Skip to main content

HashiCorp Supplier
Code of Conduct

Effective November 1, 2023

Introduction

HashiCorp is an organization driven by its people and culture. We are deeply passionate about the work we do and the difference we make for our customers and community. We are committed to conducting business in an ethical, legal, and socially responsible manner. Integrity is one of our key principles and this extends to all our business relationships. This Supplier Code of Conduct (“Code”) outlines our minimum expectations of third parties that provide HashiCorp with goods or services including but not limited to suppliers, contingent workers, and consultants (“Suppliers”) and acts in addition to any contractual obligations to HashiCorp and any applicable regulations, guidelines, directives, and laws.

Labor

Suppliers must maintain a safe and ethical working environment for their personnel and are responsible for ensuring that their personnel adhere to HashiCorp’s Code of Conduct when working with or on behalf of HashiCorp. This includes:

  • Treating others with respect and dignity

  • Providing an environment free from harassment, such as bullying, sexual advances, threatening behavior or inappropriate remarks

  • Prohibiting the use of involuntary labor such as slave labor, prison labor, and labor linked with human trafficking

  • Prohibiting the use of child labor and only employing individuals that meet the minimum legal age of employment in the localities where the work is performed

  • Complying with all employment laws including but not limited to minimum wage, statutory benefits, overtime and/or required meal/rest breaks, etc. of the localities where the work is performed

  • Providing work spaces that comply with local health and safety laws and implementing reasonable safety measures

  • Respecting their personnel’s right to choose to join trade unions or other worker organizations, or engage in collective bargaining discussions

Diversity and Inclusion

HashiCorp believes that diverse and inclusive cultures are an important part of driving innovation and they inspire employees to do their best work. Suppliers are expected to promote diversity and inclusion initiatives within their workplace, including efforts to source diverse suppliers (e.g., women-owned, minority-owned, LGBT-owned, veteran-owned, disability-owned, etc.). Suppliers must not discriminate on the basis of race, color, ancestry, religion, sex, pregnancy, gender, gender identity, gender expression, sexual orientation, national origin, age, marital status, genetic information, physical, mental or sensory disability, protected veteran status or any other characteristic protected by federal, state, or local laws.

Environment

HashiCorp believes that businesses must act in ways that protect our environment. Suppliers should maintain sustainable business practices including:

  • Complying with any environmental laws and regulations in their localities, including but not limited to having the proper permits or registrations

  • Engaging in responsible water practices including reducing water consumption through operational efficiency measures and recycling water where feasible

  • Engaging in the responsible use of energy and other natural resources including sourcing renewable and low-carbon energy where feasible

  • Avoiding the use of toxic or hazardous materials and limiting greenhouse gas (GHG) emissions

  • Identifying their impact on the environment, and prevent, mitigate, bring to an end, and minimize the adverse effects they or their own suppliers may have on the environment

  • Collaborating with HashiCorp, HashiCorp’s customers as well as any regulator to answer any request or complaint in relation to the above

  • Obtaining the same commitments from their own suppliers

Human Rights

HashiCorp values and strives to respect human rights across its entire organization and expects the same from its suppliers. Suppliers will endeavor in good faith to:

  • Comply with all applicable laws aiming at the protection of human rights as well as UN Guiding Principles on Business and Human Rights and the OECD Guidelines for Multinational Enterprises

  • Identify their impact on human rights, and prevent, mitigate, bring to an end, and minimize the adverse effects they or their own suppliers may have on human rights

  • Collaborate with HashiCorp, HashiCorp’s customers as well as any regulator to answer any request or complaint in relation to the above

  • Obtain commitments from their own suppliers consistent with this Supplier Code of Conduct

Ethics, Integrity and Law

HashiCorp expects its suppliers to adhere to the highest levels of integrity. This includes:

  • Prohibiting any form of bribery, kickbacks, or embezzlement, including providing lavish or excessive gifts or entertainment to HashiCorp employees to obtain business or gain a commercial advantage

  • Reporting to HashiCorp any situations where there is a possible conflict of interest or an appearance of conflict of interest

  • Complying with all applicable laws, including the US Foreign Corrupt Practices Act (FCPA), UK Bribery Act, and any other similar local laws

  • Complying with General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and all other privacy laws which may apply

  • Complying with all accounting and business laws, including but not limited to taxation, statutory reporting, insider trading laws, etc. and refraining from using non-public information to trade securities. Suppliers should have insider trading policies appropriate to their business that apply to their personnel

  • Promoting fair market competition among customers and competitors

  • Adhering to all export, import, and international trade regulations

  • Protecting HashiCorp’s intellectual property (IP) including any confidential information, copyrights, and trademarks. information should be shared on a need-to-know basis and only be used for the purposes for which it was shared

Monitoring and Reporting

Suppliers must keep accurate business records, records of data processing activities and provide these records to HashiCorp on request where legally required or contractually agreed upon. Any breaches of this Code must be communicated to HashiCorp immediately by contacting: legalnotices@hashicorp.com. HashiCorp will not engage in or tolerate any retaliation in connection with reports of violations.

HashiCorp expects Suppliers to uphold its values. HashiCorp reserves the right to request information from Suppliers to confirm Supplier compliance with this Code (which may include requests for information and/or written certification of compliance from Suppliers), and Suppliers shall respond to and cooperate with HashiCorp’s requests in a timely, accurate and forthright manner. Any non-compliance must be met with a plan and action to correct. HashiCorp intends to discontinue relationships with any Suppliers that cannot conform to this Code, including and up to voiding and terminating any contractual obligation with no penalty.