Delve accused of misleading customers with ‘fake compliance’

A bombshell anonymous Substack post has accused Y Combinator-backed compliance startup Delve of engaging in 'structural fraud,' allegedly fabricating evidence and using auditor firms to rubber-stamp reports for hundreds of customers. The author, 'DeepDelver,' claims to be from a former client and alleges Delve produced 'fake evidence of board meetings, tests, and processes that never happened' to achieve its claim of being the fastest compliance platform. The post specifically names audit firms Accorp and Gradient, described as part of the same operation primarily based in India, alleging they pre-sign reports generated by Delve itself, inverting the normal compliance structure and placing the startup 'in the role of both implementer and examiner.' This, DeepDelver argues, exposes clients to criminal liability under HIPAA and massive fines under GDPR.

Delve, which raised a $32 million Series A at a $300 million valuation last year led by Insight Partners, has forcefully denied the allegations in a blog post, calling the Substack 'misleading' and containing 'inaccurate claims.' The company states it does not issue compliance reports but is an 'automation platform' that ingests client information for independent, licensed auditors to review. Delve asserts that customers can choose their own auditor or one from its network and that final reports are 'issued solely' by those third-party firms. The scandal raises serious questions about the integrity of automated compliance solutions and the due diligence of venture capital firms backing highly regulated tech, potentially impacting Delve's entire client base and its recent unicorn valuation.