Cursor vs. JetBrains AI Assistant: data protection per plan

not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')

not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')

not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')

not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')

yes (public DPA, applies together with the Master Services Agreement; EU SCCs Module Two and UK Addendum)

yes (according to the AI terms of use, the Data Processing Addendum forms part of the terms; online version, effective upon order or quote request)

yes (according to the AI terms of use, the Data Processing Addendum forms part of the terms; online version, effective upon order or quote request)

yes (according to the AI terms of use, the Data Processing Addendum forms part of the terms, which apply to legal and natural persons alike; online version, effective upon order or quote request)

yes (according to the AI terms of use, the Data Processing Addendum forms part of the terms, which apply to legal and natural persons alike; online version, effective upon order or quote request)

yes (according to the AI terms of use, the Data Processing Addendum forms part of the terms; online version, effective upon order or quote request)

Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is also available for Free and can be enabled in the settings; default setting for individual accounts not publicly documented.

Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is available for Free and Pro and can be enabled in the settings; default setting for individual accounts not publicly documented.

Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is available for Free and Pro and can be enabled in the settings; default setting for individual accounts not publicly documented.

Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Teams: team-wide privacy settings; new members inherit the team setting; admins can enforce Privacy Mode.

Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Enterprise: according to the documentation, Privacy Mode is enabled by default and enforceable; requests to models with provider-side storage (according to the documentation, Claude Fable 5 and 5.1) fail until an admin approves the retention policy.

AI terms of use (Version 2.1) Section 5c: JetBrains undertakes not to use inputs, data, outputs and suggestions to train language models that generate code, text or other data from which this content could be extracted, unless the customer expressly consents. AI subcontractors must undertake not to use data for training to at least the same extent (5e). Help: detailed data sharing (including the complete communication with the LLM) 'is disabled by default'. Product Data Collection Notice (Version 1.6, 2026-07-07): 'Detailed code-related data can be used for product improvement and training AI models'; default setting by IDE licence, not by AI plan: non-commercial licence – collection by default on the basis of legitimate interest, opt-out in the product settings; commercial individual licence, trial, EAP – only with explicit consent; organisational licence – not allowed by default, only after enablement by administrators or a company contract with JetBrains.

AI terms of use (Version 2.1) Section 5c: JetBrains undertakes not to use inputs, data, outputs and suggestions to train language models that generate code, text or other data from which this content could be extracted, unless the customer expressly consents. AI subcontractors must undertake not to use data for training to at least the same extent (5e). Help: detailed data sharing (including the complete communication with the LLM) 'is disabled by default'. Product Data Collection Notice (Version 1.6, 2026-07-07): 'Detailed code-related data can be used for product improvement and training AI models'; default setting by IDE licence, not by AI plan: non-commercial licence – collection by default on the basis of legitimate interest, opt-out in the product settings; commercial individual licence, trial, EAP – only with explicit consent; organisational licence – not allowed by default, only after enablement by administrators or a company contract with JetBrains.

AI terms of use (Version 2.1) Section 5c: JetBrains undertakes not to use inputs, data, outputs and suggestions to train language models that generate code, text or other data from which this content could be extracted, unless the customer expressly consents. AI subcontractors must undertake not to use data for training to at least the same extent (5e). Help: detailed data sharing (including the complete communication with the LLM) 'is disabled by default'. Product Data Collection Notice (Version 1.6, 2026-07-07): 'Detailed code-related data can be used for product improvement and training AI models'; default setting by IDE licence, not by AI plan: non-commercial licence – collection by default on the basis of legitimate interest, opt-out in the product settings; commercial individual licence, trial, EAP – only with explicit consent; organisational licence – not allowed by default, only after enablement by administrators or a company contract with JetBrains.

AI terms of use (Version 2.1) Section 5c: JetBrains undertakes not to use inputs, data, outputs and suggestions to train language models that generate code, text or other data from which this content could be extracted, unless the customer expressly consents. AI subcontractors must undertake not to use data for training to at least the same extent (5e). Help: detailed data sharing (including the complete communication with the LLM) 'is disabled by default'. Product Data Collection Notice (Version 1.6, 2026-07-07): 'Detailed code-related data can be used for product improvement and training AI models'; default setting by IDE licence, not by AI plan: non-commercial licence – collection by default on the basis of legitimate interest, opt-out in the product settings; commercial individual licence, trial, EAP – only with explicit consent; organisational licence – not allowed by default, only after enablement by administrators or a company contract with JetBrains.

