Menu
Delve
Delve is a compliance service and software platform for SOC 2, HIPAA, ISO 27001, GDPR, PCI DSS, and ISO 42001. It combines connected-system evidence, AI-assisted requirements work, questionnaires, a trust report, and support from security experts.
Trading normally, but under an unresolved public controversy: in March 2026 an anonymous poster alleged fabricated audit evidence and routing to affiliated audit firms, Delve denied it and attributed the leak to an attacker, and Delve and Y Combinator parted ways in April 2026. Sources and detail below.
Best for: Very early-stage SaaS startups pursuing a fast, lower-cost first SOC 2 reportWatch for: Requires independent verification of its evidence pipeline and auditor relationships Read our Delve review →
AI and MCP
MCP server: No official server for compliance data documented. Checked 12 Oct 2026.
Who does what in a SOC 2 with Delve?
Delve
Organizes the listed control, evidence, and audit workflows.
Your team
Owns policies, control decisions, exceptions, and approval of shared evidence.
The CPA firm
Sets audit scope, tests controls independently, and issues the SOC 2 report.
Delve states it does not itself issue attestations: "Final reports and opinions are issued solely by independent, licensed auditors, not Delve," and customers can choose their own auditor (Delve statement to TechCrunch, Mar 22, 2026). An anonymous poster ("DeepDelver") alleged in March 2026 that most Delve clients were routed through two affiliated audit firms, Accorp and Gradient, that rubber-stamped Delve-generated conclusions rather than performing independent review; Delve has denied this characterization. Accorp Partners separately stated on LinkedIn in March 2026 that every report it issues is prepared and reviewed by its own team and that any circulating report that appears unaudited was not issued by Accorp. The allegations remained unresolved in the public record as of September 29, 2026.
What does Delve do?
Delve was founded in 2023. Delve is led by Karun Kaushik. Delve says it serves 1,500+ companies.
Evidence collection
Available · Core marketed function (AI agents automating evidence collection); an anonymous poster disputed the authenticity of some generated evidence, reported by TechCrunch, Mar 22, 2026.
Auditor workspace
Available · Delve told TechCrunch it is an automation platform that gives auditors access to compiled information; final reports are issued by separate licensed audit firms.
Trust center
Available · Vendor markets a hosted "Trust Report" page for sharing compliance status with prospects.
Security questionnaires
Available · Delve's own rebuttal (quoted by TechCrunch, Apr 4, 2026) states its AI "automated 70% of a security questionnaire"; a third-party review site independently describes AI-assisted questionnaire response.
Continuous control testing
Partial · Vendor markets "continuous monitoring"; not independently verified, and anonymous allegations (TechCrunch, Mar 2026) specifically disputed whether some monitoring/evidence was genuine.
Funding history
Delve (founded 2023 by Karun Kaushik and Selin Kocalar) raised a $3.3M seed round (announced Jan 2025, Y Combinator/General Catalyst/FundersClub/Soma Capital) followed by a $32M Series A led by Insight Partners at a $300M valuation, announced July 22, 2025; total disclosed funding is reported at $35.3M.
How much does Delve cost?
Delve's direct plans require quotes; a separate channel lists scoped prices. Third-party estimates put it at $10,000 to $30,000 a year. Your price depends on plan scope, headcount, services, and contract term.
Price source: view reported prices · checked 2026-07-24
Published prices (1)
| Listed item | Price | Scope |
|---|---|---|
| Foundation Package | From $12,000 / 12-month contract | AWS Marketplace listing for 1–20 employees on a 12-month contract; confirm included frameworks, audit scope, and renewal terms. · Source |
The marketplace price is scoped, not a universal rate card. Delve's services license agreement says the Order controls the license fees, scope, and term. Plan source
Ask for the first-year total, renewal cap, implementation charge, required add-ons, and separate audit fee in writing.
How does Delve compare with TrustCloud, Scytale, Sprinto?
| Attribute | DelveThis profile | Comp AI | Iru | TrustCloud | Scytale | Sprinto |
|---|---|---|---|---|---|---|
| Best for | Very early-stage SaaS startups pursuing a fast, lower-cost first SOC 2 report | Engineering-led teams that value inspectable code or the option to self-host | Teams seeking SOC 2 automation and device management in one platform | GRC teams handling several frameworks, trust reviews, and security questionnaires together | Companies without compliance expertise seeking software plus hands-on advisory | Early- to growth-stage SaaS teams seeking guided first-audit preparation |
| Observed price | $10,000–$30,000 / year | Not published | Up to $15,000 / year for Compliance Automation | Not published | $7,500 / year | Not published |
| G2 rating | 4.7/5 (136 reviews) | 4.7/5 (73 reviews) | 4.7/5 (853 reviews) | 4.6/5 (49 reviews) | 4.8/5 (734 reviews) | 4.7/5 (1,685 reviews) |
| Integrations | 100+ published | 590+ published | Not published | 100+ published | 150+ published | 300+ published |
| Frameworks | 6 listed | 11 listed | 11 listed | 12 listed | 9 listed | 8 listed |
| Onboarding | bundled expert | guided | guided | self serve | bundled expert | bundled expert |
| Auditors here | Not published | 4 | Not published | 2 | Not published | 39 |
| Trust center | Listed | Listed | Listed | Listed | Listed | Listed |
Will Delve connect to your stack?
Delve reports 100+ integrations. Check the exact fields, tests, permissions, and plan coverage for each tool you need.
- Which required tools have a native connector, need an API build, or require manual upload?
- What fields and control tests sync, how often, and with which permissions?
