Deepgrid Semi
DG32 · LOCKSTEP RISC-V MOTOR-CONTROL SILICONFIRST SILICON · SEP 2026
Discuss your application

DG32 / MOTOR-CONTROL SILICON

Motor-control silicon,
built for predictable
behaviour.

DG32 puts a RISC-V control core, the motor-control peripherals and a hardware lockstep safety monitor on one 130 nm chip.
Pre-silicon: first silicon rides the September 2026 shuttle, and every figure on this site is a design value until bring-up.

+
DG32-LITEQFN-64 · 9 × 9 MM · 130 NM CMOS

ILLUSTRATIVE MODEL · NOT A MASK LAYOUT · DRAG TO ROTATE

DEEPGRID SEMI PVT LTD / HYDERABAD, INDIA
2 × RV32IMCORES IN HARDWARE LOCKSTEP
~100 kHzCLOSED CURRENT LOOP, SIMULATED
64-pin QFN9 × 9 MM · 44 SIGNAL PINS
Sep 2026FIRST-SILICON SHUTTLE

Pre-silicon figures.
Design values, not measurements.

Three things change
when safety is hardware.

Entry-level motor-control parts catch faults between faults: watchdogs, brown-out reset and periodic self-test all run in the gaps. DG32 moves the control loop and the fault check into hardware, so both have a cost you can state in cycles.

PREDICTABLE CONTROL~100 kHz

The loop cost is fixed and known

ADC sampling, Clarke/Park transforms and PWM generation run in dedicated blocks rather than firmware, so a field-oriented-control tick costs the same number of cycles every time. The CPU is left free for diagnostics.

Hardware FOC datapathCORDIC transforms82% CPU headroom
WHAT IT MEANS:A control loop that does not drift under load or interrupt pressure.
Evidence: Simulated. Loop stage costs, ~100 kHz closed loop
DEFINED FAULT RESPONSE39 cycles

A wrong value reaches a safe bridge without firmware

A trailing checker core compares every value the first core commits, as it commits it. A mismatch trips the FAULT pin and disables the PWM bridge in 39 cycles, on a path that never passes through software.

Hardware lockstep pairLocked injection registerWindowed watchdog
WHAT IT MEANS:The failure path is a mechanism you can test, not a self-test interval you hope is short enough.
Evidence: Simulated. 39-cycle fault-to-latch, lockstep under interrupts
SUPPLY PLANNING130 nm

A mature node with a second source

DG32 targets mature 130 nm/180 nm process nodes qualified at more than one foundry, on a 198-day RTL-to-GDSII shuttle loop. Node maturity and second sourcing are the two things a production schedule actually depends on.

Mature-node processMulti-foundry qualification198-day shuttle loop
WHAT IT MEANS:Sourcing risk becomes a planning input rather than an unknown.
Status: qualification in progress. See the roadmap for what is committed

Two paths cross the die,
and only one is firmware.

The control path runs ADC, CORDIC, PI regulators and PWM, and the CPU only supervises it. The fault-response path runs lockstep comparator, fault latch and PWM brake, and firmware is not in it at all. Sharing nothing but the die is what keeps a busy control loop from delaying a fault response.

Firmware can still prove the fault path works: a locked injection register fires it on purpose, which is the only way to test it on real silicon.

Active hardware fault stage: Step 5 of 5. The bridge turns off: FAULT_N goes low within 39 cycles of an injected fault in simulation. Wired to the gate-driver enable, it stops the bridge without waiting for firmware.
CYCLE-ACCURATE LOGIC MAP
MAIN CORERuns the applicationwrong value
CHECKER · 2 CYCLES LATERSame inputs, mirroredcorrect value
COMPARATORMismatch on this store≠
FAULT LATCHFirst cause held
FAULT_N · GATE DRIVERBridge off, in hardwareWithin 39 cycles of an injected fault, simulated
  1. 01

    A datapath fault

    A transient or permanent error changes a value the MAIN core is about to commit.

  2. 02

    CHECKER disagrees

    CHECKER runs the same instructions two cycles later on mirrored inputs and bus responses, so it commits the correct value.

  3. 03

    The comparator flags it

    Every committed store is compared. The first mismatch is caught on that store, not at the next software self-test.

  4. 04

    The first cause is latched

    A sticky fault latch holds the first cause, because later faults are usually its consequences. Firmware can read it after the fact.

  5. 05

    The bridge turns off

    FAULT_N goes low within 39 cycles of an injected fault in simulation. Wired to the gate-driver enable, it stops the bridge without waiting for firmware.

Ten chips,
five kinds of system.

DG32-LITE is one of ten DeepGrid chips, each built to take a socket an imported part holds today. It targets the safety-microcontroller socket in battery packs, motor drives, braking and steering controllers, robot joints and drones, and it is the only one on first silicon. It can also watch the motor it controls for faults, in the cycles left after control.

Every figure says
how it was obtained.

DG32 is pre-silicon as of September 2026. Every number on this site carries the kind of evidence behind it. These are five different kinds of evidence, not five stages of a ladder, and none of them is a measurement on fabricated silicon.

The five kinds of evidence behind the figures on this site
Evidence kindWhat it means
SimulatedMeasured in simulation of the design as built
Post-routeStatic timing on the placed-and-routed hardened design
AnalyticDerived from the architecture, not yet run on a bench
Tool estimateA vectorless power estimate from the implementation tools
Process nominalThe 130 nm process limits for each supply domain

Tell us what
your system needs.

Describe the drive, the requirement that decides the design, and the timing you are working to. Ask DeepGrid answers specification questions directly from the whitepaper and technical annex, with the source cited on every answer.