How Itaú is building generative AI for its entire customer base

Itaú's Generative AI Rollout Encounters Infrastructure Hurdles

Brazilian financial services giant Itaú Unibanco is actively developing generative AI capabilities for its broad customer base, but is encountering technical infrastructure challenges that underscore the complexities of enterprise-scale deployment. System logs indicate that automated attempts to connect to OpenAI services are being intermittently blocked by security verification measures. This situation highlights a critical, often overlooked, aspect of enterprise AI adoption: the underlying network and security fabric can become a significant bottleneck when integrating with public-facing foundation model APIs.

The recurring issue, evidenced by messages such as "Verification successful. Waiting for openai.com to respond" followed by requirements to "Enable JavaScript and cookies to continue," points to an integration problem at the network security layer. These challenges are not typical API errors but are characteristic of a Web Application Firewall (WAF) or anti-bot system, like Cloudflare's, which is designed to differentiate human web traffic from automated server requests. For a large institution like Itaú, which would generate a high volume of server-to-server API calls, such security interstitials can disrupt service and complicate scaling efforts.

• Challenge: Automated API calls from Itaú's infrastructure are being flagged by a security layer protecting OpenAI's endpoints.
• Root Cause: The security protocol requires client-side JavaScript execution and cookie support to verify the request, a feature standard in web browsers but absent in many server-to-server communication frameworks.
• Implication: This reveals that robust, enterprise-grade AI deployment requires more than just API key management; it necessitates dedicated network pathways and enterprise-level service agreements to bypass protections designed for public web traffic.

This specific case at Itaú serves as a concrete example of a broader market trend. As more large enterprises move from pilot projects to full-scale production, the focus is shifting from model capabilities to the operational realities of integration. The friction between consumer-grade API security and enterprise-level automation will likely accelerate demand for solutions like dedicated private endpoints, virtual private cloud (VPC) peering, and specialized enterprise tiers from providers like OpenAI. These offerings provide the stability and direct access necessary for mission-critical, high-volume applications, bypassing the public internet's inherent unpredictability and security obstacles.

Enterprise adoption of generative AI is moving beyond model selection and into a new phase defined by solving complex infrastructure, security, and API integration challenges at scale.