mlsanityData to 7 Oct 2026

BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs

arXiv 2605.00689 ↗First posted 1 May 2026cs.CL cs.CRcited by 1

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

As Large Language Models (LLMs) are increasingly deployed in cross-linguistic contexts, ensuring safety across diverse regulatory and cultural environments has become a critical challenge. However, existing multilingual benchmarks largely rely on general risk taxonomies and machine-translated data, limiting evaluation to predefined risk categories and providing insufficient coverage of region-specific regulatory requirements and cultural contexts. To bridge these gaps, we introduce BabelSafe, a policy-grounded multilingual safety benchmark covering 13 language settings. BabelSafe is constructed from regional regulatory sources, with risk categories and fine-grained rules extracted from jurisdiction-specific regulatory documents directly used to guide the generation of multilingual safety data. During data generation, we further incorporate region-specific cultural contexts, enabling regulation-grounded and culturally contextualized evaluation across languages. Building on BabelSafe, we develop BabelGuard, a Diffusion Large Language Model (dLLM)-based guardrail model that supports multilingual safety judgment and policy-conditioned safety assessment. BabelGuard has two variants, a lightweight 1.5B model for fast `safe/unsafe' classification and a more capable 7B model for customizable policy-conditioned safety checking with detailed explanations. We evaluate BabelGuard against 11 strong guardrail baselines on 6 existing multilingual safety benchmarks and BabelSafe, demonstrating the strong performance of BabelGuard across these evaluation settings. We hope that BabelSafe and BabelGuard can help advance the development of regulation-aware and culturally contextualized multilingual guardrail systems.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 17 of its 23 references that are in the map. First posted on arXiv 1 May 2026.

Builds on

17 of 23 references.

Closest ancestors · 5

Same direction, newest first

  1. 2025Qwen3Guard Technical Report16 Oct
  2. 2025LinguaSafe: A Comprehensive Multilingual Safety Benchmark for Large Language Models18 Aug
  3. 2025Poly-Guard: Massive Multi-Domain Safety Policy-Grounded Guardrail Dataset18 Jun
  4. 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety21 Apr
  5. 2024Multilingual Blending: LLM Safety Alignment Evaluation with Language Mixture10 Jul

Other references · 12

  1. 2025Qwen3 Technical Reportcited by 8,195
  2. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
  3. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  4. 2024M3-Embedding: Multi-Linguality, Multi-Functionality, Multi-Granularity Text Embeddings Through Self-Knowledge Distillationcited by 1,050
  5. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
  6. 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 222
  7. 2025Fast-dLLM v2: Efficient Block-Diffusion LLMcited by 128
  8. 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
  9. 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 34
  10. 2024Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understandingcited by 34
  11. 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applicationscited by 24
  12. 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 16

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.