Delve accused of misleading customers with ‘fake compliance’

A Substack post by an anonymous author accuses Delve, a compliance automation startup, of fabricating compliance evidence, enabling customers to publish trust pages with controls that were never implemented, and potentially leaking confidential client reports and employee data; the article notes follow-up claims from an X user about access to sensitive Delve data and Delve's public denial and explanation that it provides templates and a network of independent auditors.