Response to Misleading Claims
There is a misleading Substack post that contains a number of inaccurate claims about Delve. We understand that content like this can raise questions so we want to address them directly and transparently.
We deeply care about our customer’s compliance success, that is priority number 1 for us.
Below are just some of the many inaccuracies in the story and then the truth.
1. Delve does not conduct audits or issue “fake” SOC 2 reports
The Substack inaccurately said Delve fakes compliance reports. This is not true. Delve does not issue compliance reports. Delve is an automation platform: we ingest information like team members, technical integrations, etc. and assist customers in implementing compliance requirements. We then grant auditors access to an audit dashboard to review evidence and provide a draft report for customers to edit. Next, licensed auditors independently test controls and then issue final reports for customers. Final reports and opinions are issued solely by independent, licensed auditors, not Delve.
2. Customers work with independent, accredited auditors
The Substack inaccurately said Delve relies on “Indian certification mills operating through front companies” and cannot pass legitimate audits. This too is not accurate. Delve customers can opt to work with an auditor of their choosing or opt to work with one from Delve’s network of independent, accredited third-party audit firms. These are established firms used broadly across the industry, including by other compliance platforms.
3. Standardization is inherent in compliance frameworks
The Substack inaccurately said Delve uses templates across the majority of reports. This is misleading. Most modern compliance platforms allow clients to adopt a fixed control set based on widely accepted standards set forth by the AICPA, ISO, and more. As a result, the overlap in structure and language across reports is expected. Moreover, Delve uses templates provided by auditors, but we do not prescribe final reports.
4. Delve does not produce fake evidence
The Substack tried to make an issue out of the fact that Delve provides “pre-filled” board meeting minutes, policies, and forms, implying that in some way this leads to providing fake evidence. This too is false. Delve provides templates to help teams document their processes in accordance with compliance requirements, as do other compliance platforms. These are starting points only: customers are responsible for reviewing, modifying, and finalizing their own materials. Draft templates are not the same as “pre-filled evidence.”
5. Delve is not a manual platform with no automation
The Substack inaccurately stated that Delve lacks automations. This is not true. Delve supports 120+ automated integrations and subservices, not just 14 integrations as alleged in the Substack.
Our product evolves everyday, and we are always looking to make improvements that best serve our customers. Delve has grown to more than 1,700 customers and given how competitive this industry is, attacks like this sadly come with the territory.
We are actively investigating any leaks and are still reviewing the Substack. If there are more attacks to respond to we will do so.
There is a misleading Substack post that contains a number of inaccurate claims about Delve. We understand that content like this can raise questions so we want to address them directly and transparently.
We deeply care about our customer’s compliance success, that is priority number 1 for us.
Below are just some of the many inaccuracies in the story and then the truth.
1. Delve does not conduct audits or issue “fake” SOC 2 reports
The Substack inaccurately said Delve fakes compliance reports. This is not true. Delve does not issue compliance reports. Delve is an automation platform: we ingest information like team members, technical integrations, etc. and assist customers in implementing compliance requirements. We then grant auditors access to an audit dashboard to review evidence and provide a draft report for customers to edit. Next, licensed auditors independently test controls and then issue final reports for customers. Final reports and opinions are issued solely by independent, licensed auditors, not Delve.
2. Customers work with independent, accredited auditors
The Substack inaccurately said Delve relies on “Indian certification mills operating through front companies” and cannot pass legitimate audits. This too is not accurate. Delve customers can opt to work with an auditor of their choosing or opt to work with one from Delve’s network of independent, accredited third-party audit firms. These are established firms used broadly across the industry, including by other compliance platforms.
3. Standardization is inherent in compliance frameworks
The Substack inaccurately said Delve uses templates across the majority of reports. This is misleading. Most modern compliance platforms allow clients to adopt a fixed control set based on widely accepted standards set forth by the AICPA, ISO, and more. As a result, the overlap in structure and language across reports is expected. Moreover, Delve uses templates provided by auditors, but we do not prescribe final reports.
4. Delve does not produce fake evidence
The Substack tried to make an issue out of the fact that Delve provides “pre-filled” board meeting minutes, policies, and forms, implying that in some way this leads to providing fake evidence. This too is false. Delve provides templates to help teams document their processes in accordance with compliance requirements, as do other compliance platforms. These are starting points only: customers are responsible for reviewing, modifying, and finalizing their own materials. Draft templates are not the same as “pre-filled evidence.”
5. Delve is not a manual platform with no automation
The Substack inaccurately stated that Delve lacks automations. This is not true. Delve supports 120+ automated integrations and subservices, not just 14 integrations as alleged in the Substack.
Our product evolves everyday, and we are always looking to make improvements that best serve our customers. Delve has grown to more than 1,700 customers and given how competitive this industry is, attacks like this sadly come with the territory.
We are actively investigating any leaks and are still reviewing the Substack. If there are more attacks to respond to we will do so.
21-year-old MIT dropouts raise $32M at $300M valuation led by Insight







.avif)










.webp)

