Comment by richartruddie

The major scandal started over allegedly fake SOC 2 audits, fabricated compliance evidence, and stolen open-source code, and that it has now parted ways with Y Combinator. It portrays the company as initially celebrated, then rapidly unraveling after anonymous investigations raised claims that most of its audit reports were nearly identical and that its enterprise product may have been a fork of open-source software without proper attribution.

The core accusation is that Delve generated hundreds of SOC 2 reports that were effectively templated, with the same wording, typos, and conclusions repeated across clients. The piece also says customers were allegedly shown compliance evidence that was fabricated or prewritten before auditors reviewed anything. In addition, it claims Delve marketed itself as more automated and credible than it really was, which made the situation look less like sloppy compliance and more like deliberate fraud.

Code theft claim

A second major allegation is that Delve’s “Pathways” workflow product was a modified version of the open-source tool SimStudio, allegedly sold without attribution despite Apache 2.0 licensing requirements. The article says Delve hired outside developers to maintain it and presented it as built internally, which intensified criticism around both ethics and licensing. This part of the story broadened the scandal beyond compliance fraud into possible IP misuse.

The backlash was immediate: the story spread quickly, investors and supporters distanced themselves, Delve disabled parts of its demo pipeline, and Y Combinator cut ties with the company. The overall tone is that Delve went from high-profile startup to cautionary tale almost overnight.