Y Combinator Boots Delve: Compliance Startup Faces Exit Amid Fake SOC 2 Allegations and Code Theft Claims

Andrew Lee

Y Combinator Boots Delve: Compliance Startup Faces Exit Amid Fake SOC 2 Allegations and Code Theft Claims

US-based compliance startup Delve has parted ways with premier accelerator Y Combinator following a series of damaging allegations.

Founded in 2023 by Karun Kaushik and Selin Kocalar, Delve joined Y Combinator's Winter 2024 batch and raised millions at a $300 million valuation for its AI-powered compliance tools.

DeepDelver's Bombshell Exposé

An anonymous whistleblower, DeepDelver, published a Substack post claiming Delve fabricated SOC 2, HIPAA, and ISO 27001 certifications for hundreds of clients.

DeepDelver further alleged that Delve forked an open-source agent-building tool from fellow YC alum Sim.ai and repackaged it as their proprietary Pathways product.

Y Combinator's Swift Response

Y Combinator CEO Garry Tan confirmed on internal forum Bookface that the firm asked Delve to leave, emphasizing YC as a trust-based community.

Delve is now scrubbed from Y Combinator's official portfolio directory.

Clients including Lovable, 11x, and Bland have publicly distanced themselves, switching to rivals like Vanta out of caution.

Delve's COO Selin Kocalar acknowledged the split on X, framing it as a mutual parting of ways.

The founders vehemently deny wrongdoing, dismissing the claims as a coordinated smear campaign against their innovative AI compliance platform.

This scandal underscores vulnerabilities in AI-automated audits and the premium placed on integrity within startup networks.

Looking ahead, Delve's future hangs in balance amid eroding client trust and intensified scrutiny from investors.

Written by

Andrew Lee

Journalist

BEAMSTART Membership

Get the stories founders act on, plus $1M+ in perks.

What's included