HCSEC-2025-25 - Updates to HashiCorp subprocessors

Bulletin ID: HCSEC-2025-25 Publication Date: September 29, 2025 Summary As part of HashiCorp’s ongoing commitment to privacy and transparency, we have updated our subprocessors list. These updates include details about the following subprocessors: Entity Adding/Removing? Services Performed Products Affected dbt Labs Adding Data modeling, transformation and querying of sales-related data HCP, HCP Terraform Posthog Adding Site analytics for consent management, and site optimization. HCP, HCP Terraform Fastly Removing Content delivery network, Internet security services, load balancing, and video and streaming services HCP Terraform Additionally, HashiCorp has formally transferred business operations to IBM as of 9/1/2025. As such, starting on 12/31/2025 the Subprocessor Page in our Trust Center will be sunset: For customers using IBM branded contracts, a list of HashiCorp’s subprocessors for each product will be available via IBMs Software Product Compatibility Reports page. No action is required. You can direct any comments or questions to ChiefPrivacyOffice@ca.ibm.com. For customers on legacy HashiCorp branded contracts, you can email privacy@hashicorp.com for the latest list of subprocessors per product. 1 post - 1 participant Read full topic