You could potentially file the below report if a corporate entity in question appears to be violating US sanctions. You will potentially get answers you seek through regulator output and actions. No guarantees for any of this, and it’s not uncommon for funds to be hands off and not keeping tabs on portfolio companies (intentionally or not). It’s also not uncommon for startups to be operating in violation of the law.

Dept of the Treausry: How can I report a possible violation of U.S. sanctions to OFAC?

https://ofac.treasury.gov/faqs/13

> OFAC encourages anyone who may have violated OFAC-administered sanctions programs, or anyone who is aware of potential violations, to disclose the apparent or potential violation to OFAC. Voluntary self-disclosure to OFAC is considered a mitigating factor by OFAC in enforcement actions, and pursuant to OFAC’s Economic Sanctions Enforcement Guidelines, will result in a reduction in the base amount of any proposed civil penalty.

> Other U.S. government agencies, including the U.S. Department of Justice (DOJ) and the U.S. Department of Commerce’s Bureau of Industry and Security (BIS) have their own disclosure procedures for voluntarily self-disclosing violations of U.S. sanctions and export control laws. Moreover, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) maintains a whistleblower incentive program for violations of OFAC-administered sanctions, in addition to violations of the Bank Secrecy Act. Individuals located in the United States or abroad who provide information may be eligible for awards, if the information they provide leads to a successful enforcement action that results in monetary penalties exceeding $1,000,000.