Delve removed from Y Combinator

(ycombinator.com)

204 points | by carabiner 5 hours ago

27 comments

  • maxbond 2 hours ago
    I'm getting the impression that a lot of people in this thread think this is because they violated an open-source license and saying things to the effect of, "they're just the ones who got caught". I also thought that was the scandal initially. (And when it comes to license violations, yes, there's absolutely more where that came from.)

    But that's just the cherry on top. I don't think they're being thrown out because they violated a license. There are really serious fraud allegations. Allegedly they were rubber-stamping noncompliant customers, leaving them exposed to potential criminal liability under regulations like HIPPA.

    https://deepdelver.substack.com/p/delve-fake-compliance-as-a...

    I've only skimmed this so I do not endorse these allegations, but I think it's context missing from this discussion.

    • fontain 42 minutes ago
      YC has no problem with morally questionable behavior, many YC startups do things that are just as shady. YC is, ultimately, not responsible for what these startups choose to do. Delve’s problem is that they betrayed so many other YC companies in the process. An important value of being in YC is access to a ready-made customer base. The licensing issue is nothing compared to their fake audits but it is an affront to the YC community, hence, kicked from the community.

      I’m sure if Delve has only engaged in fraudulent audits or had only resold another YC company’s product, they would have been allowed to stay, the problem is all of that combined pissed off enough other YC companies.

      • throwaway27448 22 minutes ago
        > YC is, ultimately, not responsible for what these startups choose to do.

        Of course they're responsible for their investments; they're just not liable. YC has a lot to answer for in the damage it's wreaked over the years.

    • jacquesm 11 minutes ago
      I came across a top tier compliance auditor doing the same thing recently. I tried to talk to them about it and rather than approaching this from a constructive point of view they wanted to know the name of the company that got certified so they could decertify them and essentially asked me to break my NDA. That wasn't going to happen, I wanted to have a far more structural conversation about this and how they probably ended up missing some major items (such as: having non-technical auditors). They weren't interested. They were not at all interested in improving their processes, they were only interested in protecting their reputation.

      I'm seriously disgusted about this because this was one of the very few auditors that we held in pretty high esteem.

      Pay-to-play is all too common, and I think that there is a baked in conflict of interest in the whole model.

    • JasonHEIN 34 minutes ago
      lol strongly agree it is just cherry on top. In big tech they also copy but just copy in a smart way so I don't believe that's the reason they got removed.
    • johnwheeler 29 minutes ago
      Something about this deep Delver bothers me. Why go so crazy if you don't really have much of an interest in the outcome of Delve? I don't know if Delve did anything wrong or not, but this report reads like someone with a lot to gain in delve failing or losing trust. Why would any client be so altruistic to help other companies?
      • bombcar 23 minutes ago
        It looks like a form of covering their ass - they basically (explicitly?) say they've been violating the law and it's Delve's fault.
      • trhway 5 minutes ago
        it may be anybody. Even somebody at YC wanting to create a background to drop Delve if suppose Delve were shady and they discovered it (i have no idea, heard about Delve today first time, just googled and read some techcrunch article - it says Delve has 1000 clients - googled employee count - sub-50, and until it is "an Uber for auditors" i have hard time to believe that 50 Silicon Valley people can do even one compliance report for one client, with AI or without)
  • everfrustrated 2 hours ago
    Someone leaked an internal Bookface chat from Garry Tan (YC CEO) saying:

      We have asked Delve to leave YC.
    
      YC is a community, not just an accelerator. The founders in our community have to trust each other, and we have to trust them. When that trust breaks down, there's really only one thing to do.
    
      We're not going to get into the details publicly. We wish them well.
    
    https://x.com/___4o____/status/2040271468874076380

    I have no direct knowledge of the accuracy of any of this. This is not my account.

    • BugsJustFindMe 56 minutes ago
      "They've betrayed my trust but I wish them well" is an interesting statement.
      • margalabargala 49 minutes ago
        "I wish them well" is an idiom for "I never want to see them again".

        Kinda like "bless your heart", which means nothing of the sort.

