Delve

Delve provides an AI-native compliance automation platform designed for fast-growing companies. Founded in 2023 and based in San Francisco, the company aims to eliminate the manual work associated with achieving and maintaining compliance with frameworks such as SOC 2, HIPAA, ISO 27001, GDPR, and PCI DSS.

The company was founded by CEO Karun Kaushik and COO Selin Kocalar, who met during their first week as students at MIT. Both had backgrounds in AI research at MIT; Kaushik had worked on an AI-based COVID diagnostic tool, while Kocalar had published multiple research papers and led an experiment on the International Space Station. The idea for Delve emerged after they encountered the complexities of HIPAA compliance with a previous AI healthcare venture that aimed to create an AI medical scribe. This firsthand experience with compliance challenges led them to pivot and create Delve to simplify the process for other startups.

Delve's platform utilizes AI agents that function like team members to automate tasks such as evidence collection, screenshot gathering, report writing, and security questionnaire completion. Unlike traditional solutions that rely on API integrations, Delve's agents can collect evidence from a wide range of web apps and internal tools. The platform provides continuous monitoring to identify and alert teams to compliance gaps in real-time. The business model is primarily subscription-based, with custom pricing dependent on factors like company size, the number of frameworks required, and the level of support needed. It primarily serves startups and mid-market companies looking to secure enterprise contracts that require compliance certifications.

Delve is a graduate of the Y Combinator (W24) batch. It has raised a total of $35.3 million over two funding rounds. This includes a $3.3 million seed round in early 2024 with investors like General Catalyst and FundersClub, followed by a $32 million Series A round in July 2025, led by Insight Partners.

Keywords: compliance automation, AI agents, SOC 2, HIPAA, ISO 27001, GDPR, PCI DSS, security compliance, risk management, automated evidence collection, continuous monitoring, regulatory technology, RegTech, AI-native platform, Y Combinator, enterprise compliance, data security, cybersecurity automation, audit preparation, compliance-as-a-service