tech
March 22, 2026
Delve accused of misleading customers with ‘fake compliance’
An anonymous Substack post accuses compliance startup Delve of “falsely” convincing “hundreds of customers they were compliant” with privacy and security regulations.
TL;DR
- A Substack post accuses Delve of falsely claiming customer compliance with privacy and security regulations.
- The post alleges Delve generated fake evidence, used 'certification mills,' and skipped major requirements.
- Delve denies the accusations, stating it provides templates and that independent auditors issue final reports.
- The anonymous author claims Delve's process constitutes 'structural fraud' by acting as both implementer and examiner.
- Concerns were also raised about Delve's network of audit firms and the potential for data leaks.
- Delve stated it is investigating leaks and reviewing the Substack post.
- Additional reports emerged regarding sensitive data access and security vulnerabilities.
Continue reading the original article