HCSEC-2025-25

**Bulletin ID:** HCSEC-2025-25 **Publication Date:** September 29, 2025 **Summary** As part of HashiCorp’s ongoing commitment to privacy and transparency, we have updated our [subprocessors list.](https://www.hashicorp.com/en/trust/privacy/subprocessors "https://www.hashicorp.com/en/trust/privacy/subprocessors") These updates include details about the following subprocessors: |**Entity** | **Adding/Removing?** | **Services Performed** | **Products Affected**| |--- | --- | --- | ---| |dbt Labs | Adding | Data modeling, transformation and querying of sales-related data | HCP, HCP Terraform| |Posthog | Adding | Site analytics for consent management, and site optimization. | HCP, HCP Terraform| |Fastly | Removing | Content delivery network, Internet security services, load balancing, and video and streaming services | HCP Terraform| Additionally, HashiCorp has formally transferred business operations to IBM as of 9/1/2025. As such, starting on 12/31/2025 the Subprocessor Page in our Trust Center will be sunset: * For customers using IBM branded contracts, a list of HashiCorp’s subprocessors for each product will be available via [IBMs Software Product Compatibility Reports page](https://www.ibm.com/software/reports/compatibility/clarity/index.html "https://www.ibm.com/software/reports/compatibility/clarity/index.html"). **No action is required.** You can direct any comments or questions to [ChiefPrivacyOffice@ca.ibm.com.](mailto:ChiefPrivacyOffice@ca.ibm.com. "mailto:ChiefPrivacyOffice@ca.ibm.com.") * For customers on legacy HashiCorp branded contracts, you can email [privacy@hashicorp.com](mailto:privacy@hashicorp.com "mailto:privacy@hashicorp.com") for the latest list of subprocessors per product.