tech
March 21, 2026
Delve accused of misleading customers with ‘fake compliance’
An anonymous Substack post accuses compliance startup Delve of “falsely” convincing “hundreds of customers they were compliant” with privacy and security regulations.
TL;DR
- An anonymous Substack post accuses Delve of falsely assuring customers of compliance with privacy and security regulations.
- The accusations suggest Delve's clients could face criminal liability under HIPAA and fines under GDPR.
- Delve, a Y Combinator-backed startup, denies the claims, calling the Substack post misleading and inaccurate.
- The post alleges Delve provides fake evidence of compliance and works with audit firms that rubber-stamp reports.
- Delve states it is an automation platform and does not issue compliance reports; independent auditors do.
- Delve claims it provides templates for documentation, not pre-filled evidence, and is investigating the leak.
Continue reading the original article