XML 59 R34.htm IDEA: XBRL DOCUMENT
v3.25.4

Cybersecurity Risk Management and Strategy Disclosure | 12 Months Ended
--- | ---
Dec. 31, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items] |
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | Item 1C. Cybersecurity Description of Processes for Assessing, Identifying, and Managing Cybersecurity Risks The information and operational technology infrastructure we use is important to the operation of our business and to our ability to perform day-to-day operations. In the normal course of business, we may collect and store certain sensitive information of the Partnership, including proprietary and confidential business information, trade secrets, intellectual property, sensitive third-party and employee information, and certain personally identifiable information. We are part of Energy Transfer’s shared services cybersecurity program (the “Cybersecurity Program”) for assessing, identifying, and managing material risks from cybersecurity threats. This program includes processes that are modeled after the National Institute of Standards and Technology’s Cybersecurity Framework and focuses on using business drivers to guide cybersecurity activities. This program is managed by Energy Transfer’s Chief Information Officer, who is supported by a team of full-time employees tasked with conducting our day-to-day IT operations (collectively, the “IT team”). Furthermore, the Partnership considers cybersecurity risks as part of, and has incorporated its cybersecurity program into, the Partnership’s overall risk management processes. Through engagement with the guidance of the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Transportation Security Administration (TSA) and the U.S. Coast Guard (USCG), we and the IT Team seek to follow industry cybersecurity standards and protect our infrastructure against cyberattacks from domestic and international threats. The Cybersecurity Program seeks to use a defense-in-depth approach for cybersecurity management, layers of technology, policies, and training at all levels of the enterprise designed to keep the Partnership’s assets secure and operational. It uses various processes to maintain the confidentiality, integrity, and availability of our systems, including security threat intelligence, incident response, identity and access management, supply-chain security assessments, endpoint extended detection and response protection, network segmentation, data encryption, event monitoring, and a Security Operations Center (SOC). In an effort to validate the effectiveness of our cybersecurity program and assess such program’s compliance with legal and regulatory requirements, we and the IT team engage third-party service providers to perform audits, assessments, and penetration tests. Cybersecurity awareness among our employees is promoted with regular training and awareness programs. All employees who have access to our systems are required to undergo annual cybersecurity training and, each year, our employees must review and acknowledge our cybersecurity policies. Further, the IT team is trained to understand how to manage, use and protect personally identifiable information. User access controls have been implemented to limit unauthorized access to sensitive information and critical systems. Employees are required to use multifactor authentication and keep their passwords confidential, among other measures. We recognize that third-party service providers may introduce cybersecurity risks. In an effort to mitigate these risks, before contracting with certain technology services providers, when possible, we conduct due diligence to evaluate their cybersecurity capabilities. Additionally, the IT team endeavors to include cybersecurity requirements in contracts with these providers and endeavor to require them to adhere to security standards and protocols. Further, the IT team also endeavors to engage with any third-party service providers with access to personally identifiable employee information to evaluate their security controls. Finally, Energy Transfer maintains cybersecurity insurance coverage which coverage extends to the Partnership. Impact of Risks from Cybersecurity Threats The energy industry’s increasing dependence on IT and operational technology to support critical functions, such as energy distribution and management activities, has heightened its vulnerability to cybersecurity incidents. Consequently, the global surge in cybersecurity incidents, whether caused by intentional attacks or accidental events, presents a significant challenge to our sector. As cybersecurity threats grow in complexity and scale, preventing, detecting, mitigating and remediating these incidents remains a continuous and increasingly demanding task for the industry. Compliance with evolving cybersecurity reporting requirements, such as those mandated by FERC, presents significant challenges. These regulations necessitate timely and detailed reporting of cyber incidents, demanding substantial resources and robust internal processes to ensure adherence. Failure to comply could result in legal penalties, increased regulatory scrutiny and reputational damage. Moreover, the dynamic nature of these requirements may lead to overlapping or inconsistent obligations, further complicating compliance efforts. Monitoring these developments and integrating them into our cybersecurity and compliance frameworks is essential to mitigate potential risks. As of the date of this Annual Report on Form 10-K, though the Partnership and our service providers have experienced certain cybersecurity incidents, we are not aware of any cybersecurity threats that have materially affected, or are reasonably likely to materially affect, the Partnership, either financially or operationally. Cybersecurity incident response is a component of both the Partnership’s Cybersecurity Program and the Partnership’s business continuity plans, which are designed to limit service interruptions and provide for continued business operation in the event of disaster, whether physical, environmental or cyber in nature. However, we recognize that cybersecurity threats are continually evolving, and there remains a risk that a cybersecurity incident could potentially negatively impact the Partnership. Despite the implementation of our cybersecurity processes, we cannot guarantee that a significant cybersecurity attack will not occur. A successful attack on our information system or operational technology system could have significant consequences to the business, including the interruption of key services that our customers depend on. While we devote resources to our security measures to protect our systems and information, these measures cannot provide absolute security. Due to the number of acquisitions made by the Partnership over the past few years and the time it takes to implement technology standards across the enterprise, certain assets may be in different stages of integration and may have incomplete cybersecurity controls applied. For additional information on cybersecurity risks, see “Item 1A. Risk Factors - Cybersecurity attacks, data breaches and other disruptions affecting us, or our service providers, could materially and adversely affect our business, operations, reputation, and financial results; and - We rely on our information systems to manage numerous aspects of our business, and a disruption of these systems could adversely affect our business.” Board of Directors’ Oversight and Management’s Role Under the Cybersecurity Program, Energy Transfer’s Chief Information Officer oversees the Partnership’s functions of IT, cybersecurity, infrastructure and IT governance (including the Partnership’s IT team) and has more than 35 years of experience leading business technology functions. The IT team is responsible for the Partnership’s efforts to comply with applicable cybersecurity standards, establish effective cybersecurity protocols and protect the integrity, confidentiality and availability of our IT infrastructure. The members of the IT team have over 50 years of combined experience in the field of IT, including 20 years dedicated to cybersecurity, and hold various certifications, including Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP) and Certified Ethical Hacker (CEH) certifications. This team is responsible for cybersecurity threat prevention, detection, mitigation, and remediation for the combined organization. Our cyber incident response plan requires IT team members who detect suspicious activity in our IT environment to escalate that activity to a supervisor who then evaluates the threat. If necessary, the suspicious activity is reported to Energy Transfer’s Chief Information Officer. Management (including representatives from the legal, human resources, IT and corporate security departments) is notified by the IT team whenever a discovered cybersecurity incident may potentially have a significant impact on our business operations. The Partnership’s Board of Directors has delegated the responsibility for the oversight of cybersecurity risks to the Audit Committee. The IT team provides periodic cybersecurity program updates to senior management and to the Audit Committee. Management also updates the Audit Committee as new risks are identified and regarding the steps taken to mitigate such risks. The Audit Committee reviews periodic reporting and updates regarding our cybersecurity risk management.