AI terms of use (Version 2.1) Section 5c: JetBrains undertakes not to use inputs, data, outputs and suggestions to train language models that generate code, text or other data from which this content could be extracted, unless the customer expressly consents. AI subcontractors must undertake not to use data for training to at least the same extent (5e). Help: detailed data sharing (including the complete communication with the LLM) 'is disabled by default'. Product Data Collection Notice (Version 1.6, 2026-07-07): 'Detailed code-related data can be used for product improvement and training AI models'; default setting by IDE licence, not by AI plan: non-commercial licence – collection by default on the basis of legitimate interest, opt-out in the product settings; commercial individual licence, trial, EAP – only with explicit consent; organisational licence – not allowed by default, only after enablement by administrators or a company contract with JetBrains.

Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.

Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.

Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.

Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.

Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.

'Third-Party Services' (Version 3.15, effective from 2026-09-30), section on AI providers, names data centre locations: OpenAI (US), Google (EU, US and Asia), Anthropic (US), xAI (US), Baseten (US, UK), Tavily (US), Nebius (France, Spain, US). Depending on the service, configuration, model and route, one or more of these providers may process data; JetBrains' own models run on JetBrains infrastructure (location not stated). A selectable EU region for AI requests is not documented. Product Data Collection Notice: collected usage data including detailed code-related data remains stored in the EEA.

'Third-Party Services' (Version 3.15, effective from 2026-09-30), section on AI providers, names data centre locations: OpenAI (US), Google (EU, US and Asia), Anthropic (US), xAI (US), Baseten (US, UK), Tavily (US), Nebius (France, Spain, US). Depending on the service, configuration, model and route, one or more of these providers may process data; JetBrains' own models run on JetBrains infrastructure (location not stated). A selectable EU region for AI requests is not documented. Product Data Collection Notice: collected usage data including detailed code-related data remains stored in the EEA.

'Third-Party Services' (Version 3.15, effective from 2026-09-30), section on AI providers, names data centre locations: OpenAI (US), Google (EU, US and Asia), Anthropic (US), xAI (US), Baseten (US, UK), Tavily (US), Nebius (France, Spain, US). Depending on the service, configuration, model and route, one or more of these providers may process data; JetBrains' own models run on JetBrains infrastructure (location not stated). A selectable EU region for AI requests is not documented. Product Data Collection Notice: collected usage data including detailed code-related data remains stored in the EEA.

'Third-Party Services' (Version 3.15, effective from 2026-09-30), section on AI providers, names data centre locations: OpenAI (US), Google (EU, US and Asia), Anthropic (US), xAI (US), Baseten (US, UK), Tavily (US), Nebius (France, Spain, US). Depending on the service, configuration, model and route, one or more of these providers may process data; JetBrains' own models run on JetBrains infrastructure (location not stated). A selectable EU region for AI requests is not documented. Product Data Collection Notice: collected usage data including detailed code-related data remains stored in the EEA.

'Third-Party Services' (Version 3.15, effective from 2026-09-30), section on AI providers, names data centre locations: OpenAI (US), Google (EU, US and Asia), Anthropic (US), xAI (US), Baseten (US, UK), Tavily (US), Nebius (France, Spain, US). Depending on the service, configuration, model and route, one or more of these providers may process data; JetBrains' own models run on JetBrains infrastructure (location not stated). A selectable EU region for AI requests is not documented. Product Data Collection Notice: collected usage data including detailed code-related data remains stored in the EEA. For 'AI Enterprise (powered by OpenAI/Google/Anthropic)', according to the service provider list only that one provider is involved in each case.