        • DANmode 22 minutes ago
          but should it be?
    • minimaxir 1 hour ago
      The text implies it’s more due to the alleged license violation of a YC startup’s IP than the alleged fraud.
      • kstrauser 1 hour ago
        Really? I know nothing about this other than what I've read here, but my first guess was the breakdown in trust means the allegations of fake audits.
        • minimaxir 51 minutes ago
          I was half-joking, but if YC has a legal issue resulting from the alleged fraud (unclear currently), kicking out the company for the lesser infraction would make more sense.
        • wahnfrieden 54 minutes ago
          It is very clearly the fake audits.
  • big-chungus4 0 minutes ago
    An I the only one who has 404 not found when I click the link
  • thoughthadlogin 2 hours ago
    Sure, most companies could add an About section and probably put this behind them pretty quickly. They could have even hired someone like Delve to assure this kind of thing wouldn’t happen again.

    But Delve themselves can’t really do any of that. They’ve screwed up on a fundamental piece of their own business model. Their core offering *is* Compliance as a Service!

    How could I trust their word that they’ll ensure my company is compliant? How could I trust their word that a company I’m doing business with is compliant? They can’t even handle their own Apache 2.0 licensed works, and that’s child’s play- relatively speaking. I’m supposed to trust that they can handle PCI and HIPPA and all the rest for other companies?

    This is like having a dentist who doesn’t brush and floss their own teeth. Or a building inspector working out of a moldy office suite with exposed rebar. Or an editor with a personal website full of typos and grammatical errors. It’s a dealbreaker to anyone with common sense.

    • borski 2 hours ago
      You’re right, you can’t.

      Unlike Zenefits, which had (allegedly?) committed fraud for part of their business in the interest of moving faster, and then Parker came back with Rippling…

      These guys’ entire and actual business model was fraud.

  • hbbio 1 hour ago
    This other profile is still up:

    https://www.forbes.com/profile/delve/

    30U30 never ceases to amaze.

    • avaer 1 hour ago
      I wonder if the kind of personality that gets you on 30U30 correlates with being willing to engage in massive fraud, and being able to get away with it for a minute.

      Holmes, SBF, Shkreli, Charlie Javice, Ishan Wahi...

      • gmd63 1 hour ago
        When ambitious competitors who can't accept loss or normalcy enter into a field that's saturated with skilled rule-abiding players, they'll cheat.

        Hypercompetitive fields will always surface cheaters given enough time. Then regulations pile on to fight the cheating, which makes it harder for honest people to do the good work.

        We do not punish cheaters like these as much as we should.

      • kstrauser 1 hour ago
        You know, after all this time Lucas Duplan doesn't seem so bad. His hubristic sin was posing for a photo burning fake hundred dollar bills. That just seems like a random Tuesday now.
        • minimaxir 56 minutes ago
          Naming his startup “Clinkle” should have been a crime, though.
          • kstrauser 38 minutes ago
            That was epicly horrid.
      • malthaus 57 minutes ago
        "that gets you on", ie. the kind of personality that literally pays & hustles to be featured on such a list to fuel their own ego?

        colour me surprised

        people still seem to think that forbes scouts the world for the best talents instead of the lists being basically a paid ad

      • rapind 1 hour ago
        Not sure it's exclusively a U30 thing. When it comes to grift and fraud, a well known 79 year old comes to mind.
        • pdpi 1 hour ago
          I'd focus less on the U30 part, and more on the 30U, if that makes sense — the problem is with people who seek that sort of attention (and that 79 year old certainly qualifies as wanting that sort of attention). For those people, their businesses are a means to an end in the most cynical way possible.
    • xyst 1 hour ago
      Forbes lists are _paid_ marketing stunts. Just like the Oscars, lil bro.
  • nfw2 1 hour ago
    It's not just about delve. It's about yc's model. YC encourages YC companies to trust other YC companies even though they are early.

    If you can't trust your batch mates for something as crucial as compliance, the model doesn't work.

    • jmcgough 1 hour ago
      They've graduated 5,000+ companies, so some fraud is hard to avoid, especially with young hungry founders willing to do anything to succeed. Honestly, it's a pretty good track record that there's only been a handful of companies like this.
    • worik 1 hour ago
      It can work under the umbrella of some sort of coordinator

      That looks like what happened here.

