HCSEC-2026-30 - Updates to HashiCorp subprocessors

Bulletin ID: HCSEC-2026-30
Publication Date: August 18, 2026

Summary

As part of HashiCorp’s ongoing commitment to privacy and transparency, we have updated our subprocessors list. These updates include details about the following subprocessors:

Entity Description Action
Taken
Products
Affected
NetSuite Billing and accounting Removed All Products
Replicated Installation and packaging Removed Terraform Enterprise
Stripe PAYGO Payment processing Removed HCP, HCP Terraform
FastSpring E-commerce platform Added HCP, HCP Terraform

For customers using IBM branded contracts, a list of HashiCorp’s subprocessors for each product will be available via IBMs Software Product Compatibility Reports page. No action is required. You can direct any comments or questions to ChiefPrivacyOffice@ca.ibm.com.

For customers on legacy HashiCorp branded contracts, you can email privacy@hashicorp.com for the latest list of subprocessors per product.