Delve accused of misleading customers with ‘fake compliance’

An anonymous Substack post accuses Delve, a compliance automation startup, of fabricating compliance evidence, leaking a spreadsheet of confidential client reports, and enabling customers to display unimplemented security controls; subsequent social posts allege access to sensitive employee and customer data and claim external attack surface weaknesses. Delve denies issuing compliance reports, says auditors are independent, and is investigating the claims while journalists seek further comment; the allegations remain unverified.