HashiCorp and IBM: What the Acquisition Means for Licensing

It helps to separate two events that often get blurred. The first is the license change. As of August 2023, HashiCorp moved Terraform, Vault, Consul, Nomad, and Packer from an open source license to the Business Source License 1.1, which restricts competitive production use and converts to an open license after a delay, commonly four years. The second event is the acquisition of HashiCorp by IBM. These are different things. The license change determines what the terms are. The acquisition determines who now sets the commercial strategy around those terms. Buyers who conflate them tend to either panic about a change that already settled or assume a new owner will quietly reverse it. Neither is the right starting point.

What the acquisition does and does not change

An acquisition does not undo a license that is already in place. The Business Source License terms HashiCorp adopted in 2023 remain the operative posture, and a change of owner does not by itself rewrite them. What a new owner can influence is the commercial wrapper: list prices, how products are bundled, support and renewal terms, and how strictly the competitive use restriction is interpreted and enforced. These are the levers that actually touch a buyer's budget and risk. A large enterprise owner typically brings a more structured commercial machine, which can mean firmer pricing and more deliberate enforcement over time. As of this writing in June 2026, the licensing facts set in 2023 are still the ones to plan around, and current commercial terms should be confirmed directly with the vendor and with your own counsel.

Why the Business Source License still drives the exposure

For most buyers, the live question is not the corporate transaction but the license underneath it. The Business Source License restricts competitive production use, and whether your use is competitive is exactly the kind of question that turns on specifics. The mechanics of that judgment are set out in is your Terraform use competitive under the BSL, and the compliance obligations that follow are covered in HashiCorp BSL compliance obligations. Source available is not open source, and the Business Source License is not approved by the Open Source Initiative, which is the heart of why the change mattered to begin with. A new owner does not alter that classification.

Where OpenTofu sits after the acquisition

OpenTofu, the community fork of Terraform, was created after the 2023 license change and sits under a neutral foundation, continuing the last open version under an open license. An ownership change at HashiCorp does not remove that fork or alter its license. For a buyer, OpenTofu remains a genuine alternative to weigh against staying on the Business Source License version of Terraform. Whether it is the right path depends on how deeply Terraform is wired into your estate and how much migration you can absorb, a calculation set out in assessing Terraform exposure across teams. The acquisition, if anything, sharpens the value of having a credible alternative in hand when you negotiate.

How buyers should respond

An ownership change is a prompt, not a panic. The practical response is to have your exposure picture ready before your next renewal. Know how widely Terraform, Vault, and the other affected tools sit across your teams, whether OpenTofu or another path is viable for each use, and what your alternatives are if the commercial terms move. A buyer who walks into a renewal with that picture negotiates from leverage. A buyer who walks in without it negotiates from the vendor's list. This work sits on the HashiCorp and Terraform pillar, and a relicensing exposure review produces it.

We are independent and buyer side. We take no vendor fees and resell no software, so our read of the acquisition reflects your interest rather than any supplier's. This is commercial and licensing risk advisory, not legal advice. For interpretation of the Business Source License and your position after the acquisition, engage your own counsel.