A day after denying allegations of fake compliance audits, Delve has faced another round of accusations from the anonymous whistleblower DeepDelver. According to DeepDelver’s latest posts, which include video and Slack message evidence, more revelations are on the horizon.

Delve automates obtaining security certifications, essential for proving compliance with regulations like GDPR. Founded by MIT dropouts in 2023, this young startup has raised significant funding, including a $32 million Series A round led by Insight.

Despite its claims, Delve’s services have come under scrutiny after a high-profile customer, LiteLLM, was recently infected with malware. This incident has cast doubt on the effectiveness of security certifications and audits, raising questions about whether compliance is just an empty gesture.

The ongoing saga highlights the complexities in ensuring true security and compliance. While DeepDelver’s evidence suggests Delve might not be as compliant as it claims, it also raises broader concerns about the reliability of compliance practices across tech companies.

Is there a way to ensure genuine security without relying on potentially superficial certifications? Only time will tell how this story unfolds, and whether it leads to meaningful changes in compliance standards.