Delve
Shares rank 2 of 3 compliance automation platforms by recommenders
Some users say it worked well, but critics say its SOC 2 and ISO 27001 compliance was fabricated and its audits lacked real independence.
Some users say it worked well, but critics say its SOC 2 and ISO 27001 compliance was fabricated and its audits lacked real independence.
117 people gave an opinion
- recommend it
- 5
- criticize it
- 112
- approval share
- 4%
Recommended in 3 of 13 months
- November 2025: not recommended
- December 2025: recommended
- January 2026: not recommended
- February 2026: not recommended
- March 2026: not recommended
- April 2026: recommended
- May 2026: not recommended
- June 2026: not recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 5 people recommend itNeeds 10 or more, not met.
- 0 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 3 of 13 monthsNeeds 4 or more, not met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Reported good results overall
“it worked quite well specially when models weren't as good as they are now”
Comment from 8 Apr 2026 in “Show HN: TUI-use: Let AI agents control interactive terminal programs” “Honestly, Delve is great.”
Comment from 18 Dec 2025 in “Ask HN: Those making $500/month on side projects in 2025 – Show and tell”
What people warn about
Each mark is one comment
Fabricated compliance and fraud allegations
“The specific fraud allegations are bad (lying about US based auditors)”
Comment from 4 Apr 2026 in “Delve Removed from Y Combinator” “someone who sells open source code for millions despite not having a license to do so is almost certainly cheating in other areas as well”
Comment from 2 Apr 2026 in “Delve allegedly forked an open-source tool and sold it as its own” “Delve doesn’t even have the ability to claim anything they’ve done as original, unless you count fraud as a service.”
Comment from 4 Apr 2026 in “Delve Removed from Y Combinator” - Comment from 4 Apr 2026 in “Delve Removed from Y Combinator”
- Comment from 23 Mar 2026 in “Delve (YC W24) – Fake Compliance as a Service – Part I”
- Comment from 26 Jun 2026 in “You didn't vibe code it, you stole it from open source&enterprise-licensed code”
Templated, identical audit reports
“I can't understand a team of engineers PRE-PUBLISHING A TRUST REPORT before a single field has been filled out.”
Comment from 20 Mar 2026 in “Delve – Fake Compliance as a Service” “Copy-paste templates. 493 out of 494 leaked SOC 2 reports (99.8%) had identical text, same grammatical errors”
Comment from 4 Apr 2026 in “Delve Removed from Y Combinator” Auditor independence and accreditation doubts
“None of their ISO 27001 certificates, aside from the premium one-offs with the vCISO, are accredited by any reputable ISO accreditation body.”
Comment from 20 Mar 2026 in “Delve – Fake Compliance as a Service” “Delve is in control of the auditing process in a way that is inappropriate and unusual for this industry.”
Comment from 20 Mar 2026 in “Delve – Fake Compliance as a Service” Customers may be less secure
“The average delve customer startup might be less secure that the average startup who has to justify their processes to a real auditor.”
Comment from 2 Apr 2026 in “Mercor Hit by Cyberattack” “The leaked excel sheet with customers of Delve is basically a shortlist of targets for hackers to try now.”
Comment from 2 Apr 2026 in “Mercor Hit by Cyberattack”
Other compliance automation platforms people recommend
The two most recommended other compliance automation platforms, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
See all 3 compliance automation platforms, rankedWhat people said
40 of the 148 comments that mention it, newest first. Each links to the original comment.
“an AI research tool that won't answer for you”
“Delve used an audit mill they paid to rubber-stamp the cookie-cutter and AI slop reports it authored.”
“it was the "much more" (fabricating SOC 2 and ISO 27001 compliance) that caused them to get into trouble”
“Startups can lie, cheat and steal, and their customers "love" them until they find out they've been duped.”
“Of all the possible uses for LLMs, that has got to be one of the most out and out irresponsible and dangerous ones”
“put an impressively secure looking logo on their site and effectively whitewash needing to do anything else”
“The organization carries out background and/or reference checks on all new employees and contractors prior to joining”
“I wish I could debug it like I do with a Go app with delve”
“it worked quite well specially when models weren't as good as they are now”
“not being honest with your customers when you are a compliance company is not going to be great for business”
“Not "finding new auditors to replace those that want nothing to do with us and our standards were shite"”
“The specific fraud allegations are bad (lying about US based auditors)”
“Copy-paste templates. 493 out of 494 leaked SOC 2 reports (99.8%) had identical text, same grammatical errors”
“you'd expect a compliance company to understand basic software licensing, especially the most popular.”
“The problem is the malicious intent, you just can't do that anywhere, esp not in a trust based business”
“they made the cardinal mistake of defrauding other YC companies instead of the general public”
“the company that was selling companies pre-made “You’re hipaa compliant” pdfs was doing fraud”
“Delve customers were literally trying to obey the law and Delve (allegedly) lied to them about it.”
“Delve doesn't even have the ability to claim anything they've done as original, unless you count fraud as a service.”
“The only thing that makes delve worse in my book is that they're selling compliance, they have zero excuses.”
“Delve doesn’t even have the ability to claim anything they’ve done as original, unless you count fraud as a service.”
“It also reveals how shallow the vetting YC does. This is both on delve and YC initially accepting them.”
“someone who sells open source code for millions despite not having a license to do so is almost certainly cheating in other areas as well”
“I'd be more concerned about a shareholder lawsuit if Delve told their investors that they owned the IP of said platform.”
“The average delve customer startup might be less secure that the average startup who has to justify their processes to a real auditor.”
“The leaked excel sheet with customers of Delve is basically a shortlist of targets for hackers to try now.”
“Now you're just left with the ethos of cheating your way to the top without a real business to attach it to.”
“We were unable to answer most questions honestly without jeopardizing the deals we were trying to land.”
“the elites like the MIT dropouts that started this company think the rest of us observers are stupid”
“The rookie mistake they made is they forgot to bribe the regulators with promises of future job offers.”
“None of their ISO 27001 certificates, aside from the premium one-offs with the vCISO, are accredited by any reputable ISO accreditation body.”
“they only began to step away from Delve once they realized they couldn't close the deals they wanted”
“I can't understand a team of engineers PRE-PUBLISHING A TRUST REPORT before a single field has been filled out.”
“the allegations here is that it is fraud. An "AI" company acting as a front for certification mills”
“only be concerned about the complete illegitimacy of their certs when they were already exposed”
“Delve is in control of the auditing process in a way that is inappropriate and unusual for this industry.”
“Delve fakes compliance while creating the appearance of compliance without the underlying substance”
“it's a whole other thing to say you don't have to have board meetings and generating fake minutes”
“expensive marketing predicated heavily on them being MIT dropouts instead of any expertise in the space”
“Honestly, Delve is great.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.