google-gemini-3-pro-pre-release-model-card

# Gemini 3 Pro Model Card

### ⚠️ This is a mirror to the pre-release model card taht was officially published by Google @ https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-3-Pro-Model-Card.pdf and subsequentially yanked. It will get outdated by the actual release version in a few hours (date of publication Nov 18, 13:16 CET)

_Model card published: November, 2025_

# Gemini 3 Pro - Model Card

**_Model Cards_** _are intended to provide essential information on Gemini models, including known limitations, mitigation approaches, and safety performance. Model cards may be updated from_

_time-to-time; for example, to include updated evaluations as the model is improved or revised. See the_ [_Google DeepMind site_](https://deepmind.google/models/model-cards/) _for a comprehensive list of model cards._

This model card includes more essential information about the Gemini 3 family of models than previous model cards did. We hope more information about the training dataset, distribution, and intended uses will empower developers with deeper insights and help build more robust and responsible downstream applications.

_Published / Model Release: November 2025_

## Model Information

**Description**: Gemini 3 Pro is the next generation in the Gemini series of models, a suite of

highly-capable, natively multimodal, reasoning models. Gemini 3 Pro is now Google's most advanced model for complex tasks, and can comprehend vast datasets, challenging problems from different information sources, including text, audio, images, video, and entire code repositories.

**Model dependencies:** This model is not a modification or a fine-tune of a prior model.

**Inputs:** Text strings (e.g., a question, a prompt, document(s) to be summarized), images, audio, and video files, with a token context window of up to 1M.

**Outputs**: Text, with a 64K token output.

**Architecture**: Gemini 3 Pro is a sparse mixture-of-experts (MoE) ([Clark et al., 2022](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D41%26zoom%3D100%2C46%2C662); [Du et al., 2021](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D40%26zoom%3D100%2C46%2C500); [Fedus](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf) [et al., 2021](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf); [Jiang et al., 2024](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D41%26zoom%3D100%2C46%2C662), [Lepikhin et al., 2020](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D41%26zoom%3D100%2C46%2C662); [Riquelme et al., 2021](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D41%26zoom%3D100%2C46%2C662); [Roller et al., 2021](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D43%26zoom%3D100%2C46%2C830); [Shazeer et al.,](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D41%26zoom%3D100%2C46%2C662) [2017](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D41%26zoom%3D100%2C46%2C662)) transformer-based model ([Vaswani et al., 2017](https://storage.googleapis.com/deepmind-media/gemini/gemini_v2_5_report.pdf#page%3D41%26zoom%3D100%2C46%2C662)) with native multimodal support for text, vision, and audio inputs. Sparse MoE models activate a subset of model parameters per input token by learning to dynamically route tokens to a subset of parameters (experts); this allows them to decouple total model capacity from computation and serving cost per token. Developments to the model architecture contribute to the significantly improved performance from previous model families.

## Model Data

**Training Dataset:** The pre-training dataset was a large-scale, diverse collection of data encompassing a wide range of domains and modalities, which included publicly-available web-documents, text, code (various programming languages), images, audio (including speech and other audio types) and video.

The post-training dataset consisted of vetted instruction tuning data and was a collection of multimodal data with paired instructions and responses in addition to human preference and tool-use data. Gemini 3 Pro is trained using reinforcement learning techniques that can leverage multi-step reasoning, problem-solving and theorem-proving data.

The training dataset also includes: publicly available datasets that are readily downloadable; data obtained by crawlers; licensed data obtained via commercial licensing agreements; user data (i.e., data collected from users of Google products and services to train AI models, along with user interactions with the model) in accordance with Google's relevant terms of service, privacy policy, service-specific policies, and pursuant to user controls, where appropriate; other datasets that Google acquires or generates in the course of its business operations, or directly from its workforce; and AI-generated synthetic data.

**Training Data Processing:** Data filtering and preprocessing included techniques such as deduplication, honoring robots.txt, safety filtering in-line with [Google's commitment to advancing AI safely and](https://ai.google/responsibility/safety/) [responsibly](https://ai.google/responsibility/safety/), and quality filtering to mitigate risks and improve training data reliability. Once data is collected, it is cleaned and preprocessed to make it suitable for training. This process involves, on a

case-by-case basis, filtering irrelevant or harmful content, text, and other modalities, including filtering content that is pornographic, violent, or violative of child sexual abuse material (CSAM) laws.