• Amazon Web Services (primary cloud hosting; US, EU, Singapore)
• Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
• Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
• Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
• Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)

• Amazon Web Services (primary cloud hosting; US, EU, Singapore)
• Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
• Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
• Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
• Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)

• Amazon Web Services (primary cloud hosting; US, EU, Singapore)
• Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
• Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
• Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
• Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)

• Amazon Web Services (primary cloud hosting; US, EU, Singapore)
• Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
• Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
• Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
• Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)

• Amazon Web Services (primary cloud hosting; US, EU, Singapore)
• Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
• Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
• Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
• Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)

• OpenAI (GPT models; data centre location according to 'Third-Party Services': US)
• Google (Gemini models; EU, US and Asia)
• AWS (Amazon Bedrock models; according to the service provider list; not listed as an AI provider in 'Third-Party Services')
• Anthropic (Claude models; directly or via Amazon Bedrock; US)
• SpaceXAI (Grok models; listed in 'Third-Party Services' as xAI, US)
• Models operated by JetBrains itself (Mellum, Mellum2 as well as Qwen3.6-27B, Qwen3-Embedding-4B, Qwen3-Reranker-0.6B from Alibaba Cloud, other open-source models): according to the list, run on JetBrains infrastructure; inputs and outputs are not sent to the model developers
• According to 'Third-Party Services', also Baseten (US, UK), Tavily (US) and Nebius (France, Spain, US) as well as unnamed AI inference intermediaries and optimisation providers

• OpenAI (GPT models; data centre location according to 'Third-Party Services': US)
• Google (Gemini models; EU, US and Asia)
• AWS (Amazon Bedrock models; according to the service provider list; not listed as an AI provider in 'Third-Party Services')
• Anthropic (Claude models; directly or via Amazon Bedrock; US)
• SpaceXAI (Grok models; listed in 'Third-Party Services' as xAI, US)
• Models operated by JetBrains itself (Mellum, Mellum2 as well as Qwen3.6-27B, Qwen3-Embedding-4B, Qwen3-Reranker-0.6B from Alibaba Cloud, other open-source models): according to the list, run on JetBrains infrastructure; inputs and outputs are not sent to the model developers
• According to 'Third-Party Services', also Baseten (US, UK), Tavily (US) and Nebius (France, Spain, US) as well as unnamed AI inference intermediaries and optimisation providers

• OpenAI (GPT models; data centre location according to 'Third-Party Services': US)
• Google (Gemini models; EU, US and Asia)
• AWS (Amazon Bedrock models; according to the service provider list; not listed as an AI provider in 'Third-Party Services')
• Anthropic (Claude models; directly or via Amazon Bedrock; US)
• SpaceXAI (Grok models; listed in 'Third-Party Services' as xAI, US)
• Models operated by JetBrains itself (Mellum, Mellum2 as well as Qwen3.6-27B, Qwen3-Embedding-4B, Qwen3-Reranker-0.6B from Alibaba Cloud, other open-source models): according to the list, run on JetBrains infrastructure; inputs and outputs are not sent to the model developers
• According to 'Third-Party Services', also Baseten (US, UK), Tavily (US) and Nebius (France, Spain, US) as well as unnamed AI inference intermediaries and optimisation providers

• OpenAI (GPT models; data centre location according to 'Third-Party Services': US)
• Google (Gemini models; EU, US and Asia)
• AWS (Amazon Bedrock models; according to the service provider list; not listed as an AI provider in 'Third-Party Services')
• Anthropic (Claude models; directly or via Amazon Bedrock; US)
• SpaceXAI (Grok models; listed in 'Third-Party Services' as xAI, US)
• Models operated by JetBrains itself (Mellum, Mellum2 as well as Qwen3.6-27B, Qwen3-Embedding-4B, Qwen3-Reranker-0.6B from Alibaba Cloud, other open-source models): according to the list, run on JetBrains infrastructure; inputs and outputs are not sent to the model developers
• According to 'Third-Party Services', also Baseten (US, UK), Tavily (US) and Nebius (France, Spain, US) as well as unnamed AI inference intermediaries and optimisation providers

