Japan has approved the D1, its first commercially available humanoid robot certified for hospital use, but it runs on hardware the US Federal Communications Commission placed on a national security watchlist just eight days before the robot's August 5, 2026 launch. The D1, developed by ZEALS and Omakase Robotics, operates on a Unitree G1 chassis that the FCC flagged for confirmed backdoors and potential intelligence-sharing obligations under Chinese law. For Japanese hospitals now considering deployment, the approval highlights a growing tension between regulatory certification and cybersecurity risk.

Why Did Japan Approve a Robot on Banned Hardware?

The D1 cleared Japan's first hospital humanoid trial through a proof-of-concept at the University of Tsukuba Hospital in March 2026, where it completed autonomous navigation, obstacle avoidance, and item delivery without human contact or falls. That safety record became the primary basis for commercial certification. However, the trial and production model both rely on the Unitree G1 platform, which the FCC added to its Covered List on July 28, 2026, citing confirmed backdoors and China's mandatory intelligence-cooperation laws.

ZEALS positioned the D1 as "jun-kokusan," or "quasi-domestic," meaning Japanese companies handle the AI software, control systems, assembly, and deployment, while international components flow through the supply chain. The company signed a strategic partnership with Unitree on February 3, 2026, and has not fully disclosed whether production units will continue using Unitree hardware. CEO Masahiro Shimizu explained the trade-off directly: insisting on fully domestic components would raise costs and cut the company off from world-class hardware being developed overseas, primarily in China.

What Security Vulnerabilities Are We Talking About?

The Unitree G1 carries at least two known security flaws. UniPwn, a Bluetooth Low Energy exploit disclosed in September 2025, grants root-level access to the robot and can automatically spread to nearby Unitree units within Bluetooth range. As of the FCC's July 28, 2026 action, no confirmed firmware patch for UniPwn had been released for any Unitree humanoid model. Additionally, CVE-2025-2894, known as the CloudSail backdoor and disclosed in March 2025, established that a persistent remote-access tunnel to Chinese-operated servers was embedded in Unitree's Go1 firmware, auto-starting on boot.

In a hospital setting, the Unitree G1 collects data from six Intel RealSense depth cameras, 3D LiDAR, dual microphones, GPS, and motion telemetry from more than 20 actuated joints. That sensor array maps interior spaces, records audio of patient and staff interactions, and tracks the movements of everyone nearby. The FCC's concern centers not just on the technical vulnerabilities but on China's National Intelligence Law, which requires all organizations and citizens to "support, assist, and cooperate with national intelligence efforts in accordance with law".

Why Didn't Japan Use a Bipedal Robot Instead?

The D1 deliberately chose not to use bipedal legs, a decision that directly addresses Japan's regulatory environment. At the Humanoids Summit Tokyo in May 2026, Shuichi Nagao, CTO of Omakase Robotics, explained that bipedal humanoid systems cannot currently be sold in Japan for hospital and care facility use due to safety and compliance standards. Bipedal platforms in their current commercial form cannot reliably meet the safety thresholds required for shared human environments.

The wheeled base solves this problem. By mounting the upper body to wheels rather than bipedal legs, the D1 drastically reduces the risk of falling, a distinction that is not academic in a hospital setting but the difference between a deployable product and an insurance liability. The robot stands 129.3 centimeters tall (approximately 50.9 inches) with a base width of approximately 48 centimeters (approximately 19 inches), dimensions chosen deliberately to pass through standard Japanese doorframes, enter elevator cars, and navigate narrow hospital corridors without requiring costly infrastructure changes.

How Does the D1 Ensure Safety in a Hospital?

Beyond the wheeled base, the D1 incorporates collaborative robot (cobot) safety architecture. Every arm joint is fitted with a torque sensor that halts motion immediately on contact with a person or object. During navigation, the D1 dynamically adjusts speed and trajectory when its sensors detect nearby humans or obstacles. The robot is rated for approximately eight hours of continuous operation on a single charge, matching a standard Japanese work shift. ZEALS priced the D1 at ¥5,000,000 (approximately $32,000) per unit and opened sales and deployment consultations on August 5, 2026.

How to Evaluate Humanoid Robot Deployments in Sensitive Environments

• Hardware Supply Chain Transparency: Verify the complete component sourcing for any robot intended for hospitals or care facilities, including the country of manufacture and any applicable national laws governing data access or intelligence cooperation.
• Security Patch Status: Confirm that all known vulnerabilities in the robot's underlying hardware have been patched and that firmware updates are available before deployment, not after regulatory approval.
• Data Collection and Retention Policies: Understand what sensor data the robot collects in real time, where that data is transmitted, how long it is retained, and under what legal framework it can be accessed by third parties.
• Regulatory Alignment vs. Cybersecurity Risk: Recognize that a robot may pass safety and operational certification without addressing cybersecurity vulnerabilities, and evaluate both dimensions independently before deployment.

What Does This Mean for the Humanoid Robot Industry?

The D1's approval despite the FCC's hardware ban reveals a regulatory gap between countries. Japan's certification focused on physical safety and operational performance in a hospital environment. The US regulatory action focused on national security and data sovereignty. Neither certification process fully overlapped with the other, leaving Japanese hospitals to navigate the gap themselves. The "quasi-domestic" framing allows ZEALS to market the robot as a Japanese product while relying on Chinese hardware and accepting the legal obligations that come with it.

This tension will likely intensify as humanoid robots move from research labs into hospitals, care facilities, and other sensitive environments where they collect audio, video, and motion data. The D1 represents a pragmatic compromise: Japan prioritized deploying functional robots quickly over waiting for fully domestic alternatives that do not yet exist at commercial scale. The cost of that compromise is that hospitals must now make informed decisions about data security and geopolitical risk alongside operational safety.