Delve accused of misleading customers with ‘fake compliance’

An anonymous Substack post accuses Y Combinator-backed compliance startup Delve of fabricating compliance evidence for hundreds of customers, potentially exposing them to HIPAA and GDPR liability. The post, authored by 'DeepDelver,' claims Delve generates fake audit conclusions, pre-fills evidence of processes that never occurred, and uses rubber-stamp audit firms. Delve denies the accusations, calling the post misleading and characterizing its outputs as templates rather than pre-filled evidence. Additional reports emerged of security vulnerabilities in Delve's systems, including exposed employee background checks and equity vesting data. DeepDelver has promised a follow-up post with more allegations.