• OpenAI (GPT models; data centre location according to 'Third-Party Services': US)
• Google (Gemini models; EU, US and Asia)
• AWS (Amazon Bedrock models; according to the service provider list; not listed as an AI provider in 'Third-Party Services')
• Anthropic (Claude models; directly or via Amazon Bedrock; US)
• SpaceXAI (Grok models; listed in 'Third-Party Services' as xAI, US)
• Models operated by JetBrains itself (Mellum, Mellum2 as well as Qwen3.6-27B, Qwen3-Embedding-4B, Qwen3-Reranker-0.6B from Alibaba Cloud, other open-source models): according to the list, run on JetBrains infrastructure; inputs and outputs are not sent to the model developers
• According to 'Third-Party Services', also Baseten (US, UK), Tavily (US) and Nebius (France, Spain, US) as well as unnamed AI inference intermediaries and optimisation providers

USD 0 per month (pricing page; prices excl. taxes such as VAT)

USD 8 per month (pricing page, excl. taxes). According to the pricing page FAQ, subscriptions are sold via X Subscription Corp.

Premium USD 30, Super USD 100, Ultra USD 200 per month (pricing page, excl. taxes); third-party models are billed separately based on usage. According to the FAQ, sold via X Subscription Corp.

from USD 30 per user per month (pricing page: "$30+/user/month", excl. taxes); seat types can be combined.

Custom (pricing page: 'Custom'); invoice/PO billing available

0 EUR (pricing page and help: 'Free'; 3 AI Credits per month)

Pricing page (country Germany, individual use; retrieved 2026-10-18): 10 EUR per user per month or 100 EUR per user per year net (11.90 or 119 EUR incl. 19 % VAT; according to the page, the tax rate depends on country, VAT ID and purchase method). Organisations: the pricing page no longer shows an AI Pro licence (only AI Credits and Air Governance); help, tab 'Organizations (per-user model)': 20 USD with 20 AI Credits per 30 days, billing period of the price not stated.

Pricing page (country Germany, individual use; retrieved 2026-10-18): 30 EUR per user per month or 300 EUR per user per year net (35.70 or 357 EUR incl. 19 % VAT); 35 monthly AI Credits.

Pricing page when retrieved on 2026-10-08 (country Germany): business 60 EUR per month or 600 EUR per year net (71.40 or 714 EUR incl. 19 % VAT); when retrieved on 2026-10-18 no longer listed for organisations (only AI Credits and Air Governance). Help, tab 'Organizations (per-user model)': 60 USD with 70 AI Credits per 30 days, billing period of the price not stated.

Help, tab 'Organizations (per-user model)': 60 USD, AI Credits 'On par with AI Ultimate quota, or higher'; billing period not stated. The pricing page for organisations (retrieved 2026-10-18) lists no 'AI Enterprise' plan but AI Credits at API prices as well as Air Governance Basic (free), Business (20 USD per seat per month) and Enterprise (custom).

yes (limited AI usage, limited Agent and chat requests; Grok Chat/Imagine/Build limited)

yes (shared AI usage pool; according to the pricing page, Grok models only; Grok Chat, Voice, Imagine, Build, Grok API access; plus X features)

yes (Premium 4x, Super 15x, Ultra 50x usage compared with Plus; Cloud Agents and automations, Bugbot, third-party models at API list price, Grok Bot, video generation; plus X features)

yes (as Premium, plus team marketplace, centralised billing, team-wide privacy settings, custom chat data retention, SAML/OIDC SSO; usage 4x to 50x Plus depending on seat tier)

yes (as Teams, plus pooled usage, invoice/PO, SCIM, access, network and model controls, audit logs, Priority Support; optional US data residency)

yes (3 AI Credits per 30 days; no top-up; according to the help, only in IDEs from version 2025.1)

yes (according to the help, 10 AI Credits per 30 days with a personal licence, 20 with an organisation licence; top-up available, top-up credits valid for 12 months)

yes (according to the help, 35 AI Credits per 30 days with a personal licence, list price 30 USD; top-up available, top-up credits valid for 12 months)

yes (according to the help, 70 AI Credits per 30 days with an organisation licence, list price 60 USD; the organisation's credits can flow into a shared pool via the JetBrains Central Console; top-up available)

yes (according to the help, quota at least at the level of AI Ultimate, exact credits not stated; operation either via JetBrains AI or with a single provider: OpenAI, Google or Anthropic)