Bulletin ID: HCSEC-2025-25
Publication Date: September 29, 2025
Summary
As part of HashiCorp’s ongoing commitment to privacy and transparency, we have updated our subprocessors list. These updates include details about the following subprocessors:
| Entity | Adding/Removing? | Services Performed | Products Affected |
|---|---|---|---|
| dbt Labs | Adding | Data modeling, transformation and querying of sales-related data | HCP, HCP Terraform |
| Posthog | Adding | Site analytics for consent management, and site optimization. | HCP, HCP Terraform |
| Fastly | Removing | Content delivery network, Internet security services, load balancing, and video and streaming services | HCP Terraform |
Additionally, HashiCorp has formally transferred business operations to IBM as of 9/1/2025.
As such, starting on 12/31/2025 the Subprocessor Page in our Trust Center will be sunset:
-
For customers using IBM branded contracts, a list of HashiCorp’s subprocessors for each product will be available via IBMs Software Product Compatibility Reports page. No action is required. You can direct any comments or questions to ChiefPrivacyOffice@ca.ibm.com.
-
For customers on legacy HashiCorp branded contracts, you can email privacy@hashicorp.com for the latest list of subprocessors per product.