Cybersecurity Risk Management Processes Integrated [Flag] | true
Cybersecurity Risk Management Third Party Engaged [Flag] | true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] | true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | false
Cybersecurity Risk Board of Directors Oversight [Text Block] | Board of Directors’ Oversight and Management’s Role Under the Cybersecurity Program, Energy Transfer’s Chief Information Officer oversees the Partnership’s functions of IT, cybersecurity, infrastructure and IT governance (including the Partnership’s IT team) and has more than 35 years of experience leading business technology functions. The IT team is responsible for the Partnership’s efforts to comply with applicable cybersecurity standards, establish effective cybersecurity protocols and protect the integrity, confidentiality and availability of our IT infrastructure. The members of the IT team have over 50 years of combined experience in the field of IT, including 20 years dedicated to cybersecurity, and hold various certifications, including Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP) and Certified Ethical Hacker (CEH) certifications. This team is responsible for cybersecurity threat prevention, detection, mitigation, and remediation for the combined organization. Our cyber incident response plan requires IT team members who detect suspicious activity in our IT environment to escalate that activity to a supervisor who then evaluates the threat. If necessary, the suspicious activity is reported to Energy Transfer’s Chief Information Officer. Management (including representatives from the legal, human resources, IT and corporate security departments) is notified by the IT team whenever a discovered cybersecurity incident may potentially have a significant impact on our business operations. The Partnership’s Board of Directors has delegated the responsibility for the oversight of cybersecurity risks to the Audit Committee. The IT team provides periodic cybersecurity program updates to senior management and to the Audit Committee. Management also updates the Audit Committee as new risks are identified and regarding the steps taken to mitigate such risks. The Audit Committee reviews periodic reporting and updates regarding our cybersecurity risk management.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] | The IT team provides periodic cybersecurity program updates to senior management and to the Audit Committee. Management also updates the Audit Committee as new risks are identified and regarding the steps taken to mitigate such risks. The Audit Committee reviews periodic reporting and updates regarding our cybersecurity risk management.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | The Partnership’s Board of Directors has delegated the responsibility for the oversight of cybersecurity risks to the Audit Committee.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] | Under the Cybersecurity Program, Energy Transfer’s Chief Information Officer oversees the Partnership’s functions of IT, cybersecurity, infrastructure and IT governance (including the Partnership’s IT team) and has more than 35 years of experience leading business technology functions. The IT team is responsible for the Partnership’s efforts to comply with applicable cybersecurity standards, establish effective cybersecurity protocols and protect the integrity, confidentiality and availability of our IT infrastructure. The members of the IT team have over 50 years of combined experience in the field of IT, including 20 years dedicated to cybersecurity, and hold various certifications, including Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP) and Certified Ethical Hacker (CEH) certifications. This team is responsible for cybersecurity threat prevention, detection, mitigation, and remediation for the combined organization.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] | Our cyber incident response plan requires IT team members who detect suspicious activity in our IT environment to escalate that activity to a supervisor who then evaluates the threat. If necessary, the suspicious activity is reported to Energy Transfer’s Chief Information Officer. Management (including representatives from the legal, human resources, IT and corporate security departments) is notified by the IT team whenever a discovered cybersecurity incident may potentially have a significant impact on our business operations.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] | true

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardOfDirectorsOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementExpertiseOfManagementResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleReportToBoardFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskManagementProcessesForAssessingIdentifyingAndManagingThreatsTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K + Details
Name: | cyd_CybersecurityRiskManagementStrategyAndGovernanceLineItems
Namespace Prefix: | cyd_
Data Type: | i:stringItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskManagementThirdPartyEngagedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskMateriallyAffectedOrReasonablyLikelyToMateriallyAffectRegistrantFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskProcessForInformingBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskProcessForInformingManagementOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskThirdPartyOversightAndIdentificationProcessesFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration