
Bruno Faviero
27K posts

Bruno Faviero
@Bfaviero
🇺🇸 🇧🇷 Founder @magna_digital (acq by @krakenfx), VC/LP @Payward & @alloygp Prev: 2x AI/Defense founder (acq by PLTR). SWE Kensho, MIT CS, YC W22


We just released Claude Code channels, which allows you to control your Claude Code session through select MCPs, starting with Telegram and Discord. Use this to message Claude Code directly from your phone.


Delve, a YC-backed compliance startup that raised $32 million, has been accused of systematically faking SOC 2, ISO 27001, HIPAA, and GDPR compliance reports for hundreds of clients. According to a detailed Substack investigation by DeepDelver, a leaked Google spreadsheet containing links to hundreds of confidential draft audit reports revealed that Delve generates auditor conclusions before any auditor reviews evidence, uses the same template across 99.8% of reports, and relies on Indian certification mills operating through empty US shells instead of the "US-based CPA firms" they advertise. Here's the breakdown: > 493 out of 494 leaked SOC 2 reports allegedly contain identical boilerplate text, including the same grammatical errors and nonsensical sentences, with only a company name, logo, org chart, and signature swapped in > Auditor conclusions and test procedures are reportedly pre-written in draft reports before clients even provide their company description, which would violate AICPA independence rules requiring auditors to independently design tests and form conclusions > All 259 Type II reports claim zero security incidents, zero personnel changes, zero customer terminations, and zero cyber incidents during the observation period, with identical "unable to test" conclusions across every client > Delve's "US-based auditors" are actually Accorp and Gradient, described as Indian certification mills operating through US shell entities. 99%+ of clients reportedly went through one of these two firms over the past 6 months > The platform allegedly publishes fully populated trust pages claiming vulnerability scanning, pentesting, and data recovery simulations before any compliance work has been done > Delve pre-fabricates board meeting minutes, risk assessments, security incident simulations, and employee evidence that clients can adopt with a single click, according to the author > Most "integrations" are just containers for manual screenshots with no actual API connections. The author describes the platform as a "SOC 2 template pack with a thin SaaS wrapper" > When the leak was exposed, CEO Karun Kaushik emailed clients calling the allegations "falsified claims" from an "AI-generated email" and stated no sensitive data was accessed, while the reports themselves contained private signatures and confidential architecture diagrams > Companies relying on these reports could face criminal liability under HIPAA and fines up to 4% of global revenue under GDPR for compliance violations they believed were resolved > When clients threaten to leave, Delve reportedly pairs them with an external vCISO for manual off-platform work, which the author argues proves their own platform can't deliver real compliance > Delve's sales price dropped from $15,000 to $6,000 with ISO 27001 and a penetration test thrown in when a client mentioned considering a competitor

We just released Claude Code channels, which allows you to control your Claude Code session through select MCPs, starting with Telegram and Discord. Use this to message Claude Code directly from your phone.


This, from Bloomberg, is not good news for a market segment that is already challenged to separate signal from noise, let alone properly differentiate among funds/firms in this space. #markets #privatecredit

Random thing that improved my life: I got this ring light that I put next to my desk to shine bright light in my eyes early in the morning. I wake up at 430am and definitely saw an improvement in morning alertness and sleep quality. Also felt like it helped avoid winter lows.


We're excited to announce 'The Situation Room' by Polymarket is coming to Washington, D.C. The world's first bar dedicated to monitoring the situation. 🧵

Price Does Not Matter At Seed: "At seed and Series A the price almost does not matter if you are right about the company. I invested in the seed round of Faire at a $20M valuation, which was very expensive at the time. That investment ended up returning 200x." @gokulr Do you agree price does not matter at seed @jasonlk @honam @infoarbitrage @Struhl @rabois

We raised a $27M Series A to replace the spreadsheets and human duct tape behind $100 trillion in global assets. Fund administration is the invisible backbone of private equity and venture capital - and it’s broken. Why? Financial data is scattered, stale, and locked inside legacy providers. Books take forever to close. Basic questions about your own fund take days to answer. So we rebuilt the general ledger, waterfall engine, investor portal, and portfolio management from scratch. One single source of truth for your firm. Our AI agents read emails, propose journal entries, and extract portfolio updates in seconds. Our CPAs review every output. Today, we administer $15 billion in assets - and we’re just getting started. Every fund CFO keeps getting asked: how will you adopt AI? Now you have an answer. Run your firm in real-time with @hanoverpark. –- Excited to partner with Jake Saper at @emergencecap @peterjhebert at Lux, @chadbyers/@pratyushbuddiga at Susa and CFOs at the largest private equity firms to forge this future.

The SEC just released the most important piece of U.S. crypto regulatory guidance ever produced. 68 pages. 148 footnotes. A 5-category token taxonomy. Safe harbors for staking, mining, wrapping, and airdrops. And a separation doctrine that changes how every token deal gets structured. Initial takeaways in this thread. Full analysis in my article below.





"Tokenized Stocks Are Coming" - as seen in @WSJ.

everyone claims they want "contrarian" founders but what they actually want - founders with a non-obvious insight that happens to align with an explosive market This is bc contrarian + right = visionary. contrarian + wrong = unemployed





TODAY 🚨: The Commission issued an interpretation that clarifies the application of federal securities laws to crypto assets. This is a major step to provide greater clarity regarding the Commission’s treatment of crypto assets. Read the release here: ow.ly/XhhV50YvxvO








