unknown

Over the past week, you may have seen an anonymous post about Delve. While we responded to it in a day, we want to provide more details about what’s true, what's not, and some changes we’ve made.

There’s one question behind everything: did Delve fabricate compliance evidence or issue fraudulent audit reports?

No. We did not.

→ Delve is an AI compliance platform that connects customers with independent auditors. We are not an auditor, just as tax preparation software is not an accountant. We have never signed an audit report.

→ Using default templates for our customers, just like any other compliance platform, is not “faking evidence.” These are meant to serve as a starting point for customers.

→ Delve does have automation in the platform, with 600+ automated integration tests, an AI Copilot to guide customers through compliance, AI code scanning, and more.

--

We built Delve to accelerate innovation by bringing AI to compliance.

In doing that, we pushed hard on automation. However, we now realize we didn’t provide enough clarity about what is automated, what is customer-provided, and what is independently audited.

We have been working relentlessly to make improvements over the last week.

--

On our auditor network:

Delve connects customers with independent auditors. Some customers choose their own auditors, but many use firms in our network. Questions have been raised about some of those firms, including ones used by other platforms.

Going forward we will set a higher bar in how our auditor relationships are structured and how the process is experienced by customers.

Delve is rebuilding our auditor network, removing firms that don’t meet our standards, and offering complimentary re-audits and penetration tests to every customer.

On platform templates for our customers:

Delve provides default templates, just like many other platforms, for policies, board meetings, risk assessments, and more.

These are designed to be starting points only. We should have been more explicit about how they are meant to be reviewed and customized by customers.

We are making that indisputably clearer within the platform.

On draft audit reports:

Third-party auditors are responsible for independently reviewing all evidence and issuing final reports.

We built automation that interacts closely with independent audit workflows to help expedite the process on behalf of our customers. However, this contributed to confusion about where automation ends and independent judgment begins.

From now on, Delve will no longer automate these parts of the process. Furthermore, customers have a direct line of communication with their auditor to enhance transparency in any audit communications.

--

We started Delve because we went through compliance ourselves and saw how slow, expensive, and manual it was.

To anyone that wants to sit down and discuss our product philosophy and improvements, please reach out and let’s chat about it.

<p>Over the past week, you may have seen an anonymous post about Delve. While we responded to it in a day, we want to provide more details about what’s true, what's not, and some changes we’ve made.

There’s one question behind everything: did Delve fabricate compliance evidence or issue fraudulent audit reports?

No. We did not.

→ Delve is an AI compliance platform that connects customers with independent auditors. We are not an auditor, just as tax preparation software is not an accountant. We have never signed an audit report.

→ Using default templates for our customers, just like any other compliance platform, is not “faking evidence.” These are meant to serve as a starting point for customers.

→ Delve does have automation in the platform, with 600+ automated integration tests, an AI Copilot to guide customers through compliance, AI code scanning, and more.

--

We built Delve to accelerate innovation by bringing AI to compliance.

In doing that, we pushed hard on automation. However, we now realize we didn’t provide enough clarity about what is automated, what is customer-provided, and what is independently audited.

We have been working relentlessly to make improvements over the last week.

--

On our auditor network:

Delve connects customers with independent auditors. Some customers choose their own auditors, but many use firms in our network. Questions have been raised about some of those firms, including ones used by other platforms.

Going forward we will set a higher bar in how our auditor relationships are structured and how the process is experienced by customers.

Delve is rebuilding our auditor network, removing firms that don’t meet our standards, and offering complimentary re-audits and penetration tests to every customer.

On platform templates for our customers:

Delve provides default templates, just like many other platforms, for policies, board meetings, risk assessments, and more.

These are designed to be starting points only. We should have been more explicit about how they are meant to be reviewed and customized by customers.

We are making that indisputably clearer within the platform.

On draft audit reports:

Third-party auditors are responsible for independently reviewing all evidence and issuing final reports.

We built automation that interacts closely with independent audit workflows to help expedite the process on behalf of our customers. However, this contributed to confusion about where automation ends and independent judgment begins.

From now on, Delve will no longer automate these parts of the process. Furthermore, customers have a direct line of communication with their auditor to enhance transparency in any audit communications.

--

We started Delve because we went through compliance ourselves and saw how slow, expensive, and manual it was.

To anyone that wants to sit down and discuss our product philosophy and improvements, please reach out and let’s chat about it.</p>

Gergely Orosz

Delve, a security compliance tool, is facing criticism for a contradiction: claiming they are not an auditor (comparing themselves to tax preparation software) while simultaneously allowing customer websites to display 'Secured by Delve' certification badges. The post calls out this inconsistency as a case of trying to have it both ways, suggesting the stance is now causing problems for the company.

Delve: "We are not an auditor, just as tax preparation software is not an accountant. We have never signed an audit report."

Also Delve:

Customer websites display certifications that says "Secured by Delve."

You simply cannot have it both ways, and now this bites back.

<p>Delve: &quot;We are not an auditor, just as tax preparation software is not an accountant. We have never signed an audit report.&quot;

Also Delve:

Customer websites display certifications that says &quot;Secured by Delve.&quot;

You simply cannot have it both ways, and now this bites back.</p>