NHTSA Is Auditing How Tesla Certified the Cybercab

How Tesla's decision to self-certify a car with no steering wheel put the entire US autonomous-vehicle approval process on the table — and why Zoox already showed what happens next.

Tesla did not ask permission. It filed paperwork saying permission was unnecessary.

The first production Cybercabs reached public streets in Austin, Texas on Friday, September 4. Within hours, the National Highway Traffic Safety Administration opened an investigation into whether Tesla was allowed to put them there.

The NHTSA Cybercab investigation, docketed as audit query AQ26002, targets a single question with large consequences: Tesla built a vehicle with no steering wheel and no pedals, then self-certified it as compliant with all Federal Motor Vehicle Safety Standards. The agency wants to see the reasoning. In the filing, NHTSA said it would examine "the process and technical data on which Tesla relied" — and, pointedly, the extent to which Tesla concluded that certain federal standards simply do not apply to a car of this design.

Administrator Jonathan Morrison framed it without hostility. The agency supports automated vehicles, he said in a statement, but "we need to ensure that all of our laws are followed."

What Tesla actually did

Here is the mechanism, because the mechanism is the whole story.

US vehicle safety regulation runs on self-certification. Automakers assess their own compliance with FMVSS and attest to it; NHTSA polices after the fact rather than approving in advance. That system works when the standards and the vehicle share assumptions. It strains when they do not.

Several FMVSS provisions presuppose manual controls — a brake pedal, a steering wheel, a driver's seating position. A Cybercab has none. Tesla's certification therefore rests on a legal reading that those standards are inapplicable to a vehicle not designed for human driving, rather than on a claim that it satisfies them.

That is an aggressive but not absurd position, and the regulatory ground genuinely is shifting underneath it. The Department of Transportation proposed removing the brake pedal requirement for autonomously designed vehicles earlier this year. NHTSA acknowledged on Friday that it is revising parts of the FMVSS covering manual controls, and said it looks forward to removing unnecessary barriers to AV innovation.

Then it added the sentence that matters: until that work is finished, existing standards remain in force.

Tesla, in effect, certified against the rules it expects to exist rather than the rules that do. TechCrunch's report on the probe captures the timing precisely — the deployment and the investigation were separated by a matter of hours.

Zoox already ran this experiment

The most useful thing to know about the Cybercab audit is that it is not novel. It is a rerun.

In 2022, Amazon-owned Zoox self-certified its purpose-built robotaxi — also no steering wheel, also no pedals. NHTSA responded with a special order demanding information, then opened an audit query the following year. The same instrument now pointed at Tesla.

The outcome is the part Tesla should be reading closely. Zoox maintained that self-certification was sufficient. NHTSA did not accept it. Zoox eventually went through the formal route instead, filing for a temporary Part 555 exemption from eight separate FMVSS provisions, and cleared that final federal hurdle only in July 2026 — roughly four years after the original self-certification. The exemption came with a cap: 2,500 vehicles added to the commercial fleet per year for two years. Paid service in Las Vegas followed weeks later.

Four years, one exemption process, and a volume ceiling. That is the precedent. Zoox navigated it across two administrations, which weakens the argument that a friendlier regulatory posture alone shortens the path.

Who this changes things for

For Tesla, the exposure is scale, not permission. Nothing about this audit stops the Austin vehicles from operating today. But a Cybercab business built on fleet economics needs tens of thousands of units, and every one of them inherits the certification question. Tesla has begun asking prospective operators whether they want to buy and run Cybercab fleets — a model that pushes vehicles into third-party hands. Selling a fleet whose federal compliance basis is under active audit transfers a legal question to buyers who are much less equipped to absorb it.

For third-party fleet operators, that is the line to read twice. If NHTSA ultimately concludes the self-certification was insufficient, the remedy lands on vehicles already sold. Anyone signing up to own Cybercabs should be asking who carries that risk, in writing, before the audit closes.

