AWS Nitro Enclaves ensure that the unencrypted private keys powering Coinbase CDP Wallets never leave the isolated hardware partition, protecting them even from Coinbase and the cloud host

Quotes that support claims

Instead, CDP Wallets use Trusted Execution Environments (TEEs) to secure sensitive operations inside AWS Nitro Enclaves, ensuring unencrypted private keys are never exposed — not even to Coinbase.

Unlike traditional wallets that require teams to handle private keys or operate complex MPC infrastructure, CDP Wallets operate inside AWS Nitro Enclaves. This ensures that private keys are never exposed, even to Coinbase.