AI Engine

The Most Capable Automotive Compliance AI

197 API endpoints, 22+ analysis skills, 13+ regulations, 1053 attack patterns — a complete AI-powered compliance engineering operating system.

Independent Benchmark Results

Codex Automotive Compliance Evaluation Suite — testing AI output quality against senior expert judgment across all ISO 21434 / 26262 analysis domains.

Before Optimization

87.8%

After Optimization

93.9%

Overall accuracy 87.8% → 93.9% (+6.1pp)

Expert Equivalence

8-12 Year Senior Expert

Our AI performs at the level of a senior automotive safety & cybersecurity expert with 8-12 years of hands-on experience in ISO 21434 and ISO 26262.

Evaluated By

GPT-5.4 Max + Claude Opus

Cross-validated against senior expert ground truth using structured automotive compliance test suites.

ModuleBefore OptimizationAfter OptimizationChange
HARA93.0%93.0%
TARA93.5%92.3%-1.2%
FTA78.4%100.0%+21.6%
SOTIF87.9%83.8%-4.1%
Test Plan81.8%100.0%+18.2%

FTA and Test Plan modules achieved 100% accuracy — perfect alignment with senior expert assessment.

197

API Endpoints

22+

AI Analysis Skills

13+

Regulations Covered

1053

MITRE ATT&CK ICS Patterns

3

Languages (EN/DE/ZH)

AI-Powered Analysis Engine

Gemini 2.0 powered analysis with structured reasoning, RAG-augmented knowledge, and deterministic fallbacks for every critical automotive safety and cybersecurity domain.

HARA — Hazard Analysis

AI

AI-generated hazard candidates with automatic S/E/C rating, ASIL determination (36 combinations), safety goal quantification, and domain-specific parameters.

TARA — Threat Assessment

AI

STRIDE-aligned threat generation with CIA impact rating, CAL computation, attack path generation, and TARA/HARA consistency checking.

FTA — Fault Tree Analysis

AI + Rules

LLM-driven fault tree generation with MOCUS MCS extraction, CCF modeling, component failure rates from FIDES/SN 29500, and importance measures.

Test Plan Generation

AI

Auto-generated test cases from HARA/TARA findings with traceability matrix, ASPICE SYS.4/SWE.6 alignment, and export to vTestStudio/pytest.

Delta Check — Change Impact

AI + Fuzzy

3-stage fuzzy matching (name → semantic embedding → LLM reasoning) for change request impact analysis across HARA/TARA/FTA artifacts.

Compliance Auto-Score

Rules

5-category weighted scoring (Technical 35%, Org 25%, Supply Chain 15%, Operational 15%, SUMS 10%) across R155, R156, ISO 21434, 26262, GDPR.

Integration & Toolchain

Bidirectional data exchange with industry-standard tools: Codebeamer/DOORS via ReqIF, Vector vTestStudio, AUTOSAR ARXML, and any Excel-based workflow.

ReqIF — Codebeamer/DOORS

Bidirectional

Bidirectional ReqIF 1.2 import/export with fuzzy attribute matching. Round-trip support for Codebeamer, IBM DOORS, and PTC Integrity.

ARXML — AUTOSAR Topology

Parser

Namespace-aware Autosar XML parsing: CAN/Ethernet clusters, ECU instances, SecOC configs, IPDU mappings, and topology building.

Excel HARA/TARA Import

AI + Rules

AI-powered column auto-detection (EN/CN/DE), quality scoring with import gates, S/E/C normalization, and duplicate detection.

OEM Questionnaire Parser

Adapter

Auto-detect and parse OEM-specific questionnaire formats (.xlsx/.csv). Column mapping preview and task queue integration.

vTestStudio / pytest Export

Export

Export test plans directly to Vector vTestStudio format or Python pytest framework. Full traceability to source HARA/TARA findings.

Multi-Skill Pipeline

Orchestration

Chain analysis skills in single API call: HARA → TARA → Compliance in one pipeline. 5 predefined chains with async job management.

Security & Attack Analysis

From topology modeling to attack path visualization — a complete security analysis toolkit backed by the largest automotive threat intelligence database.

Attack Path Analysis

Graph

Reachability analysis through interface topology with attack surface inference, feasibility computation, and interactive graph visualization.

