HCP Terraform

HCP Terraform is the managed control plane for HashiCorp Terraform, operated by IBM since the acquisition closed in late 2024. It was rebranded from Terraform Cloud in April 2024 at the same app.terraform.io URL. The product centralizes remote state storage, run execution, and policy enforcement. A workspace holds one Terraform configuration with its own state, variables, run history, and locking semantics. Runs originate from VCS webhooks, CLI invocations, API calls, or upstream workspaces via run triggers.

Billing shifted from per-seat to Resources Under Management (RUM) in November 2023. Tiers: Free, Essentials (~$0.10/resource/mo), Standard (~$0.47), Premium (~$0.99), and Enterprise. At 1,200 managed resources, Standard costs roughly $564/month; self-managed S3+DynamoDB at the same scale runs $0.01–$0.09/month. Helm charts and Kubernetes operators produce RUM counts 30–50% above HCL-based estimates. Standard permits 3 concurrent runs and 5 policies with 1 enforceable; Premium permits 10.

Sentinel is the native policy engine; OPA support landed in Agent 1.28.0 in January 2026. SAML SSO is available on all tiers including Free; SCIM provisioning is on Premium. Compliance certifications include SOC 2 Type II, ISO 27001:2022, ISO 27017, and ISO 27018. FedRAMP and HIPAA are not publicly listed.

CDKTF was deprecated in December 2025. Several CLI subcommands moved behind higher tiers in January 2025. The Infragraph and IBM Bob AI layer entered public preview in May 2026. OpenTofu 1.7+ ships native client-side state encryption with AES-GCM and KMS integration; HCP Terraform SaaS tiers do not match this.