Bulletin ID: HCSEC-2026-10
Publication Date: April 27, 2026
Summary
As part of HashiCorp’s ongoing commitment to privacy and transparency, we have updated our subprocessors list. These updates include details about the following subprocessors:
| Entity | Description | Action Taken | Products Affected |
|---|---|---|---|
| Forethought | Customer support and ticket routing | Removed | All Products |
| DocuSign | Document signing software | Removed | All Products |
| Material Security | Email security | Removed | All Products |
| SendSafely | Encrypted file exchange platform used for support | Removed | All Products |
| Zendesk | Customer support | Removed | All Products |
| Adobe eSignature | Document signing software | Added | All Products |
| Box, Inc | Content Management and File Sharing | Added | All Products |
| Microsoft Teams | Communication and collaboration platform | Added | All Products |
| Proofpoint | Email security | Added | All Products |
For customers using IBM branded contracts, a list of HashiCorp’s subprocessors for each product will be available via IBMs Software Product Compatibility Reports page. No action is required. You can direct any comments or questions to ChiefPrivacyOffice@ca.ibm.com.
For customers on legacy HashiCorp branded contracts, you can email privacy@hashicorp.com for the latest list of subprocessors per product.