NVIDIA Halos OS brings ISO 26262-certified safety stack to commercial robotaxis, with four active global deployments

NVIDIA detailed the production architecture of its Halos Operating System at GTC Taipei on June 10, 2026, announcing four simultaneous commercial robotaxi deployments across Munich, Taiwan, Southeast Asia, and Saudi Arabia — all running on NVIDIA DRIVE Hyperion.

What's new

Halos OS is a three-layer platform that serves as the unified safety foundation for NVIDIA-powered autonomous vehicles:

• Halos Core — a certified operating system built on NVIDIA DriveOS. Compliant with ISO 26262 ASIL D, the highest automotive safety integrity level. Features a hypervisor that isolates safety-critical functions from non-safety functions, and includes the TensorRT Edge-LLM open-source framework for high-performance LLM inference in-vehicle.
• Halos SDK — middleware providing sensor abstraction and standardized hardware interfaces across vehicle platforms.
• Halos Applications — safety guardrails that combine deterministic rule-based logic with AI models, including the NVIDIA DRIVE active safety stack.

"To help solve these challenges, the recently introduced Halos Operating System (OS) — a component of the NVIDIA Halos full-stack, comprehensive safety system — offers a unified, production-ready safety foundation for AI-driven vehicles, built on NVIDIA DRIVE Hyperion," NVIDIA writes.

The Halos Safety Evaluation Framework underpinning the OS draws from more than 330 research papers and 1,000 patents developed inside NVIDIA's Halos program. Validation runs across three compute platforms: DGX systems for training, Omniverse on OVX for simulation, and AGX for in-vehicle deployment.

Four commercial programs are now live:

• Uber and Autobrains are launching a robotaxi service in Munich on NVIDIA DRIVE Hyperion, with Autobrains' agentic AI handling scalable fleet operations.
• Foxconn is expanding its robotaxi fleet in Taiwan.
• VinFast is deploying Level 4 vehicles across Southeast Asia.
• HUMAIN is operating robotaxis in Saudi Arabia.

Context

NVIDIA's AV strategy has long centered on providing the compute substrate — DRIVE Hyperion — that third-party developers build autonomous stacks on top of. Halos OS extends that platform play downward into the OS layer, adding certified safety compliance as a shared foundation rather than leaving each operator to build and certify their own.

ISO 26262 ASIL D is the automotive industry's highest safety integrity classification. Achieving it at the OS level is a significant certification burden. By absorbing that work into NVIDIA's platform, Halos OS shifts some of the certification cost off individual AV companies — a meaningful advantage for smaller operators and new market entrants who lack Waymo-scale safety engineering teams.

The GTC Taipei announcements represent geographic diversification that no single AV company has managed at this pace: Germany (regulatory stringency), Taiwan (dense urban traffic), Southeast Asia (mixed road conditions), and Saudi Arabia (extreme temperature, infrastructure investment) all at once.

Why it matters

The four simultaneous commercial deployments signal that NVIDIA's AV platform has moved past pilot status. Prior NVIDIA AV announcements often described partnerships or development programs; these are described as active services.

For the AV industry broadly, Halos OS represents a potential platform consolidation around NVIDIA's safety architecture — analogous to Android in mobile, where a shared OS enables differentiation at the application layer while outsourcing foundational compliance. If the platform achieves wide adoption, it reduces the per-company cost of reaching regulatory certification and could accelerate commercial launches across markets.

The 330-paper, 1,000-patent validation framework is also a direct answer to what regulators have been asking: demonstrable evidence that the system "behaves reliably, isolates faults before they escalate and never operates outside the boundaries it was designed for."