot from $15K, a one-time deployment, or full codebase ownership on a custom quote.

What our partners say about us

Chris Gabriel

Chris Gabriel | Google

Lorena Barba

Lorena Barba | George Washington University

Dr. Juana Mendenhall

Dr. Juana Mendenhall | Morehouse College

Juile Diop

Juile Diop | MIT

Adam Tetelman

Adam Tetelman | Nvidia

Jason Dom

Jason Dom | American Public University System

Benjamin Breyer

Benjamin Breyer | Columbia University

Ken Fujiuchi

Ken Fujiuchi | SUNY

Erika Digirolamo

Erika Digirolamo | Monroe College

David Flaten

David Flaten | SUNY

David Vise

David Vise | Modern States Education Alliance

Linda Wood

Linda Wood | ARM Institute (U.S. Department of Defense)

Chris Gabriel

Chris Gabriel | Google

Lorena Barba

Lorena Barba | George Washington University

Dr. Juana Mendenhall

Dr. Juana Mendenhall | Morehouse College

Juile Diop

Juile Diop | MIT

Adam Tetelman

Adam Tetelman | Nvidia

Jason Dom

Jason Dom | American Public University System

Benjamin Breyer

Benjamin Breyer | Columbia University

Ken Fujiuchi

Ken Fujiuchi | SUNY

Erika Digirolamo

Erika Digirolamo | Monroe College

David Flaten

David Flaten | SUNY

David Vise

David Vise | Modern States Education Alliance

Linda Wood

Linda Wood | ARM Institute (U.S. Department of Defense)

Frequently Asked Questions

Bring us a hard problem. Keep the code.

Run NemoClaw on your own terms

Start free on our cloud today, or take the whole codebase into your own infrastructure. Either way our engineers work alongside your team, and you own all the code and the data.

ibl.ai is family-owned and operated from New York, NY — a U.S.-headquartered, domestically-owned long-term partner, not a vendor that sells licenses and moves on. · SOC 2 Type II certified