Scaling Customer Support, Compliance, and Developer Productivity with Gen AI

coinbase · Finance · 2024 · source Agentic: yes · promotional bias: med · source-backed · extracted with prompt 0.5.6 (schema v2)

Generated from extraction.json — do not edit by hand. Every claim cites verbatim source evidence; stated means the quote directly asserts the claim, implied means it supports it indirectly.

Problem

Domain: enterprise GenAI platform for support, compliance, and engineering

Coinbase needed to scale customer support, regulated compliance investigations, and developer productivity across volatile crypto markets and many geographies.

Constraints:

Architecture

Coinbase built an internal GenAI platform with standardized LLM and data interfaces, then used it for an AI support chatbot, agent-assist feedback loops, compliance auto-resolution workflows, and developer tools such as PR review and UI testing. The architecture combines RAG, vector memory, Bedrock Knowledge Bases, Cohere reranking, model-backed response generation, Bedrock guardrails, MCP data connectors, ML risk models, and human decision gates.

Diagram confidence: explicit (topology described by the source).

flowchart LR
  A["Internal GenAI platform"] --> B["LLM interface"]
  A --> C["MCP data connectors"]
  A --> D["Customer support chatbot"]
  D --> E["Vector memory layer"]
  D --> F["Bedrock knowledge-base retriever"]
  F --> G["Cohere reranker"]
  G --> H["Response generation sub-agent"]
  H --> I["Guardrail layer"]
  D --> O["Human support agents"]
  J["Compliance risk models"] --> K["Compliance auto-resolution engine"]
  C --> K
  K --> L["Human compliance agents"]
  K --> M["Customer RFI channel"]
  A --> N["Developer productivity tools"]
  B --> N
Drag to pan · scroll or use +/− to zoom · reconstructed from the source's described component topology

Components

Component Role Interacts with
Internal GenAI platform Shared platform exposing LLMs and data through standard interfaces for multiple Coinbase teams. LLM interface, MCP data connectors, Customer support chatbot, Compliance auto-resolution engine, Developer productivity tools
LLM interface OpenAI-compatible interface for accessing multiple LLMs. Internal GenAI platform, Response generation sub-agent, Developer productivity tools
MCP data connectors Standard connectors for accessing internal, external, and open-source intelligence data. Internal GenAI platform, Compliance auto-resolution engine
Customer support chatbot Automates customer-facing support workflows and escalates complex cases. Vector memory layer, Bedrock knowledge-base retriever, Response generation sub-agent, Guardrail layer, Human support agents
Vector memory layer Stores prior conversation history for the support chatbot. Customer support chatbot
Bedrock knowledge-base retriever Retrieves vectorized Coinbase help articles for support responses. Customer support chatbot, Cohere reranker
Cohere reranker Reranks retrieved help articles for support accuracy. Bedrock knowledge-base retriever, Response generation sub-agent
Response generation sub-agent Generates precise support responses using a mixture of LLMs. LLM interface, Cohere reranker, Guardrail layer
Guardrail layer Input and output safety, PII, prompt-injection, and multilingual policy filters. Customer support chatbot, Response generation sub-agent
Compliance risk models Traditional ML models that trigger high-risk compliance alerts. Compliance auto-resolution engine
Compliance auto-resolution engine Orchestrates holistic review, evidence gathering, narrative summary generation, and human compliance review. Compliance risk models, MCP data connectors, Human compliance agents, Customer RFI channel
Human compliance agents Review AI reasoning and compliance evidence and make final filing decisions. Compliance auto-resolution engine
Customer RFI channel Requests additional information from customers when compliance review requires it. Compliance auto-resolution engine
Developer productivity tools Coding assistants, PR review automation, and UI testing tools powered by Bedrock-served models. Internal GenAI platform, LLM interface
Human support agents Handle escalated customer support cases with AI-assistive tools. Customer support chatbot

Data flow

Support users first interact with an AI chatbot backed by conversation memory, Bedrock knowledge bases, reranking, response generation, and input/output guardrails. Complex support cases escalate to human agents. Compliance risk models trigger high-risk alerts, a compliance auto-resolution engine gathers internal/external evidence through MCP data connectors, drafts a narrative summary, and leaves final SAR decisions to human compliance agents. Developer tools use Bedrock-served Claude models for coding assistance, PR review, and UI testing.

3 supporting quotes
“The rag retriever is the fulcrum of this design. So, it uses bedrock knowledge bases where we vectorize and store all of the Coinbase help articles.”transcript, stated
“all of this access is through standardized MCP-fied data connectors.”transcript, stated
“This agent is implemented as an AI-powered GitHub Action. It integrates, it automates PR reviews, basically.”transcript, stated

Why this architecture

Coinbase chose a shared platform plus domain-specific workflows: standard LLM and MCP interfaces make reuse possible, while support, compliance, and developer tools keep their own risk controls, data connectors, and human review loops.

