HashiCorp compliance, certifications and attestations

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

HeldVendor page

A certified information security management system.

HeldVendor page

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

Protection of personal data in public clouds acting as processors.

HeldVendor page

Cryptographic modules validated under FIPS 140-2 or 140-3.

FIPS 140-3Vendor page

Validated compliance with the card industry data security standard.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data. HashiCorp, Inc.

A listing in the Cloud Security Alliance STAR Registry.

Level 1CSA STAR RegistryCAIQ

Certification under Spain's Esquema Nacional de Seguridad.

HeldVendor page

An assessment shared through the German automotive industry's exchange.

HeldVendor page