Vendor Privacy Scorecard · Anysphere
Cursor: is it safe for client information?
An AI code editor that reads and writes code across a project.
Bottom line
Use Privacy Mode or a Business plan. Without it, code may be stored and used to improve the product.
Does it train on your data? By plan
Free and Pro: User or admin setting
Code can be used to improve the product unless Privacy Mode is turned on.
Business: No training
Privacy Mode is enforced for the team, with zero retention at model providers.
What an auditor will ask
- Trains AI on your data? Depends on plan
- Privacy Mode prevents training. Business enforces it.
- Retention you can control? Depends on plan
- Privacy Mode means code is not stored by Cursor or model providers.
- Signs a HIPAA BAA? No
- Not designed for health information.
- Staff may read your content? No
- Not reviewed with Privacy Mode on.
Security certifications
- SOC 2 Type II
Set it up the safe way
- Use the Business plan or turn on Privacy Mode for every developer.
- Keep secrets and client data out of the codebase.
- Review AI-written code before release.
Anysphere trust centerBusiness privacy terms
Summarized from Anysphere's published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.
Using Cursor at work? An unvetted tool can cost you your license.
When an employee pastes client information or confidential files into Cursor without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.
Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.