Delve Compliance Scandal Widens — Fake SOC 2 Audits Linked to Vercel/Context AI Breach Chain, Y Combinator Severs Ties

TechCrunch·high signal

Delve, the compliance startup that certified Context AI's security (the origin point of the Vercel breach), is now facing a cascading crisis: whistleblower allegations of fake customer data and rubber-stamped audits, open-source license theft, and Y Combinator severing ties. Another Delve customer, Lovable, admitted to inadvertently sharing customer chat data publicly. The compliance-to-breach pipeline (Delve certifies Context AI → Context AI compromised → Vercel breached) exposes systemic risk in AI startup certification chains.