Delve accused of misleading customers with ‘fake compliance’
An anonymous Substack post accuses compliance startup Delve of “falsely” convincing “hundreds of customers they were compliant ” with privacy and security regulations.
TL;DR
- An anonymous Substack post accuses Delve of falsely assuring customers of compliance with privacy and security regulations.
- The accusations suggest Delve's clients could face criminal liability under HIPAA and fines under GDPR.
- Delve, a Y Combinator-backed startup, denies the claims, calling the Substack post misleading and inaccurate.
- The post alleges Delve provides fake evidence of compliance and works with audit firms that rubber-stamp reports.
- Delve states it is an automation platform and does not issue compliance reports; independent auditors do.
- Delve claims it provides templates for documentation, not pre-filled evidence, and is investigating the leak.