YC-Backed 'AI Compliance' Startup Delve Faked SOC 2 Audits and Stole a Competitor's Source Code

A $300M AI Compliance Startup Was Running Fake Audits — Inside Its Own Product

Delve's entire pitch was automated SOC 2 compliance for AI companies. Its Slack channel told a different story. A whistleblower produced internal logs showing fabricated board meeting records and compliance tests that never ran — evidence manufactured to satisfy the same audit criteria Delve sold as a service.

The Receipt

The Slack leak was reported by TechCrunch on March 30, 2026. A second, separate allegation: Delve's Pathways product was not built in-house. It was a forked copy of SimStudio, the core product of competitor Sim.ai, taken without license. Y Combinator, which had backed Delve through a recent cohort, ejected the company from its portfolio on April 3, 2026 — one of the few public YC expulsions on record.

What It Proves

Delve was not a rogue employee. The Slack records implicate company leadership in constructing false audit trails. The irony is structural: a company that existed to prove other companies were trustworthy was fabricating the evidence of its own trustworthiness. The SimStudio allegation adds a second independent vector — intellectual property theft — that exists entirely apart from the compliance fraud. YC's public ejection is the clearest institutional confirmation that the evidence was considered credible.