## Implementation and Sustainability

**Hardware:** Gemini 3 Pro was trained using [Google's Tensor Processing Units](https://cloud.google.com/tpu?e=48754805&hl=en) (TPUs). TPUs are specifically designed to handle the massive computations involved in training LLMs and can speed up training considerably compared to CPUs. TPUs often come with large amounts of high-bandwidth memory, allowing for the handling of large models and batch sizes during training, which can lead to better model quality. TPU Pods (large clusters of TPUs) also provide a scalable solution for handling the growing complexity of large foundation models. Training can be distributed across multiple TPU devices for faster and more efficient processing.

The efficiencies gained through the use of TPUs are aligned with Google's [commitment to operate](https://sustainability.google/operating-sustainably/) [sustainably](https://sustainability.google/operating-sustainably/).

**Software:** Training was done using [JAX](https://github.com/google/jax) and [ML Pathways](https://blog.google/technology/ai/introducing-pathways-next-generation-ai-architecture/).

## Distribution

The Gemini family of models, including Gemini 3 Pro, are distributed in the following channels; respective documentation shared in line:

- [Gemini App](http://gemini.google.com/)
- [Google Cloud / Vertex AI](https://pantheon.corp.google.com/vertex-ai/publishers/google/model-garden/)
- [Google AI Studio](https://aistudio.google.com/)
- [Gemini API](https://ai.google.dev/gemini-api/docs/models)
- [Google AI Mode](https://search.google/ways-to-search/ai-mode/)
- [Google Antigravity](http://antigravity.google/docs)

Our models are available to downstream providers via an application program interface (API) and subject to relevant terms of use. There is no required hardware or software to use the model. For AI Studio and Gemini API, see the [Gemini API Additional Terms of Service](https://ai.google.dev/gemini-api/terms); for Vertex AI, see [Google](https://cloud.google.com/terms/) [Cloud Platform Terms of Service](https://cloud.google.com/terms/). For more information, see [Gemini Model API instructions](https://ai.google.dev/gemini-api/docs/) and [Gemini](https://docs.cloud.google.com/vertex-ai/generative-ai/docs/start/quickstart?usertype=adc) [API in Vertex AI quickstart](https://docs.cloud.google.com/vertex-ai/generative-ai/docs/start/quickstart?usertype=adc).

## Evaluation

**Approach**: Gemini 3 Pro was evaluated across a range of benchmarks, including reasoning, multimodal capabilities, agentic tool use, multi-lingual performance, and long-context. Additional benchmarks and details on approach, results and their methodologies can be found at: [deepmind.com/models/evals/gemini-3-pro](http://deepmind.com/models/evals/gemini-3-pro).

**Results:** Gemini 3 Pro significantly outperforms Gemini 2.5 Pro across a range of benchmarks requiring enhanced reasoning and multimodal capabilities. Results as of November, 2025 are listed below:


## Intended Usage and Limitations

**Benefit and Intended Usage:** Gemini 3 Pro is our most intelligent and adaptive model yet, capable of helping with real-world complexity, solving problems that require enhanced reasoning and intelligence, creativity, strategic planning and making improvements step-by-step. It is particularly well-suited for applications that require: agentic performance, advanced coding, long context and/or multimodal understanding, and/or algorithmic development.

**Known Limitations:** Gemini 3 Pro may exhibit some of the general limitations of foundation models, such as hallucinations. There may also be occasional slowness or timeout issues. The knowledge cutoff date for Gemini 3 Pro was January 2025.

**Acceptable Usage:** [Google's Generative AI Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy) applies to uses of the model in accordance with the applicable terms of service. Additionally, the model should not be integrated into certain systems (also found in [Google's Generative AI Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy)), including those that: (1) engage in dangerous or illicit activities, or otherwise violate applicable laws or regulations, (2) compromise the security of others' or Google's services, (3) engage in sexually explicit, violent, hateful, or harmful activities, (4) engage in misinformation, misrepresentation, or misleading activities.

