Skip to content

HashiCorp compliance, certifications and attestations

Dev tools · 10 certifications held · 2 from public registries · read Sep 24, 2026

CertificationEvidence
SOC reports
SOC 2
Held

Vendor page

Sep 24, 2026
ISO standards
ISO/IEC 27001
Held

Vendor page

Sep 24, 2026
ISO/IEC 27017
Held

Vendor page

Sep 24, 2026
ISO/IEC 27018
Held

Vendor page

Sep 24, 2026
US government
FIPS 140 validated
FIPS 140-3

Vendor page

Sep 24, 2026
Finance
PCI DSS
Held

Vendor page

Sep 24, 2026
Privacy and cloud
Data Privacy Framework
Held

EU-US, UK extension, Swiss-US; non-HR data. HashiCorp, Inc.

Data Privacy Framework List

Sep 23, 2026
CSA STAR
Level 1

CAIQ

CSA STAR Registry

Sep 23, 2026
Regional programs
ENS (Spain)
Held

Vendor page

Sep 24, 2026
TISAX
Held

Vendor page

Sep 24, 2026

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

DateChange
Added CSA STAR

First listed in the CSA STAR Registry

Added Data Privacy Framework

HashiCorp, Inc.

About HashiCorp

Terraform, Vault and HCP.

Status
Public
Founded
2012

No public evidence found for

SOC reports
SOC 1, SOC 3
ISO standards
ISO 27701, ISO 9001, ISO 22301, ISO 20000, ISO 27799
AI governance
ISO 42001, STAR AI
US government
FedRAMP, DoD IL, GovRAMP, TX-RAMP, CMMC, 800-171, 800-53, ITAR, CJIS, IRS 1075, 508/VPAT
Finance
PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
Health
HIPAA, HITRUST, HDS, NHS DSPT, PHIPA
Life sciences (GxP)
GxP, Part 11, Annex 11, CSV
Privacy and cloud
CBPR, EU CoC
Regional programs
Cyber Ess., G-Cloud, C5, SecNum, IRAP, ISMAP, MTCS, K-ISMS
Education
FERPA, HECVAT, COPPA

Compare with Atlassian, GitLab, Postman, GitHub, Vercel

Company profile
Across fru.devAcquisitionsawardsblogscertificationsincidentsleadersPaydaysReleasesConferences

Certification changes by email

Wednesdays: vendors that gained or lost a certification, only in weeks with a change.

Double opt-in. Unsubscribe any time.