  • gnabgib 4 hours ago
    Related: Delve allegedly forked an open-source tool and sold it as its own (295 points, yesterday, 153 comments) https://news.ycombinator.com/item?id=47615434
  • Bratmon 18 minutes ago
    Fairly inevitable. Like all YC companies, they were total frauds, but they made the cardinal mistake of defrauding other YC companies instead of the general public. Bad move.
  • wenbin 2 hours ago
    Curious - in this situation, does delve return money to YC? Or YC simply writes off the investment
    • argee 1 hour ago
      Neither. "Leaving YC" or "being removed from Y combinator" really just means you (more precisely, your YC/HN account) loses access to internal resources like bookface. This does have the knock on effect of essentially isolating you from the community. It's not entirely a punishment, it can be as simple as you are a person who isn't working on a YC company anymore, for example.

      This has zero bearing on equity, which would be a different conversation. In this case, I think the YC SAFE is likely to remain as-is, unless the founders choose to return the money, or YC chooses to levy a heavier allegation of fraud (which they don't seem to have done here).

    • rekttrader 1 hour ago
      Ya it’s a total write down, I dunno how much they took from YC, if it was the standard deal this is just the cost of doing business.
  • apt-apt-apt-apt 54 minutes ago
    Not surprising that Cluely is using them.. they were probably like, what we're compliant, sure if you say so
  • jaredsohn 3 hours ago
    Interestingly, they show up in the company list. When you click the link it returns 404.

    https://www.ycombinator.com/companies/?query=delve

    • whilenot-dev 3 minutes ago
      Probably just a means of updating the Algolia index.
  • cyrusradfar 3 hours ago
    Related from an hour earlier: Delve removed from YC website [archive.org] https://news.ycombinator.com/item?id=47634405
    • ChrisArchitect 2 hours ago
      an example of why to avoid archive links in submissions (save 'em for comments), because the source link here will win.
  • jmcgough 1 hour ago
    Turns out you can't "fake it til you make it" with SOC2 compliance.
  • jrflowers 1 hour ago
    On the one hand the company that was selling companies pre-made “You’re hipaa compliant” pdfs was doing fraud, but on the other hand the companies that were buying “We’re hipaa compliant” pdfs that said they had implemented compliance measures that they definitely hadn’t were also doing fr
  • sandeepkd 2 hours ago
    Its quite ironical and interesting at the same time, seems like there is a threshold size/impact beyond which everyone would come and save you, anything less and you will have to bear the consequences.
  • bilalq 2 hours ago
    While I do think Delve and the leadership there should be held responsible, it's a bit weird to see YC and others take shots at them for breaking the law when so many of their prized unicorns achieved what they did by being willing to just ignore laws and deal with the consequences later.
    • olalonde 1 hour ago
      Working around arguably dumb regulations and making your customers happy in the process is not the same as defrauding your customers.
      • arionhardison 49 minutes ago
        While I agree with you, I also find myself wondering who draws the line. Given the current political atmosphere and its increasingly fluid relationship with "truth," I have to consider that the line for others may not be where it is for me — especially given the nuance buried in the details of many B2B deals.

        Their value prop had to be strong enough to get past YC, past the other founders in the batch, past due diligence. Given that, I'm no longer comfortable casting "fraud" as a clean binary.

        To be clear — I do genuinely believe they are a fraudulent company that lied and deserved to be removed. But introspectively, I have to sit with the fact that the space between "working around dumb regulations" and "outright fraud" is murkier than we'd like to admit.

      • worik 54 minutes ago
        > Working around arguably dumb regulations...

        ...is breaking the law

    • borski 2 hours ago
      Ignoring a law is different from knowingly and intentionally breaking the law, especially when that law is actual intentional fraud.

      Also, there was no “endgame.” They weren’t trying to change the law; they were exclusively breaking it for profit.

      • bilalq 2 hours ago
        Let me more clearly instead say that many successful startups knowingly and intentionally broke the law.

        But I agree that Delve is a special case and should naturally be held to a higher standard here because their whole business is around being compliant with the law. When most other startups break the law, they do it to get an advantage over competition. Delve did it in a way that sacrificed their core value towards customers.

