Connected Vehicle Cabin AI

Assistants, cameras and data pipelines inside the car.

The FTC's January 2026 order bars GM for five years from sharing driver location and behavior data with consumer reporting agencies. Three months later GM began pushing a Google Gemini assistant over the air to about 4 million vehicles.

Vehicles reached by in-cabin AI assistants: GM Gemini, eligible about 4.0 · Apr 2026; Li Auto deliveries 1.4 · Aug 2025 (proxy); Mercedes ChatGPT beta 0.9 · Jun 2023. Li Auto figure counts deliveries, not confirmed installs VEHICLES REACHED BY IN-CABIN AI ASSISTANTS GM Gemini, eligible about 4.0 · Apr 2026 Li Auto deliveries 1.4 · Aug 2025 (proxy) Mercedes ChatGPT beta 0.9 · Jun 2023 VEHICLES, MILLIONS LI AUTO FIGURE COUNTS DELIVERIES, NOT CONFIRMED INSTALLS
GM data-sharing ban
5 years
GM location sampling (FTC)
~3 sec
Chinese automakers adding DeepSeek
12+
Registry incidents
1

Deployments

GM, Tesla and BYD put large-model assistants in the cabin within about a year

GM's Gemini assistant can send messages, plan routes and set the cabin temperature. Grok in Tesla cars is conversation only and cannot command the vehicle. BYD and more than a dozen other Chinese automakers announced DeepSeek integrations in February 2025.

Flagship vehicle cabin AI deployments
DeploymentDeveloper / operatorWhereScaleAutonomyStatusControls declared
GM Gemini assistantGoogle / General MotorsUSAbout 4 million eligible vehicles (Apr 2026)AssistantRolling out over the airDriver controls what it sees; opt-in
Grok in Tesla vehiclesxAI / TeslaRegions not confirmedCount not disclosed (Jul 2025)Conversation onlyShippingNo vehicle or navigation control
BYD Xuanji with DeepSeekBYD and DeepSeek / BYDChinaCount not disclosed (Feb 2025)Assistant and driver-assistance AIAnnouncedNot disclosed

Recent events

  • The FTC found GM sold driving data that reached insurers through its discontinued Smart Driver feature; GM paid no fine.
  • Tesla staff shared footage from customer car cameras in internal chats, Reuters reported in April 2023.
  • Li Auto overhauled its in-cabin agent in OTA 8.0 in September 2025.
  • NIO launched NOMI GPT in April 2024; it can change cabin settings.

Attack surface

Three of ten attack-surface dimensions rate very significant or critical

No dimension rates critical. Ratings use five levels, from limited to critical, and cover the paths an attacker or a failure can take into the agent.

Attack surface by dimension: Physical access moderate; Identity and authentication significant; Command and control channels significant; Perception and sensors very significant; Connectivity surface significant; OTA and update pipeline very significant; Data capture and retention very significant; Integrations and permissions significant; Behavioral and policy boundary moderate; Multi-agent coordination limited but growing Physical access MODERATE Identity SIGNIFICANT Command and control SIGNIFICANT Perception VERY SIGNIFICANT Connectivity SIGNIFICANT OTA updates VERY SIGNIFICANT Data capture VERY SIGNIFICANT Integrations SIGNIFICANT Behavior boundary MODERATE Multi-agent LIMITED BUT GROWING
Attack surface rating by dimension. Longer, darker bars are rated higher.
Vehicle cabin AI attack surface by dimension
DimensionRatingWhy
Physical accessModerateOBD-II port, infotainment ports, sensor housings, and vehicle service contexts present physical access points
Identity and authenticationSignificantOEM accounts tie vehicle to user identity
Command and control channelsSignificantVoice command, paired phone control, OEM mobile applications, infotainment touchscreen
Perception and sensorsVery significantInterior cameras, microphones, biometric sensors, presence detection, increasingly RF-based occupant sensing
Connectivity surfaceSignificantCellular connectivity for OEM backend, WiFi for infotainment, Bluetooth for paired devices, USB for media, V2X where deployed
OTA and update pipelineVery significantVehicles increasingly support OTA updates
Data capture and retentionVery significantThe most distinctive dimension
Integrations and permissionsSignificantPaired phones, insurance integrations, app ecosystem, third-party assistants, OEM data brokers
Behavioral and policy boundaryModerateCabin AI operates within infotainment and assistant policy boundaries
Multi-agent coordinationLimited but growingCurrent cabin AI operates per-vehicle

Incidents

One registry incident involves vehicle cabin AI

Each row links to its full record, with the control that failed, who found it and whether a reporting rule applied.

Registry incidents: vehicle cabin AI
IncidentDateAgentFound byControl that failed
Tesla Staff Share Customer Car Camera Footage2019 to 2022Vehicle camera data pipelineThird partyEmployee access to customer recordings

Rules

Cabin data rules come from enforcement orders and EU safety regulation

Rules that apply to vehicle cabin AI
RuleJurisdictionWhat it requiresStatus
FTC v. GM and OnStar, final orderUSFive-year ban on sharing with consumer reporting agencies; consent for 20 yearsFinalized Jan 2026
EU General Safety Regulation 2019/2144 (ADDW)EUDriver distraction warning on all new vehiclesAll new vehicles from Jul 7, 2026
Euro NCAP 2026 protocolsEuropeEye and head tracking; impairment detection2026
CAC and MPS face recognition measuresChinaConsent and alternatives for face dataEffective Jun 1, 2025

Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.

Record

Page Record

Agent class
Personal and ambient
Datasets
ai_deployments.csv (3 rows for this page); ai_attack_surface.csv (10 rows); ai_incidents.csv (1 linked)
Key sources
FTC GM order (BleepingComputer)
GM Gemini (TechCrunch)
Last verified
October 2026