Mobileye AEB Development Earns First TÜV SÜD Certificate

Mobileye Receives First TÜV SÜD Certificate for AEB Development

On October 22, Mobileye announced that its automatic emergency braking (AEB) development process had received its first inspection certificate from independent safety auditor TÜV SÜD. The certificate confirms that Mobileye’s AEB development process meets the requirements of ISO 21448, also known as Safety of the Intended Functionality (SOTIF). The assessment examined the development process and the measures used to identify, evaluate, and mitigate risks associated with advanced driver-assistance systems (ADAS). The certification provides third-party confirmation of the process against the specified standard, focusing on potential hazards associated with system performance limitations and operating conditions rather than restricting the assessment to failures alone.

What the ISO 21448 Assessment Examined

The independent TÜV SÜD audit evaluated whether Mobileye’s AEB development process conforms to ISO 21448 requirements. The assessment covered the methods used to identify, evaluate, and mitigate potential risks during development. Particular attention was given to limitations inherent in sensors and perception systems, as well as the real-world conditions in which ADAS operate. These factors can affect how a system perceives its surroundings and performs its intended functions. The certificate confirms the assessed development process meets the standard’s requirements; the announcement does not establish that every possible operating scenario has been eliminated or that the system is free from all potential hazards.

How SOTIF Complements Functional Safety

ISO 21448, or SOTIF, complements functional-safety disciplines by addressing hazards that may arise even when a system has not experienced a conventional failure. Such hazards can result from performance limitations or reasonably foreseeable misuse. In automotive applications, this distinction is important because sensors, perception systems, and the environments in which driver-assistance technologies operate can introduce limitations that affect intended functionality. SOTIF provides a framework for evaluating and mitigating these risks as part of development. Mobileye’s inspection certificate relates specifically to its AEB development process and its conformity with ISO 21448, as described in the October 22 announcement.

Implications for Advanced Driver-Assistance System Development

The certificate provides independent confirmation that Mobileye’s AEB development process meets ISO 21448 requirements, bringing external assessment to its approach to intended-functionality risks. Automatic emergency braking depends on a system’s ability to interpret relevant conditions and respond as designed, making the evaluation of sensor limitations, perception capabilities, and real-world operating conditions an important part of development. By assessing the processes used to identify, evaluate, and mitigate these risks, the audit addresses safety considerations that extend beyond conventional component or system failures. The announcement does not specify changes to product availability, vehicle applications, performance metrics, or deployment schedules resulting from the certification.

Industry Impact & Outlook

Mobileye’s TÜV SÜD inspection certificate highlights the role of independent assessment in evaluating automotive development processes against standards addressing intended-functionality risks. For automakers and ADAS developers, ISO 21448 is relevant because it considers hazards associated with performance limitations and foreseeable misuse, alongside the concerns covered by functional safety. The assessment may provide stakeholders with additional evidence about how Mobileye approaches risk identification and mitigation during AEB development, although the announcement does not establish broader commercial or regulatory consequences. Further developments would depend on subsequent company disclosures and any additional information about the application of the assessed process across products or vehicle programs.

Frequently Asked Questions

What certificate did Mobileye receive from TÜV SÜD?
Mobileye received its first inspection certificate from TÜV SÜD for its automatic emergency braking development process, according to its October 22 announcement. The certificate confirms that the assessed process meets the requirements of ISO 21448, also known as Safety of the Intended Functionality. The independent assessment examined the development process and the measures used to identify, evaluate, and mitigate risks. It is a confirmation of process conformity with the specified standard, rather than a claim that every possible hazard has been eliminated or that the system cannot encounter performance limitations.

What is ISO 21448, also known as SOTIF?
ISO 21448 is a standard addressing Safety of the Intended Functionality, commonly abbreviated as SOTIF. It focuses on hazards that can arise from performance limitations or reasonably foreseeable misuse, rather than only from system failures. In advanced driver-assistance systems, these concerns can involve sensor limitations, perception-system capabilities, and real-world operating conditions. SOTIF complements functional-safety disciplines by addressing this additional category of risk. In Mobileye’s case, TÜV SÜD assessed whether the company’s automatic emergency braking development process met the requirements of this standard.

What did TÜV SÜD assess during the inspection?
TÜV SÜD examined whether Mobileye’s automatic emergency braking development process conformed to ISO 21448 requirements. The assessment reviewed the process and the measures used to identify, evaluate, and mitigate risks associated with intended functionality. It included consideration of limitations inherent in sensors and perception systems, together with the real-world conditions in which advanced driver-assistance systems operate. The resulting certificate provides independent confirmation of the assessed process’s conformity with the standard. The announcement does not provide detailed audit findings, test results, performance measurements, or a list of individual vehicle models covered by the assessment.

Why is SOTIF relevant to automatic emergency braking?
SOTIF is relevant to automatic emergency braking because potential hazards can arise from performance limitations even when a system has not experienced a conventional failure. AEB development must account for the limitations of sensors and perception systems, as well as the real-world conditions in which the technology operates. ISO 21448 provides a framework for identifying, evaluating, and mitigating risks associated with intended functionality. Mobileye’s inspection certificate confirms that its assessed development process meets the standard’s requirements. However, the announcement does not establish that all possible scenarios have been addressed or that every potential risk has been eliminated.

Does the TÜV SÜD certificate mean Mobileye’s AEB system is completely risk-free?
No, the announcement does not establish that Mobileye’s automatic emergency braking system is completely risk-free. The certificate confirms that the assessed development process meets ISO 21448 requirements, which address hazards associated with performance limitations and reasonably foreseeable misuse. The independent audit considered how risks are identified, evaluated, and mitigated, including those involving sensors, perception systems, and real-world operating conditions. Such process conformity should not be interpreted as proof that every possible hazard has been eliminated. The announcement also does not provide evidence of universal performance across all vehicles, environments, or operating scenarios.