        • borski 2 hours ago
          Yeah, precisely.
      • afavour 2 hours ago
        > Ignoring a law is different from knowingly and intentionally breaking the law

        This is something Airbnb has facilitated for a very long time, no? And Uber, back when it started.

        From a legal perspective I don’t see that it matters whether you’re trying to change the law or not. You’re either following it or breaking it.

        • borski 2 hours ago
          Sure. Technically and legally, you’re right.

          In reality, it makes quite a difference if public opinion is on your side or not.

          “We decided to commit fraud by providing fake compliance reports” reads very differently from “we let homeowners make money by renting a room”

        • bpodgursky 1 hour ago
          The difference is that Airbnb customers used Airbnb because they thought hotel regulations were dumb and overbearing (or at least, they didn't care about the laws). Delve customers were literally trying to obey the law and Delve (allegedly) lied to them about it.
      • TurdF3rguson 2 hours ago
        > Ignoring a law is different from knowingly and intentionally breaking the law

        Huh? In a legal sense I'm pretty sure they're the same thing.

        • borski 2 hours ago
          I ignore the law every day when I jaywalk. Technically, you’re right that that is also breaking the law. I wasn’t being careful with my words.

          How and why matters, though.

          • TurdF3rguson 1 hour ago
            > How and why matters, though.

            How and why you break a law matters (to a judge / jury). Whether you frame it as "ignoring" vs "breaking" in your legal defense, not so much.

            • borski 1 hour ago
              I agree; I attempted to clarify that with my “not using words carefully” but that is a fair criticism of what I wrote.
          • worik 53 minutes ago
            > I ignore the law every day when I jaywalk

            Not illegal here, but I hope you not complain when caught and fined.

          • jrflowers 1 hour ago
            That’s not how words work. This sentence

            > I ignore the law every day when I jaywalk.

            Means the exact same thing as “I intentionally break jaywalking laws every day”. They are equivalent sentences.

            • borski 1 hour ago
              I agreed with you; that is why I said I wasn’t being careful with my language.
          • tjwebbnorfolk 2 hours ago
            There is a difference between "fake it till you make it" and "blatant widespread fraud", but the line is blurrier than many startups would like to admit.
      • jrflowers 1 hour ago
        > Ignoring a law is different from knowingly and intentionally breaking the law

        This is like a line from a Naked Gun movie. The only way that this sentence could be true linguistically is if the party doesn’t break the law that they’re ignoring (e.g. I could ignore the rule against perpetuities while drunk driving through a zoo)

    • HaloZero 57 minutes ago
      I think it's fairly straight forward why. It's because Delve broke the law and got other YC companies in trouble vs other industries & people not under the YC banner.
    • gmerc 2 hours ago
      The deal is to have plausible deniability and not get caught
    • sky2224 2 hours ago
      Can you provide examples of YC startups that knowingly broke laws and just dealt with those issues later? I'm not very aware.
    • colechristensen 2 hours ago
      There's a sliding scale between fake it `till you make it and fraud.
      • tikhonj 2 hours ago
        Yeah, fraud is what happens when you don't make it.
    • MangoCoffee 1 hour ago
      fake it until you make it? at some point this attitudes of Silicon Valley start up will back fire.
    • KennyBlanken 1 hour ago
      > At its core, this article argues that Delve fakes compliance while creating the appearance of compliance without the underlying substance.

      Anderson Consulting er I mean "Accenture": "Hey, that's our job!"

      PWC: "Yeah! Fuck off!"

      KPMG: "Damn straight!"

      Ernst & Young: "What they said."

      Deloitte & Touche: "Ditto."

      ( https://en.wikipedia.org/wiki/Accounting_scandals#List_of_th... )

    • Pxtl 2 hours ago
      They broke laws that programmers care about.

      Like, it's a company that sells AI-slop powered regulatory compliance. How many laws do you think the "fake it ill you make it and you'll never make it" AI will break? But "regulatory compliance" is laws that startups hate, so breaking them is good.