Attack Tree Templates

5 Templates

5 pre-built attack trees: CAN Bus Spoofing, OTA Manipulation, V2X Spoofing, Key Fob Relay, Diagnostic Protocol Abuse.

SecOC Validator

Validator

Secure Onboard Communication configuration validation with CAN-based authentication scheme verification and crypto algorithm assessment.

CVE Monitoring

Real-time

Real-time CVE tracking with asset-vulnerability correlation, severity classification, and 6-state incident response workflow.

Topology Builder

Builder

System topology construction from ARXML or manual input with interface enumeration and trust level assignment.

CAPEC/CWE Knowledge Base

1053 Patterns

1053 MITRE ATT&CK ICS patterns mapped to automotive attack surfaces. The industry's most comprehensive threat intelligence for vehicle cybersecurity.

Traceability & Audit Readiness

VDA ASPICE golden thread traceability from requirements through HARA/TARA/FTA to test evidence — audit-ready at any moment.

ASPICE Work Product Tracking

VDA

VDA ASPICE Annex D compliance: SYS.1-4, SWE.1-6, SEC.1-4 work product tracking with document version control.

Golden Thread Visualization

Sankey

Sankey diagram for TÜV audits: requirements → HARA → TARA → FTA → Tests. One click to prove complete coverage.

Three-Axis Compliance Model

3D Model

Product Compliance × Management System × System Readiness — auto-recomputing 3D compliance scoring with 0-100 per axis.

Findings Engine

Engine

Automated delta, consistency, and assumption finding detection across HARA/TARA/FTA with severity rating and evidence linking.

Evidence Validator

SHA256

SHA256-based file integrity verification with regulation clause sufficiency assessment and cross-reference validation.

Enterprise Approval Workflow

Digital Sig

Multi-item digital signature approval with role-based approvers (Safety Engineer, Cybersecurity Expert, Quality Manager).

Regulation Intelligence

13+ automotive regulations with AI-powered monitoring, EU-CN dual compliance mapping, and supplier agreement generation.

EU-CN Compliance Matrix

60 Topics

60 mapping topics across 3 pillars with 5 gap types. Bilingual EN/ZH descriptions covering GB/T 44495, 44496 and EU equivalents.

Regulation Radar

AI + Crawler

AI-powered regulation update monitoring with UNECE crawler integration, project impact analysis, and automated compliance alerts.

Battery Passport

EU 2023/1542

EU 2023/1542 compliant passport with BMS tracking, SOC/SOH monitoring, and Catena-X compatible JSON-LD output.

GDPR Privacy Module

6 Modules

6-module privacy compliance: ROPA, cross-border transfers, DPIA, DPO assignment, data subject rights, and 6 vehicle data categories.

NCAP Readiness

Auto-Match

Auto-matching Euro NCAP / C-NCAP tests (AEB, LKA, DDAW, ESC) with readiness checklists and lab recommendations.

CIAD Agreement Generator

AI Gen

AI-generated supplier cybersecurity interface agreements with RASIC matrix, communication protocols, and batch generation.

Roadmap 2026

Atomic Chain Architecture

Next-generation modular analysis where every reasoning step is independently verifiable, composable, and auditable.

Q2 2026

Microservice Decomposition

4-service split: HARA, TARA, Homologation, Audit — independently scalable, independently deployable.

Q2 2026

Codebeamer Live Sync

Real-time bidirectional sync with PTC Codebeamer: requirement changes trigger automatic re-analysis.

Q3 2026

Continuous Compliance Monitor

Always-on compliance scoring that updates in real-time as requirements, threats, and regulations evolve.

Q4 2026

Multi-LLM Arbitration

Cross-validate analysis results across multiple LLM providers for highest confidence in safety-critical decisions.

Book a Working Session

Tell us where the pressure is highest: legacy programs, requirement changes, or audit readiness. We will tailor the session to your current workflow instead of giving you a generic demo.

Best if you include your current toolchain, active standards, and whether you are evaluating a pilot in the next 3-6 months.

What happens in the session

We map your current workflow, handoff points, and evidence bottlenecks across engineering and compliance.

We focus the walkthrough on the right path: legacy delta analysis, change-aware impact, or audit-ready evidence orchestration.

We identify whether a pilot is a fit, what data would be needed, and what success should look like.

Best suited for OEM, Tier-1, and compliance-heavy engineering teams.