LiteLLM, the company behind a popular AI gateway utilized by millions of developers, has publicly announced its decision to cease its collaboration with compliance startup Delve. The firm intends to pursue new security certifications with an alternative company and auditor. This significant announcement follows a recent incident where LiteLLM’s open-source version was compromised by sophisticated credential-stealing malware last week.
Prior to this security incident, LiteLLM had obtained two security compliance certifications through its engagement with the AI compliance startup Delve. Such certifications are typically designed to confirm that a company has established robust procedures to minimize the likelihood and impact of potential security incidents.
Delve, however, has recently faced accusations of misleading its customers regarding their true compliance posture, allegedly by generating fabricated data and employing auditors who merely rubber-stamped their reports. While Delve’s founder has vehemently denied these allegations and offered complimentary re-tests and audits to all customers, this denial reportedly prompted an anonymous Delve whistleblower to escalate the situation, including releasing alleged receipts over the past weekend.
On Monday, LiteLLM CTO Ishaan Jaffer confirmed via a post on X that his company plans to engage Delve competitor Vanta for its re-certification efforts. Additionally, LiteLLM will independently source a third-party auditor to rigorously verify its compliance controls. This decisive move highlights LiteLLM’s proactive approach to security and compliance following a particularly challenging week, signaling a clear shift in its strategic partnerships.
The Editorial Staff at AIChief is a team of professional content writers with extensive experience in AI and marketing. Founded in 2025, AIChief has quickly grown into the largest free AI resource hub in the industry.