      Copyright and the copyleft licenses built upon it are the laws that support the software industry instead of just making sure innocent people aren't hurt by all this innovating and disrupting.

  • philip1209 3 hours ago
    Can they keep their CISO out of jail?
  • SanjayMehta 40 minutes ago
    Orwellian memory hole engaged.
  • carabiner 3 hours ago
    Bye-bye tweet from founder: https://x.com/kocalars/status/2040262537166618887

    Notably YC hasn't wished them a farewell.

    • GaryBluto 2 hours ago
      > striving to make the world a better place.

      Why do all start-ups say this? I don't think there are many companies publicly saying "We're going to go 'scorched earth' on everybody."

      • bombcar 2 hours ago
        Because if they had the money to be honest about it they'd not be a start-up!
      • minimaxir 37 minutes ago
        It was a meme over a decade ago so prevalent that HBO's Silicon Valley did a joke about it: https://www.youtube.com/watch?v=B8C5sjjhsso

        Saying it in 2026 just makes it sound more insincere than usual.

      • nurettin 1 hour ago
        Striving to make the world a better place for us. Is what is implied.
      • shepherdjerred 1 hour ago
        Oracle, right?
    • mikert89 2 hours ago
      funny thing about this tweet is the founder still couldnt stop herself from name dropping MIT
      • claaams 2 hours ago
        Much like their soc audits, her time at MIT was also incomplete. Still doesn’t stop them from cosplaying as a grad though!
      • carabiner 2 hours ago
        Look at this series of tweets from her:

        > One interesting observation I’ve noticed is a lot of top founders did oddly strong at math from a young age.

        https://x.com/kocalars/status/2027076198002553159

        Nauseating.

    • emerald_rat903 2 hours ago
      So they decide to drop this from their COO while their CEO has been doing all the talking on a friday night? Looks like YC told them they had to announce this and this was their least-viewable option.
    • philip1209 2 hours ago
      At least they put a ladder up that tree
  • mememememememo 1 hour ago
    404s for me
    • bcraven 1 hour ago
      I think that's the point - they have been removed.
    • OptionOfT 1 hour ago
      That's the point.
      • mememememememo 1 hour ago
        Sorry! I thought it would be announcement. And it was subsequently taken down due to the HN interest.
  • jacquesm 2 hours ago
    "By combining the evidence I collected together with what the sim.ai team provided, I will show that Delve has stolen an open-source company’s tech by violating their license and then making a lot of money with it."

    ->

    You mean like OpenAI, Anthropic and all these other 'unicorns'?

    I'm happy we're all clear on how bad Delve is but in essence what they were doing is exactly the same as what these AI companies do.

    • Tyrubias 2 hours ago
      While I despise the sham commercial LLMs have made out of intellectual property, I think Delve is one step worse than that. The technology behind LLMs is innovative, even if the data used to train them have ethically and legally dubious origins. Delve doesn’t even have the ability to claim anything they’ve done as original, unless you count fraud as a service.
      • jacquesm 2 hours ago
        The only thing that makes delve worse in my book is that they're selling compliance, they have zero excuses. But the likes of OpenAI and Anthropic even if they don't sell compliance do whitewash bulk copyright violations and they have valuations far in excess of Delve. Too big to fail I guess.
      • chromacity 2 hours ago
        > Delve doesn’t even have the ability to claim anything they’ve done as original, unless you count fraud as a service.

        I'd wager there's some prior art...

      • throwaway81523 2 hours ago
        Fraud as a service! The next big thing!!!
        • cjbgkagh 1 hour ago
          Presidential pardon insurance, like audit insurance but for breaking laws instead of filing taxes.
  • phplovesong 1 hour ago
    Classic. I knew this would happen ever sine i first saw Delve on YC. I was right to trust my gut, and never used their product.
  • blast 2 hours ago
    friday news dump tho
  • rvz 2 hours ago
    There is no saving Delve after this.

    The only next product launch is an investigation.

  • baggy_trough 2 hours ago
    can't believe I almost spent 10 grand on this company a week before they blew up.
    • everfrustrated 2 hours ago
      The two founders being early 20's with no background in compliance wasn't a red-flag?
  • getverdict 1 hour ago
    [dead]