## Ethics and Content Safety

**Evaluation Approach:** Gemini 3 Pro was developed in partnership with internal safety, security, and responsibility teams. A range of evaluations and red teaming activities were conducted to help improve the model and inform decision-making. These evaluations and activities align with [Google's AI Principles](https://ai.google/responsibility/principles/) and [responsible AI approach](https://ai.google/static/documents/ai-responsibility-update-published-february-2025.pdf), as well as Google's Generative AI policies (e.g. [Gen AI Prohibited Use](https://policies.google.com/terms/generative-ai/use-policy?e=IdentityBoqPoliciesUiAITestKitchenSSAT%3A%3ALaunch%2C-IdentityBoqPoliciesUiBardSSAT%3A%3ALaunch%2C-IdentityBoqPoliciesUiGoodallSSAT%3A%3ALaunch%2CIdentityBoqPoliciesUiAdditionalAup%3A%3ALaunch) [Policy](https://policies.google.com/terms/generative-ai/use-policy?e=IdentityBoqPoliciesUiAITestKitchenSSAT%3A%3ALaunch%2C-IdentityBoqPoliciesUiBardSSAT%3A%3ALaunch%2C-IdentityBoqPoliciesUiGoodallSSAT%3A%3ALaunch%2CIdentityBoqPoliciesUiAdditionalAup%3A%3ALaunch) and the [Gemini API Additional Terms of Service](https://ai.google.dev/gemini-api/terms)).

Evaluation types included but were not limited to:

- **Training/Development Evaluations** including automated and human evaluations carried out continuously throughout and after the model's training, to monitor its progress and performance;
- **Human Red Teaming** conducted by specialist teams who sit outside of the model development team, across the policies and desiderata, deliberately trying to spot weaknesses and ensure the model adheres to safety policies and desired outcomes;
- **Automated Red Teaming** to dynamically evaluate Gemini for safety and security considerations at scale, complementing human red teaming and static evaluations;
- **Ethics & Safety Reviews** were conducted ahead of the model's release

In addition, we perform testing following the guidelines in [Google DeepMind's Frontier Safety](https://storage.googleapis.com/deepmind-media/DeepMind.com/Blog/strengthening-our-frontier-safety-framework/frontier-safety-framework_3.pdf) [Framework](https://storage.googleapis.com/deepmind-media/DeepMind.com/Blog/strengthening-our-frontier-safety-framework/frontier-safety-framework_3.pdf) (FSF).

**Safety Policies**: Gemini's safety policies aim to prevent our Generative AI models from generating harmful content, including:

- Content related to child sexual abuse material and exploitation
- Hate speech (e.g., dehumanizing members of protected groups)
- Dangerous content (e.g., promoting suicide, or instructing in activities that could cause real-world harm)
- Harassment (e.g., encouraging violence against people)
- Sexually explicit content
- Medical advice that runs contrary to scientific or medical consensus

**Training and Development Evaluation Results:** Results for some of the internal safety evaluations conducted during the development phase are listed below. The evaluation results are for automated evaluations and not human evaluation or red teaming. Scores are provided as an absolute percentage increase or decrease in performance compared to the indicated model, as described below. Overall, Gemini 3 Pro outperforms Gemini 2.5 Pro across both safety and tone, while keeping unjustified refusals low. We mark improvements in green and regressions in red.

| Evaluation¹ | Description | Gemini 3 Pro<br><br>vs. Gemini 2.5 Pro |
| --- | --- | --- |
| Text to Text Safety | Automated content safety evaluation measuring safety policies | \-10.4% |
| Multilingual Safety | Automated safety policy evaluation across multiple languages | +0.2% (non-egregious) |
| Image to Text Safety | Automated content safety evaluation measuring safety policies | +3.1% (non-egregious) |
| Tone² | Automated evaluation measuring objective tone of model refusal | +7.9% |
| Unjustified-refusals | Automated evaluation measuring model's ability to respond to borderline prompts while remaining safe | +3.7% (non-egregious) |

We continue to improve our internal evaluations, including refining automated evaluations to reduce false positives and negatives, as well as update query sets to ensure balance and maintain a high

¹The ordering of evaluations in this table has changed from previous iterations of the 2.5 Flash-Lite model card in order to list safety evaluations together and improve readability. The type of evaluations listed have remained the same.

