HashiCorp

Developer Tools United States Website Reviewed Sept. 2, 2026

Infrastructure automation: Terraform, Vault secrets management, Consul and Boundary, now part of IBM.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body HashiCorp Cloud Platform and supporting ISMS Current
SOC 2 Type II Independent third-party auditor HashiCorp Cloud Platform services; report available to customers under NDA Current
FedRAMP US federal authorising body Terraform Enterprise and in-scope US federal offerings Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Processor under its DPA; EU region available for HashiCorp Cloud Platform
CIS V8
Partial
Vault supports CIS Control 3 and 6 secrets and access management outcomes

Assess HashiCorp in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.