3 supporting quotes
“this Gen AI platform allows every team at Coinbase to easily leverage and extend our AI capabilities for their use cases.”transcript, stated
“we use OpenAI's API standards when accessing LLMs and we also use Model Context Protocol or MCP standards when accessing any of our data endpoints.”transcript, stated
“it is important to always rests with our human compliance operations agent.”transcript, stated

Models used: OpenAI-compatible LLMs · Claude models through Bedrock · Bedrock Knowledge Bases · Bedrock Guardrails · Cohere reranker · traditional compliance ML models

Scale

Alternatives considered (roads not taken)

Bespoke integrations per data source and model

Rejected because: Coinbase standardized on OpenAI API and MCP interfaces so every team could reuse and extend the platform.

“we use OpenAI's API standards when accessing LLMs and we also use Model Context Protocol or MCP standards when accessing any of our data endpoints.”transcript, stated

Fully automated compliance filing decisions

Rejected because: The company remains liable for SAR decisions, so human compliance agents retain final authority.

“After reviewing the AI's reasoning and all of the compliance evidence that the AI system has gathered, it is this individual, the human individual here, who determines whether a case warrants filing”transcript, stated

AI replacing manual code review

Rejected because: The automated reviewer handles routine checks, while humans still review nuanced code issues.

“the human developers only look for the nuanced aspects of the code, and so they can deliver higher value.”transcript, stated

Patterns

tool-use-orchestration (agent-architecture)

Coinbase uses a GenAI platform and compliance engine to coordinate LLM calls, MCP data connectors, risk models, customer RFIs, and human review.

“the Gen-AI platform gives you fluid access to LLMs and the data through MCP interfaces.”transcript, stated

rag-retrieval (retrieval)

The support chatbot retrieves vectorized Coinbase help articles from Bedrock Knowledge Bases before generating answers.

“it uses bedrock knowledge bases where we vectorize and store all of the Coinbase help articles.”transcript, stated

agent-memory (agent-architecture)

Prior conversation history is stored in a vector database and used as memory for the support chatbot.

“We store it in a vector database and that serves as the memory layer for us.”transcript, stated

guardrails-io-filtering (safety)

Bedrock Guardrails and domain filters protect support interactions from harmful content, PII leakage, prompt injection, and multilingual policy violations.

“You have input guardrails and you've also got output guardrails. These guardrails are powered with bedrock guardrails, actually.”transcript, stated

human-in-the-loop-gate (governance)

Compliance workflows synthesize evidence but leave final SAR filing decisions to human compliance agents.

“it is important to always rests with our human compliance operations agent.”transcript, stated

Tradeoffs

Platform interface design

Chose standard OpenAI API and MCP interfaces over one-off model and data integrations.

Rationale: Shared interfaces make the platform reusable across support, compliance, and developer-productivity teams.

“all of these access points are through standard interfaces.”transcript, stated

Support automation boundary

Chose chatbot plus escalation and agent assist over chatbot-only support.

Rationale: Automation handles simple cases instantly while complex cases escalate to human agents with AI assistance.

“For the more complex cases, they get escalated to a human agent and then the human agents are equipped with real-time AI-assistive tools.”transcript, stated

Developer-tool rollout

Chose multiple paved-path coding tools over one mandated assistant.

Rationale: Coinbase lets developers choose best-in-class tools that fit their workflows while serving the models through Bedrock.

“we offer a few of these best-in-class coding tools as paved paths, options, to our developers, and our engineers have the freedom to choose whatever works best for them.”transcript, stated

Gotchas (what bit them)

Compliance automation still needs explainable human decisions.

Root cause: Regulators require detailed investigation records and the company remains accountable for filing decisions.

Resolution: Use AI to gather evidence and draft narrative summaries, then route final judgment to compliance operations agents.

“the regulatory bodies expect a very thorough investigation of all of these compliance cases. And they need absolute, detailed, full explainability”transcript, stated

One compliance workflow cannot cover all jurisdictions.

Root cause: Coinbase operates across many countries with diverse regulatory requirements.

Resolution: Adapt compliance processes by workflow and geography while using shared MCP-based platform access.

“we have to adapt our compliance processes to meet those diverse regulatory requirements across the board. So one size definitely does not fit all”transcript, stated

AI-generated code does not remove developer accountability.

Root cause: Some code paths are unsuitable for AI generation and every generated line still needs human understanding.

Resolution: Use coding tools as paved paths while keeping human review and judgment in the software process.

“every line of code still needs to be reviewed and understood by a human developer, and we know that AI-generated code isn't suitable for every part of the business.”transcript, stated

Evaluation

Coinbase tracks automation rates, support resolution time, compliance explainability, developer code influence, PR-review assistance, and UI testing automation.

Metrics: automated customer-contact share · employee hours saved · support resolution time · code generated or influenced by AI · unit-test coverage gaps · CI failure debugging support

3 supporting quotes
“So today, close to 65% of our customer contacts are handled automatically by our AI systems.”transcript, stated
“Beyond that, this tool also enforces coding conventions. That's an important aspect.”transcript, stated
“it highlights any gaps in unit testing coverage.”transcript, stated

Outcomes

The platform spans customer support, compliance, and developer productivity rather than a single GenAI use case.

3 supporting quotes
“This automation, consequently, saves us nearly five million employee hours every year.”transcript, stated
“When cases are handled by automation, they get resolved in less than 10 minutes.”transcript, stated
“So today, nearly 40% of all code written daily at Coinbase is AI-generated, or AI-influenced, I should say.”transcript, stated