A compliance startup called Delve is under fire for allegedly lying to hundreds of customers about their privacy and security protections. An anonymous whistleblower claims the company falsely convinced businesses they were following important regulations when they actually weren’t.
This matters because companies rely on compliance firms to keep them legally protected. If you run a business, you pay these companies to make sure you’re following privacy laws and security rules. Getting it wrong can mean huge fines and legal trouble.
Trust but Verify
The accusations came through an anonymous post on Substack, a popular newsletter platform. The whistleblower claims Delve was essentially selling fake peace of mind. Companies thought they were protected by proper compliance procedures, but they may have been operating with major legal gaps.
Compliance is boring but crucial. When you sign up for a website or app, companies have to follow strict rules about how they handle your personal information. They often hire specialized firms like Delve to make sure they’re doing everything correctly.
The anonymous nature of these accusations makes them hard to verify, but they raise serious questions about the compliance industry. If true, hundreds of businesses could be unknowingly breaking privacy and security laws right now.
Delve hasn’t responded publicly to these claims yet. Companies that worked with them might want to double-check their compliance status with other firms. This story shows why businesses need to verify their legal protections, not just trust what compliance companies tell them.

