Zonal Architecture
Unified intelligence designed for every vehicle domain
A purpose-built foundation that replaces legacy domain systems with centralized, zonal control that simplifies design, cuts wiring, and accelerates development of software-defined vehicles.
REE’s zonal architecture combines the REEcenter ECU, REEzonal ECUs, and REEgateway into a high-performance network that unites software packages of advance vehicle dynamic, chassis control, body control, autonomy integration, safety systems, and connectivity. This integrated approach is designed for simplified complexity, accelerated development, and future-proof vehicle programs from Class 1 through Class 6.
System Architecture
- Safety first: redundant sensing, ISO 26262 compliance, limp-home behaviors
- Flexibility: modular steering options, tunable feedback, variable steering ratios
- Integration speed: clean APIs, CAN FD/Ethernet support, ROS bridge
- Lifecycle value: FOTA/SOTA, predictive maintenance, diagnostics
Zonal Architecture Modular Functionality Packages
REE software packages run on REE’s current ECU portfolio and can also be deployed on 3rd-party compute platforms that meet the required safety standards
REE Center ECU
The Center ECU is the software-defined nerve-center that synchronises steering, braking, propulsion, and traction while delivering ASIL-D functional safety, cybersecurity-by-design and true fail-operational redundancy for next-generation electric and autonomous vehicles.
Commercial truck
Autonomy vehicle
Passenger
Key Features
Holistic motion control
harmonises steering, braking, acceleration and traction in real-time for smooth, predictive vehicle dynamics.
Real-time sensor fusion
dual independent IMUs plus wheel-speed, voltage, current and thermal inputs ensure millisecond-level situational awareness.
ASIL-D safety architecture
dual lock-step compute channels, built-in diagnostics and watchdogs meet ISO 26262 top-tier integrity.
Fail-operational power & comms
dual isolated power domains and redundant CAN-FD paths keep the vehicle controllable during faults.
Production-grade ruggedness
validated for EMC, vibration, thermal shock and voltage transients per ISO 16750.
IP67 sealed enclosure
dust-tight and immersion-proof for harsh on- and off-road environments.
Secure OTA & remote diagnostics
HSM-backed secure-boot and encrypted update pipeline enable fleet-scale software roll-outs.
Modular, scalable design
a common hardware-software platform adaptable from light-commercial vans to fully autonomous SDVs.
Specifications
Microcontroller
Infineon AURIX TC3xx family – dual, redundant multi-core lock-step clusters, ASIL-D certified
Functional Safety
ISO 26262-compliant, ASIL D target for item-, hardware- and software-level safety
Cybersecurity
Hardware Security Module (HSM), secure-boot chain, AES-encrypted cloud comms & OTA image signing (Uptane-ready)
Power Domains
Dual independent 12/24/48 V inputs, each monitored and protected for fail-operational behaviour
Sensor Suite
Dual IMUs (x/y/z accel & gyro) + four wheel-speed channels + voltage/current/thermal sensing for redundancy
Comms Interfaces
Dual IMUs (x/y/z accel & gyro) + four wheel-speed channels + voltage/current/thermal sensing for redundancy
Network Topology
Star-connected to zonal ECUs and REE Gateway through dual CAN-FD trunks for fail-operational data paths
Connector
Sealed 56-pin. Automotive harness connector.
OTA Capability
Delta & full-image updates; remote diagnostics & rollback supported
Redundancy
Compute, power, sensor and comms redundancy engineered for fault tolerance
Environmental Tests
Conforms to ISO 16750 (mechanical, thermal, chemical) & ISO 7637 (EMC transients)
Ingress Protection
IP67 – dust-tight & 1 m water immersion for 30 min
Mounting
Chassis or body-integrated; orientation-agnostic.
Assembly Partner
Chassis or body-integrated; orientation-agnostic.
Schaeffler-certified automotive electronics production line.
REEzonal ECU
Localized ECU that consolidates and controls steer, brake, and drive functions within each vehicle zone
Commercial truck
Autonomy vehicle
Passenger
Key Features
Multi-voltage brake inverter
separate 12 V / 48 V input lets the corner ECU drive both low- and high-voltage DC-link systems without external converters.
Sensor-rich control stack
Sine/Cosine motor encoders with Hall-sensor fallback, six SENT channels for steer-angle sensing, four NTC temperature inputs per motor, plus dual-MCU wheel-speed diagnostics.
Dual-MCU safety core
two independent processors exchange dedicated handshake interrupts, and share OR-ed 12 V rails for fail-operational power—even under single-point faults.
High-bandwidth connectivity
five CAN-FD buses (3 system / 2 local, selectable termination) plus SENT, 4-20 mA analog and, smart GPO lines cover EPB, steering, brake, and inverter interfaces.
