service cursorvendor Anysphere (Cursor)category Coding tools
Depends (Caution)With Privacy Mode on: no training. With Privacy Mode off: Cursor may store and train on code, prompts and editor actions. The pages checked do not state which mode new individual accounts start in.
With Privacy Mode on: no training. With Privacy Mode off: Cursor may store and train on code, prompts and editor actions. The pages checked do not state which mode new individual accounts start in.
If you choose to turn off “Privacy Mode”: we may use and store codebase data, prompts, editor actions, code snippets, and other code data and actions to improve our AI features and train our models.
With Privacy Mode on, providers are under ZDR agreements, file caches are temporary, and Cloud Agent repo copies are deleted when the agent completes. With it off, Cursor may store code data to train. No fixed period is published. Some models (e.g. Claude Fable 5/5.1) need provider-side retention and admin approval.
Deleted after the agent completes
Against the 21 tools that state a period (grey dots):
Privacy Mode relies on ZDR agreements with model providers. Non-ZDR models are labelled or need admin opt-in.
Cursor maintains zero data retention (ZDR) agreements with all providers, and AI model providers will not store or train on your data.
Even in Privacy Mode, content that trips abuse classifiers may be stored.
if your prompts or conversations trigger abuse detectors your data may be stored for investigation and deleted in accordance with their retention policies.
Enterprise teams can enable US-only residency for inference, processing and storage (10% model price uplift; limited model list; BYOK not covered). EU+UK inference-only coverage on request. No APAC region.
EU + UK inference-only coverage is available on request. Broader EU support and additional regions are in active development.
Cursor holds AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications, along with a SOC 2 Type II attestation.
BAA on the Enterprise plan via sales. Requires Privacy Mode enabled and locked org-wide; only listed Eligible Services and Models are covered, and third-party integrations are not.
Cursor supports HIPAA Business Associate Agreements (BAAs) for Enterprise customers.
Self-Hosted Machines move Cloud Agent tool execution (file edits, terminal, MCP) onto your machines. Inference, planning and the agent loop stay with Cursor.
Cursor runs the agent loop, inference, and planning.
Spotted something wrong or out of date? Corrections are welcome; see how to send one. How statuses are assigned.