For Zoox and Waymo, the audit is an argument for having done it the slow way. Both operate under regulatory arrangements that are settled. If Tesla's shortcut works, they spent years and legal budget on a process that turned out to be optional. If it does not, their approval is a durable competitive asset — and their fleets keep scaling while Tesla's certification basis is litigated.

For NHTSA, this is an institutional test. The agency is simultaneously rewriting the rules and enforcing the current version against a company that anticipated the rewrite. Handle it too gently and self-certification becomes a way to front-run regulation. Handle it too harshly and the agency contradicts its own stated deregulatory direction. There is no comfortable position here.

For the broader physical-AI market, this is what commercialization friction actually looks like. The capital has arrived — we covered the record round behind XPeng's humanoid robotics push and the field's move from pilots to platforms in Top 7 Humanoid Robotics Companies in 2026. The sensing stack has matured, as the funding behind Lyte's perception bet showed. What has not matured is the approval layer. Autonomy's binding constraint in 2026 is administrative, not technical.

The real question the audit asks

Strip away the vehicle and this is a dispute about who decides when a regulation stops applying.

Tesla's implicit answer is that a manufacturer can determine a standard is inapplicable to a novel design and proceed. NHTSA's answer is that the agency decides, through exemption or rulemaking, and that a manufacturer's confidence about pending reform is not a substitute.

If Tesla's reading prevails, self-certification becomes a genuine fast lane for hardware that outruns its rulebook — with all the upside and all the hazard that implies. If NHTSA's reading prevails, the Part 555 exemption process becomes the only door, and the practical speed limit on US robotaxi deployment is set by agency throughput rather than by engineering.

Neither answer is obviously right. But operators building on top of either assumption should know which bet they are making.

What to watch next

The audit query itself is an information demand, not a finding. Tesla will produce its certification analysis; NHTSA will assess whether the inapplicability argument holds. Watch three things: whether the agency escalates from audit query to a formal defect or non-compliance proceeding, whether Tesla quietly files for a Part 555 exemption as a hedge, and whether the FMVSS revision lands before the audit concludes.

That last one is the wild card. A completed rulemaking could retroactively make the question academic — which is presumably what Tesla is counting on.

Shipping ahead of the rules is a strategy. It is also a bet that the rules arrive before the enforcement does.

Frequently Asked Questions

Why is NHTSA investigating the Tesla Cybercab?

NHTSA opened audit query AQ26002 on September 4, 2026, hours after the first Cybercabs entered service in Austin. The agency is examining how Tesla self-certified a vehicle with no steering wheel or pedals as compliant with Federal Motor Vehicle Safety Standards, several of which presuppose manual controls.

What is vehicle self-certification?

In the United States, automakers assess their own compliance with Federal Motor Vehicle Safety Standards and attest to it, rather than obtaining pre-approval. NHTSA enforces after the fact through investigations, audits and recalls. The system assumes standards and vehicle designs share basic assumptions about how cars operate.

Can Tesla keep operating Cybercabs during the investigation?

Yes. An audit query is a demand for information, not a suspension order, so the Austin vehicles continue running. The risk is to scale rather than to current operations — every additional unit inherits the same certification question, including any sold to third-party fleet operators.

How did Zoox handle the same issue?

Zoox self-certified its steering-wheel-free robotaxi in 2022 and faced a NHTSA special order and audit query. It ultimately pursued a formal Part 555 exemption from eight FMVSS provisions, receiving final approval in July 2026 with a cap of 2,500 commercial vehicles per year for two years.

Editor's note — sources: NHTSA audit query AQ26002; TechCrunch's report on the investigation opening; NHTSA's 2023 special order to Zoox; TechCrunch on the Department of Transportation's proposal to remove brake-pedal requirements for autonomous vehicles; TechCrunch on Zoox clearing its final federal hurdle in July 2026; TechCrunch on Tesla soliciting third-party Cybercab fleet operators. Additional background: NHTSA's 2023 Zoox audit query (static.nhtsa.gov/odi/inv/2023/INOA-AQ23001-2603.PDF). Analysis and interpretation are Edgewisely's own.