HCP Vault Radar
Vault Radar automatically discovers and classifies secrets across code, cloud, and collaboration platforms—helping teams prevent leaks, enforce security policies, and maintain compliance
Users pay to use the app, but there's a free trial available.
Users pay to use the app, but there's a free trial available.
HCP Vault Radar will be able to view:
HCP Vault Radar will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
IBM
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Fetched Slack messages are scanned in-memory for unmanaged credentials like API keys, tokens, and passwords. Any unmanaged credentials found are hashed and stored in the DB, along with the message metadata such as the timestamp, channel ID etc. The fetched message is then discarded
Customer Data is retained in accordance with our Privacy Policy
Overview: https://www.hashicorp.com/en/trust/privacy
The `How long do we keep your data?`section in the privacy policy provides the necessary information on data retention
Data archiving and removal policy
Customer Data is removed in accordance with our Policy available. Overview: https://www.ibm.com/support/customer/csol/terms/?id=8E7CAB5368A945A4A76C4158DB695ADF&lc=en
The section 3, `Duration of Processing` has this information
• The duration of Processing Content within this Cloud Service is 30 days after termination or
expiration of the Cloud Service.
• However, some Content may remain in the Cloud Service backups until the expiration of such
backups 30 days after Client termination or expiration of the Cloud Service.
Data storage policy
Customer Data is stored in accordance with our Policy available. Overview: https://www.ibm.com/us-en/privacy and https://www.hashicorp.com/en/trust/privacy/hcp-data-privacy
All customer data, including audit logs and backup snapshots, is stored in the United States. Customers cannot choose a different hosting location.
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
no
Certifications & compliance
Data deletion request procedure
Individual requests for personal data deletion can use the following form - https://privacy.hashicorp.com/?locale=en
For other data deletion requests, please follow the process in the IBM Data Sheet. (DataSheet https://www.ibm.com/support/customer/csol/terms/?id=8E7CAB5368A945A4A76C4158DB695ADF&lc=en)
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
HCP (OIDC)
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@hashicorp.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no