No items found.

Response to Misleading Claims

min read
No items found.

There is a misleading Substack post that contains a number of inaccurate claims about Delve. We understand that content like this can raise questions so we want to address them directly and transparently.

We deeply care about our customer’s compliance success, that is priority number 1 for us.

Below are just some of the many inaccuracies in the story and then the truth.

1. Delve does not conduct audits or issue “fake” SOC 2 reports

The Substack inaccurately said Delve fakes compliance reports. This is not true. Delve does not issue compliance reports. Delve is an automation platform: we ingest information like team members, technical integrations, etc. and assist customers in implementing compliance requirements. We then grant auditors access to an audit dashboard to review evidence and provide a draft report for customers to edit. Next, licensed auditors independently test controls and then issue final reports for customers. Final reports and opinions are issued solely by independent, licensed auditors, not Delve.

2. Customers work with independent, accredited auditors

The Substack inaccurately said Delve relies on “Indian certification mills operating through front companies” and cannot pass legitimate audits. This too is not accurate. Delve customers can opt to work with an auditor of their choosing or opt to work with one from Delve’s network of independent, accredited third-party audit firms. These are established firms used broadly across the industry, including by other compliance platforms.

3. Standardization is inherent in compliance frameworks

The Substack inaccurately said Delve uses templates across the majority of reports. This is misleading. Most modern compliance platforms allow clients to adopt a fixed control set based on widely accepted standards set forth by the AICPA, ISO, and more. As a result, the overlap in structure and language across reports is expected. Moreover, Delve uses templates provided by auditors, but we do not prescribe final reports.

4. Delve does not produce fake evidence

The Substack tried to make an issue out of the fact that Delve provides “pre-filled” board meeting minutes, policies, and forms, implying that in some way this leads to providing fake evidence. This too is false. Delve provides templates to help teams document their processes in accordance with compliance requirements, as do other compliance platforms. These are starting points only: customers are responsible for reviewing, modifying, and finalizing their own materials. Draft templates are not the same as “pre-filled evidence.”

5. Delve is not a manual platform with no automation

The Substack inaccurately stated that Delve lacks automations. This is not true. Delve supports 120+ automated integrations and subservices, not just 14 integrations as alleged in the Substack.

Our product evolves everyday, and we are always looking to make improvements that best serve our customers. Delve has grown to more than 1,700 customers and given how competitive this industry is, attacks like this sadly come with the territory.

We are actively investigating any leaks and are still reviewing the Substack. If there are more attacks to respond to we will do so.

About the authors

No items found.

There is a misleading Substack post that contains a number of inaccurate claims about Delve. We understand that content like this can raise questions so we want to address them directly and transparently.

We deeply care about our customer’s compliance success, that is priority number 1 for us.

Below are just some of the many inaccuracies in the story and then the truth.

1. Delve does not conduct audits or issue “fake” SOC 2 reports

The Substack inaccurately said Delve fakes compliance reports. This is not true. Delve does not issue compliance reports. Delve is an automation platform: we ingest information like team members, technical integrations, etc. and assist customers in implementing compliance requirements. We then grant auditors access to an audit dashboard to review evidence and provide a draft report for customers to edit. Next, licensed auditors independently test controls and then issue final reports for customers. Final reports and opinions are issued solely by independent, licensed auditors, not Delve.

2. Customers work with independent, accredited auditors

The Substack inaccurately said Delve relies on “Indian certification mills operating through front companies” and cannot pass legitimate audits. This too is not accurate. Delve customers can opt to work with an auditor of their choosing or opt to work with one from Delve’s network of independent, accredited third-party audit firms. These are established firms used broadly across the industry, including by other compliance platforms.

3. Standardization is inherent in compliance frameworks

The Substack inaccurately said Delve uses templates across the majority of reports. This is misleading. Most modern compliance platforms allow clients to adopt a fixed control set based on widely accepted standards set forth by the AICPA, ISO, and more. As a result, the overlap in structure and language across reports is expected. Moreover, Delve uses templates provided by auditors, but we do not prescribe final reports.

4. Delve does not produce fake evidence

The Substack tried to make an issue out of the fact that Delve provides “pre-filled” board meeting minutes, policies, and forms, implying that in some way this leads to providing fake evidence. This too is false. Delve provides templates to help teams document their processes in accordance with compliance requirements, as do other compliance platforms. These are starting points only: customers are responsible for reviewing, modifying, and finalizing their own materials. Draft templates are not the same as “pre-filled evidence.”

5. Delve is not a manual platform with no automation

The Substack inaccurately stated that Delve lacks automations. This is not true. Delve supports 120+ automated integrations and subservices, not just 14 integrations as alleged in the Substack.

Our product evolves everyday, and we are always looking to make improvements that best serve our customers. Delve has grown to more than 1,700 customers and given how competitive this industry is, attacks like this sadly come with the territory.

We are actively investigating any leaks and are still reviewing the Substack. If there are more attacks to respond to we will do so.

Don't let manual compliance slow you down.

With Delve, companies prove compliance faster, close deals quicker, and stay compliant as they scale.

How to build and run a billboard campaign

Dark gradient background transitioning from warm brown tones on the left to cooler blue tones on the right.