- Which connections are included in the quoted plan?
Which frameworks does Delve support?
- SOC 2Delve says
- HIPAADelve says
- ISO 27001Delve says
- GDPRDelve says
- PCI DSSDelve says
- ISO 42001Delve says
Questions to ask in a Delve demo
- Can you demonstrate enterprise administration in the product?
- Can you demonstrate SCIM provisioning in the product?
- Which parts of continuous control testing require another tool or service?
- Can you demonstrate native multi-framework support in the product?
- Which plan includes SCIM, and is it a paid add-on?
- What is the first-year total, including onboarding, add-ons, and the audit fee?
- What renewal increase and minimum contract term should we put in writing?
- Is the SOC 2 audit contracted with a separate CPA firm, and what does that firm charge?
Delve FAQ
Where is Delve based?
Delve is headquartered in San Francisco, California, United States.
Who runs Delve?
Karun Kaushik is the CEO of Delve.
Who founded Delve?
Karun Kaushik and Selin Kocalar founded Delve in 2023.
Does Delve include the SOC 2 audit?
Delve states it does not itself issue attestations: "Final reports and opinions are issued solely by independent, licensed auditors, not Delve," and customers can choose their own auditor (Delve statement to TechCrunch, Mar 22, 2026). An anonymous poster ("DeepDelver") alleged in March 2026 that most Delve clients were routed through two affiliated audit firms, Accorp and Gradient, that rubber-stamped Delve-generated conclusions rather than performing independent review; Delve has denied this characterization. Accorp Partners separately stated on LinkedIn in March 2026 that every report it issues is prepared and reviewed by its own team and that any circulating report that appears unaudited was not issued by Accorp. The allegations remained unresolved in the public record as of September 29, 2026. A licensed CPA firm issues the SOC 2 report.
Is Delve itself SOC 2 compliant?
Supporting a buyer's SOC 2 program does not establish that Delve holds a current SOC 2 report. Ask for the vendor's current report during security review.
What does Delve integrate with?
Delve reports 100+ integrations. Confirm the fields, tests, permissions, and plan coverage for your own tools.
Similar platforms
Delve on SOC2Auditors
Sources 21 records · last read 2026-09-29
These links show what we checked and when.
| Establishes | Source | Retrieved |
|---|---|---|
| Company page lists founding year, headquarters, private status and employee band. | Delve on LinkedIn Marketplace | 2026-09-29 |
| Co-founder account of building Delve with Karun Kaushik in 2023. | Selin Kocalar Press | 2026-09-29 |
| Company announcement confirms the $32M Series A, Insight Partners lead and $300M valuation. | Delve Press | 2026-09-29 |
| Reports the anonymous poster's fake-compliance allegations and Delve's on-the-record denial/statement. | TechCrunch Press | 2026-07-24 |
| Reports Delve and Y Combinator parted ways and quotes Delve's rebuttal blog post, including the '70% of a security questionnaire' claim. | TechCrunch Press | 2026-07-24 |
| Confirms Delve performed Context AI's security certification, that Context AI has since switched to Vanta + Insight Assurance, and recaps the LiteLLM/Lovable fallout timeline. | TechCrunch Press | 2026-07-24 |
| Confirms the $32M Series A led by Insight Partners at a $300M valuation, announced July 22, 2025. | TechCrunch Press | 2026-07-24 |
| Investor-side confirmation of the Series A terms and use of funds. | Insight Partners Press | 2026-07-24 |
| Delve's own account (Apr 3, 2026) attributing the leak to a malicious attacker and disputing the anonymous poster's characterization. | Vendor blog (Delve) Vendor docs | 2026-07-24 |
| Dated March 24, 2026; records Delve's promised re-audits, penetration tests, independent-auditor introductions, and customer visibility into evidence and integration-test logs. | Vendor blog (Delve) Vendor docs | 2026-08-20 |
| Third-party estimate of ~100 integrations and limited cross-framework control mapping. | ComplyJet Editorial | 2026-07-24 |
| Third-party pricing estimate (~$12k/year automation platform + ~$12k audit). | ComplyJet Third-party estimate | 2026-07-24 |
| Lists Delve's Foundation Package at $12,000 starting for 1–20 employees on a 12-month contract; package scope and audit inclusion require confirmation. | AWS Marketplace Marketplace | 2026-08-26 |
| States that the Order controls the license fees, scope, and term, so a marketplace starting price is not a universal rate card. | Vendor terms (Delve) Vendor docs | 2026-08-26 |
| Reports Delve's G2 rating as 4.7/5 based on 135 reviews. | Sprinto Editorial | 2026-07-24 |
| Company profile confirming category and identity. | Crunchbase Review platform | 2026-07-24 |
| HIPAA framework support recorded as vendor-claimed. | Delve Vendor docs | 2026-07-24 |
| Vendor-claimed HIPAA workflow: custom program by company size/tools/risk profile; white-glove setup; AI evidence capture, questionnaire automation, infrastructure scanning, policy assistance, and a trust report. | Delve Vendor docs | 2026-08-31 |
| Not established. The reviewed Delve framework page describes HIPAA program support but does not establish the vendor's own PHI permission or customer BAA route. | SOC2Auditors.org Editorial | 2026-08-31 |
| Product page names connected AWS and GitHub data in its compliance workflow and describes evidence, questionnaire, and trust-report features. | Delve Vendor docs | 2026-09-24 |
| G2 seller listing shows 4.7/5 from 136 reviews; snapshot retrieved 2026-09-29. | G2 Review platform | 2026-09-29 |