Y Combinator-backed compliance startup Delve now faces allegations it stole an open source tool from its own customer—Sim.ai—and rebranded it as proprietary software without attribution or license agreement. Anonymous whistleblower DeepDelver claims Delve took SimStudio, an Apache-licensed agent-building tool, renamed it “Pathways,” and pitched it to prospects as their own creation. Sim.ai founder Emir Karabeg confirmed to TechCrunch that Delve had zero license agreement. The irony is brutal: a compliance company allegedly violating software license compliance. Y Combinator removed them from its portfolio on April 4.
The Allegation: Customer Code Theft
DeepDelver recognized that Delve’s “Pathways” tool looked identical to Sim.ai’s SimStudio, an open source agent-building product. When asked if Pathways was based on SimStudio, Delve reportedly said they “built it themselves.” DeepDelver alleges Pathways was actually a modified fork, violating the Apache license which requires attribution.
Sim.ai founder Karabeg confirmed: “Delve had no license agreement with Sim.ai whatsoever.” Sim.ai was a paying Delve customer. Karabeg told TechCrunch they “tried unsuccessfully to sell them an agreement” and only learned their product was being marketed as a Delve offering after the fact.
Why Open Source Developers Care
Open source license violations strike at core developer values. The community is built on trust, attribution, and respect. Taking an Apache-licensed tool, stripping attribution, and claiming original authorship isn’t a gray area—it’s theft of intellectual labor. The Apache license requires preserving copyright notices and documenting modifications. These aren’t onerous requirements. They’re baseline integrity for participating in open source. Violating them while running a compliance company reveals contempt for community norms.
Pattern of Behavior, Not a Mistake
This is Delve’s third scandal in three weeks. March 19: allegations of “fake compliance,” with 493 out of 494 SOC 2 reports allegedly 99.8% identical. April 2: claims of forking a different customer’s proprietary code. Now open source license violations. One allegation could be disputed. Three looks like a business model built on theft.
Y Combinator’s Swift Reversal
On March 27, YC publicly supported Delve. By April 4, Delve was removed from YC’s portfolio. YC CEO Garry Tan’s reported internal message: “We have asked Delve to leave YC.” COO Selin Kocalar confirmed: “YC and Delve have parted ways.”
The eight-day reversal suggests overwhelming evidence. The pattern—backed by internal whistleblower documents, Sim.ai founder confirmation, and community pressure—crossed a line YC couldn’t defend. Precedent set: ethical violations around developer trust cost you your accelerator backing.
The Compliance Company That Wasn’t Compliant
Delve raised $32 million to sell compliance automation. Their alleged practice: auto-generate identical reports, rubber-stamp audits, steal customer code. A compliance startup committing compliance violations. Delve’s 494 customers paid for compliance advice while potentially facing regulatory consequences from inadequate auditing.
What This Reveals About Startup Culture
This scandal exposes the collision between startup hustle and developer ethics. “Move fast and break things” doesn’t extend to stealing code. When founders take a customer’s open source tool, strip attribution, and pitch it as original work—while selling compliance services—ethical norms have failed catastrophically. YC’s vetting missed red flags that should have been disqualifying.
What Comes Next
Delve’s credibility is destroyed. Their customers face potential regulatory exposure. Sim.ai and others whose code was allegedly stolen have legal recourse. Y Combinator set a standard: violate developer trust, lose your backing. The open source community is watching. When companies violate attribution norms, consequences should be swift. In Delve’s case, they were.