Production-ready hardware
rugged dual 56-pin Vitesco press-fit connectors, 14-layer 2 mm PCB (255 × 210 mm) and >95 % ICT coverage ensure fast ramp-to-volume.
Proven thermal & EMC resilience
survived 35 h worst-case corner operation without thermal trip; full ISO 21780, ISO 16750, EMC, vibration and IP validation is baked into the MP plan.
Specifications
Safety Architecture
Dual independent MCUs with two interrupt lines each direction; 12 V OR-ing per MCU for fail-operational power path.
Power Domains
Separate brake-inverter input supports both 12 V & 48 V DC-link rails.
Comms Interfaces
5 × CAN-FD (5 Mbit/s) buses – 3 system, 2 local – with termination on local buses; SENT, analog 4-20 mA, GPOs.
Sensor Suite
Sine/Cosine motor feedback (Hall option), 6 × SENT for SAS, 4 × NTC per motor, dual-redundant wheel-speed sensor TLE5047iC-CMS with diagnostics.
GPO / Diagnostics
2 × GPO (KL15 & KL15EN) controllable by both MCUs for Cascadia EDU interface; extensive diagnostics via SENT & CAN.
Connectors
2 × 56-pin sealed press-fit connectors positioned per Vitesco rules.
PCB & Enclosure
14-layer, 2 mm FR-4 board, 255 × 210 mm; enclosure footprint shared with other REE controllers for platform reuse.
Environmental Testing
Thermal endurance verified for 35 h continuous operation; EMC plan plus ISO 21780 & ISO 16750 test matrix; vibration / IP rating to be finalised on MP units.
Manufacturing & QA
Vitesco press-fit assembly line, >95 % ICT coverage, full BOM & PCB release “freeze” completed 14 Apr.
REE Gateway RGW
Secure data router connecting in-vehicle networks with external cloud and fleet systems
Commercial truck
Autonomy vehicle
Passenger
Key Features
Vehicle gateway brain
routes and secures data between all in-platform CAN networks, and “foreign” devices (LiDAR, OBD, diagnostics, OTA) to maintain controlled, prioritised communication.
10-channel CAN-FD hub
provides ten high-speed (5 Mbit/s) CAN-FD buses; any frame on IDs 0x02/0x17 can wake the unit from sleep, and every bus except IDx12 includes on-board 120 Ω termination.
Dual-MCU safety core
two Infineon AURIX processors run in lock-step with dedicated watchdog, SPI, and interrupt links for fail-operational control.
Redundant power architecture
twin 12 V inputs OR-ed via smart FETs; under-/over-voltage, over-current, and inrush are hardware-protected so one rail failure leaves the ECU active.
TPM 2.0 & cryptographic root-of-trust
on-board Trusted Platform Module secures keys, attests firmware integrity, and supports SSL/TLS sessions for cloud links.
Real-Time Clock with super-cap backup
keeps micro-second time-base alive for ≥ 22 days after vehicle power-down, enabling authenticated logs, and scheduled wake-ups.
Managed Ethernet switch
100BASE-T1/Tx ports plus RMU give high-bandwidth back-plane for corners, external sensors, and diagnostics.
ISO 26262 hardware redundancy
duplicated supplies, signal lines, and continuous rail monitoring target ASIL C/D for the item.
Production-grade enclosure
shared cast housing with other REE controllers; 800 g, 212 × 201 × 37 mm, natural-convection cooling validated to 85 °C ambient.
Sealed 56-pin automotive connector
EPT MX123 Key-H, colour-coded for poke-yoke assembly.
Specifications
Microcontroller
Dual Infineon AURIX safety MCUs with dedicated SPI/INT/WD hand-shake lines for mutual supervision.
Functional Safety
Hardware and power-rail redundancy, dual watchdogs and rail monitors; design targets ISO 26262 ASIL C/D.
Power Domains
2 × independent 12 V inputs protected by smart OR-ing FETs (UV 5.5 V, OV 23 V, OC 2 A) for fail-operational supply.
Comms Interfaces
10 × CAN-FD (5 Mbit/s, wake-on-CAN), Ethernet switch with multiple 100BASE-T1/TX ports, 2 × RS-232 UART, 3 × GPIO lines.
Security
On-board TPM 2.0 with SPI, reset and interrupt lines to MCU0 for secure-boot, key storage and TLS sessions.
Real-Time Clock
I²C RTC plus 1 F super-capacitor keeps time for ~22 days off-power; 5 V always-on LDO draws 20 µA quiescent.
Connector
56-pin EPT MX123 (Key H) sealed harness connector shared with Center-ECU family.
Mechanical
Cast aluminium housing; 212 mm (L) × 201 mm (W) × 37 mm (H); mass ≈ 800 g; identical mounting tabs to ReeCenter ECU.
Environmental Validation
Thermal endurance to 85 °C ambient with natural convection; vibration, EMC, IP and ISO 21780/16750 tests planned in DV phase.