Regulators opened an audit into how Tesla certified a Cybercab with no steering wheel

The National Highway Traffic Safety Administration has opened a formal audit into how Tesla certified the Cybercab, a two-seat robotaxi built without a steering wheel, foot pedals or side mirrors, as road-legal under federal vehicle safety rules. The audit began the same week Tesla started charging passengers for Cybercab rides on public streets in Austin, meaning close to a thousand vehicles are already operating commercially while the agency examines the paperwork behind their approval.

What Audit Query AQ26002 Covers

The agency’s review, designated Audit Query AQ26002, applies to roughly 1,000 Cybercab units that Tesla has built and deployed. It is a compliance audit rather than a crash investigation or a review of how well the vehicle’s driving software performs on the road. Investigators are not asking whether the Cybercab can navigate Austin traffic; they are asking whether Tesla followed the correct process when it decided the car met federal motor vehicle safety standards in the first place.

That distinction matters because Tesla did not seek a special exemption before putting the Cybercab on public roads. Instead, the company relied on self-certification, the standard method automakers use to affirm compliance with the Federal Motor Vehicle Safety Standards without pre-approval from regulators. NHTSA can audit that self-certification at any time, and it has now requested the engineering data and testing records Tesla used to reach its conclusion.

A Car Designed Around Missing Controls

Federal vehicle safety standards were written decades ago around the assumption that every car has a driver holding a wheel, pressing pedals and checking mirrors. Large sections of that rulebook reference those components directly, from how a steering column must collapse in a crash to how mirrors must be positioned for visibility. The Cybercab has none of them, which forces Tesla to argue that entire categories of a standard simply do not apply to a vehicle with no human at the controls.

According to reporting on the audit, regulators want to see exactly which standards Tesla determined were inapplicable and why, along with the technical data supporting those calls. The certification process for a vehicle without conventional controls has no direct precedent at NHTSA, since no automaker has previously sold a steering-wheel-free passenger car in the United States at commercial scale.

A Launch That Outpaced the Paperwork

Tesla began fare-collecting Cybercab service in Austin on September 3, the same day NHTSA opened its audit. The timing has drawn criticism from safety advocates who argue the agency should have resolved certification questions before passengers started riding in a car with no manual override. A former NHTSA administrator described the agency as caught off guard by how quickly Tesla moved from testing to commercial deployment.

The rollout has continued to expand even as the audit remains open. Within days of the Austin launch, reports indicated Tesla had shipped Cybercab units to Japan for evaluation there, even as the U.S. review of the vehicle’s domestic certification was still underway. That parallel timeline underscores how far ahead of regulatory resolution Tesla’s commercial plans have moved.

What NHTSA Can Do With the Findings

An audit query is an information-gathering step, not a penalty. If NHTSA concludes Tesla’s self-certification was sound, the Cybercab program continues without further agency action. If the agency finds gaps in the technical justification, it can escalate to a formal investigation, request a recall, or in a more severe outcome, determine that vehicles on the road do not meet applicable standards and require Tesla to bring them into compliance or remove them from service.

None of those outcomes has been reached. NHTSA has been explicit that it has not concluded the Cybercab is unsafe or that its deployment is illegal; the audit is a request for records, not a finding. Tesla has not publicly detailed its response, and the company has continued normal Cybercab operations in Austin while the review proceeds.

Why the Certification Question Is Unusual

Most NHTSA audits involve a component failure, a defect pattern, or a specific safety complaint that triggers scrutiny of an existing part. AQ26002 is different because it questions the underlying premise of certification for an entire vehicle category. Robotaxi programs from other companies have generally kept a steering wheel and pedals in place, even when a human safety operator was not actively driving, in part to avoid exactly this kind of dispute over which federal standards still apply.

By removing those controls entirely, Tesla positioned the Cybercab as a test case for how far a manufacturer can go in reinterpreting decades-old safety rules for a vehicle nobody drives. The outcome of the audit will likely shape whether other automakers attempt similar no-controls designs, or whether they conclude that keeping a wheel and pedals in place, even as a formality, remains the safer regulatory path.

An Expanding Rollout While the Review Continues

Tesla has not paused Cybercab operations or expansion plans while the audit proceeds. Days after the Austin launch, reporting described Cybercab units arriving in Japan for evaluation there, a signal that the company intends to pursue international deployment on a timeline independent of the domestic certification questions NHTSA is still working through. That parallel push has drawn its own criticism, with observers noting that a vehicle facing an open compliance audit in its home market is simultaneously being introduced to a second country’s roadways and regulators.

A former NHTSA administrator described the agency as caught off guard by the pace of Tesla’s rollout, saying regulators were left in a reactive position once fare-collecting rides had already begun rather than being consulted before commercial service started. That sequencing, launch first, audit second, has become as much a part of the controversy as the certification questions themselves, since it leaves paying passengers riding in the vehicles while the underlying legal question of their road-legal status remains formally unresolved.

Competing robotaxi operators, including services that remove a human driver from behind the wheel but still equip vehicles with a steering wheel and pedals, have generally avoided the specific dispute now facing Tesla. By keeping those components physically present, even when no one uses them during automated operation, those companies sidestep the argument over which crash-safety standards apply to a car that has no way for anyone to manually steer or brake it. Tesla’s decision to strip the Cybercab down to a design with no manual controls at all was a deliberate departure from that more cautious approach, one company executives have framed as a simpler and cheaper path to a purpose-built robotaxi. AQ26002 is, in effect, the first real test of whether federal regulators agree that approach can be self-certified rather than pre-approved, a question whose answer will shape how aggressively other manufacturers pursue similar no-controls vehicle designs in the years ahead.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview