# Automate API Compliance and Deployment with AI & Kong

This talk explains how a regulated financial organization is using AI and platform engineering to make API delivery faster without removing compliance controls. The speaker says AI can generate a working API in five to ten minutes, but that speed alone does not make code safe for production, especially in an environment that manages trillions in assets and answers to multiple regulators. Their approach is to bake reusable controls into a Kong-based API platform so teams inherit requirements such as SSO and other standard policies, then let developers use AI through an internal gateway that injects platform skills and documentation automatically. Because AI is non-deterministic, every change still passes through policy-focused PR checks and deterministic API ops validations before deployment. If a check fails, the AI iterates on the code until it passes. The result is a self-service process that removes human bottlenecks, shortens delivery from quarters, and still keeps a required human approval step.