² For tone and instruction following, a positive percentage increase represents an improvement in the tone of the model on sensitive topics and the model's ability to follow instructions while remaining safe compared to Gemini 2.5 Pro. We mark improvements in green and regressions in red.

standard of results. The performance results reported below are computed with improved evaluations and thus are not directly comparable with performance results found in previous Gemini model cards.

We expect variation in our automated safety evaluations results, which is why we review flagged content to check for egregious or dangerous material. Our manual review confirmed losses were overwhelmingly either a) false positives or b) not egregious.

**Human Red Teaming Results:** We conduct manual red teaming by specialist teams who sit outside of the model development team. High-level findings are fed back to the model team. For child safety evaluations, Gemini 3 Pro satisfied required launch thresholds, which were developed by expert teams to protect children online and meet [Google's commitments to child safety](https://blog.google/technology/safety-security/an-update-on-our-child-safety-efforts-and-commitments/) across our models and Google products. For content safety policies generally, including child safety, we saw similar or improved safety performance compared to Gemini 2.5 Pro. Compared to 2.5 Pro, the scope of red teaming was expanded to cover more potential issues outside of our strict policies, and found no egregious concerns.

**Risks and Mitigations:** Safety and responsibility was built into Gemini 3 Pro throughout the training and deployment lifecycle, including pre-training, post-training, and product-level mitigations. Mitigations include, but are not limited to:

- dataset filtering;
- conditional pre-training;
- supervised fine-tuning;
- reinforcement learning from human and critic feedback;
- safety policies and desiderata;
- product-level mitigations such as safety filtering.

The main risks for Gemini 3 Pro are: a) jailbreak vulnerability (improved compared to Gemini 2.5 Pro but still an open research problem), and b) possible degradation in multi-turn conversations.

## Frontier Safety

We evaluated Gemini 3 Pro as outlined in our latest [Frontier Safety Framework](https://storage.googleapis.com/deepmind-media/DeepMind.com/Blog/strengthening-our-frontier-safety-framework/frontier-safety-framework_3.pdf) (September-2025), and found that it did not reach any critical capability levels as outlined in the table below:

| **Domain** | **Key Results for Gemini 3 Pro** | **CCL** | **CCL**<br><br>**reached?** |
| --- | --- | --- | --- |
| CBRN | The model provides accurate and occasionally actionable information but generally fails to offer novel or sufficiently complete and detailed instructions to significantly enhance the capabilities of low to medium resourced threat actors. | Uplift Level 1 | CCL not reached |
| Cybersecurity | On key skills benchmark, v1 hard challenges: 11/12 challenge solved; v2 challenges: 0/13 solved end-to-end. Alert threshold met. | Uplift Level 1 | CCL not reached |
| Harmful Manipulation | Model manipulative efficacy improves on non-generative AI baseline, but shows no significant uplift versus prior models and did not near alert thresholds. | Level 1 (exploratory) | CCL not reached |
| Machine Learning R&D | Gemini 3 Pro performs better than Gemini 2.5 models, especially on the Scaling Law Experiment and Optimize LLM Foundry tasks in RE-Bench (Wijk et al., 2024). However the aggregate score is still substantially below the alert threshold for the CCLs. | Acceleration level 1 Automation level 1 | CCL not reached |
| Misalignment (Exploratory) | Agent solves 3/11 situational awareness challenges and 1/4 stealth challenges. | Instrumental Reasoning Levels 1 + 2 | CCL not reached |

More details can be found in the [Gemini 3 Pro Frontier Safety Framework Report](https://deepmind.google/models/fsf-reports/gemini-3-pro/).

搜集汇总

背景与挑战

背景概述

该数据集是Gemini 3 Pro预发布模型卡的镜像，提供了这一新一代多模态推理模型的详细技术信息，包括其稀疏MoE架构、训练数据组成以及评估结果。模型发布于2025年11月，遵循Apache 2.0许可证，适用于需要高级推理和多模态理解的应用场景。