Nojam and HCP Terraform
HCP Terraform is HashiCorp’s own hosted platform for Terraform, sold by IBM since 2025, with Terraform Enterprise as its self-hosted edition. Nojam is a self-hosted runner for teams whose Terraform changes HashiCorp Vault.
What HCP Terraform does better
- It comes from the makers of Terraform and covers every provider the same way, with a private registry and a large ecosystem around it.
- It is hosted: there is nothing to install or patch.
- It offers workload identity to AWS, Google Cloud, Azure, Vault and Kubernetes, so jobs can avoid static cloud keys.
- It has a free tier of 500 managed resources.
Where Nojam differs
- HCP Terraform is priced per managed resource per hour, from $0.10 to $0.99 per resource a month. Nojam doesn’t charge by resource, so putting more of Vault under management costs nothing extra.
- Its audit logging is in the Premium tier. Nojam’s tamper-evident audit log is part of the product.
- HashiCorp’s security model states that "the plan permission is equivalent to the write permission". In Nojam a plan gets a read-only Vault role, and production targets can require an approver before pull request code plans at all.
- Plans and applies run on HashiCorp’s machines unless you run their agents or Terraform Enterprise. Nojam runs entirely inside your network.
Which to choose
Choose HCP Terraform if
You want a hosted platform from the makers of Terraform for many providers, and per-resource pricing suits your estate.
Choose Nojam if
Vault is the centre of your Terraform, the code and credentials must stay inside your network, and audit evidence is a requirement.
Facts about HCP Terraform come from its own pages, read on 7 November 2026: HashiCorp pricing, HCP Terraform security model. If something here is out of date, write to us and we’ll correct it.
Compare them on your own Vault
A pilot runs next to your current pipeline in shadow mode, so you can compare the two on real changes.