THIS WEEK ONLY: Save up to $500 on your Disrupt pass. Offer ends April 10, 11:59 p.m. PT. Register here.

Save up to $680 on your Disrupt 2026 pass. Ends 11:59 p.m. PT tonight. REGISTER NOW.

Delve Ends Relationship with Y Combinator Amid Controversy

The controversy surrounding compliance startup Delve has led to the termination of its relationship with the renowned accelerator Y Combinator.

Delve is no longer featured in Y Combinator's directory of portfolio companies, and the company's page has seemingly been removed from the Y Combinator website. Additionally, Delve's COO, Selin Kocalar, confirmed on X that "YC and Delve have parted ways."

Kocalar reflected on their experience, stating, "I still remember the day we took our YC interview at MIT. We’re so grateful to the community and every founder friend we’ve made." This marks a significant shift for Delve, as Y Combinator's association often lends credibility to startups.

Y Combinator is not the first investor to distance themselves from Delve. Insight Partners has also seemingly removed mentions of its investment in the startup, although a primary blog post was later restored.

Delve faces allegations that it misled clients regarding compliance with privacy and security regulations. Reports suggest the startup may have neglected critical requirements while generating reports for so-called "certification mills that rubber stamp reports." These claims originated from an anonymous Substack post by an individual identifying as "DeepDelver," a former client who raised concerns after receiving leaked information about Delve's operations.

DeepDelver subsequently published several posts that included alleged internal communications, accusing Delve of falsely representing an open-source tool as proprietary. A security researcher also claimed to have accessed sensitive data related to Delve's operations.

In light of these accusations, Delve has been vocal in defending its practices. The company's COO and CEO, Karun Kaushik, stated their intention to rectify what they believe are false claims. They allege that the accusations stem from a malicious attack rather than legitimate whistleblowing. In a recent blog post, they asserted that an attacker acquired Delve's services under false pretenses, exfiltrated sensitive data, and orchestrated a smear campaign against the startup.

The executives provided evidence, including a screenshot purportedly showing the attacker exfiltrating internal data. They characterized DeepDelver's allegations as a compilation of fabricated claims, selectively chosen screenshots, and out-of-context data. They defended their technology, noting that their AI automates a significant portion of compliance-related tasks.

Regarding the use of open-source tools, Delve clarified that it built upon an Apache 2.0 licensed repository, which allows for commercial use, and had significantly modified the tool for compliance purposes.

In an effort to rebuild trust, Delve is taking proactive measures to enhance customer confidence in its platform. These steps include purging the company's network of auditing firms that do not meet their standards, offering complimentary re-audits and penetration tests to all active customers, and ensuring that templates for documents such as board meeting notes are clearly marked as starting points only.

Kaushik acknowledged the challenges faced by Delve, stating, "We grew too fast and fell short of our own standard. To our customers, we deeply apologize for the inconveniences caused." As Delve navigates this difficult period, the startup is committed to addressing the concerns raised by its clients and regulators alike.

TechCrunch has reached out to Y Combinator and DeepDelver for comments regarding Delve's statements and the ongoing situation.

Topics: Delve, Enterprise, Karun Kaushik, Selin Kocalar, Startups, Y Combinator

Source: TechCrunch News