Cursor vs. Tabnine: data protection per plan
Cursor (5 plans) and Tabnine (2 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Cursor | Tabnine |
|---|---|---|
| Provider based in | Anysphere, Inc., 2261 Market Street STE 86466, San Francisco, CA 94114, USA | Tabnine Ltd., Israel |
| Plans recorded | 5 | 2 |
| Hosting | mixed: all 5 plans | not documented: all 2 plans |
| Training on inputs | opt-out available: all 5 plans | no: all 2 plans |
| DPA | not documented: Free, Plus, Premium / Super / Ultra, Teamsyes: Enterprise | not documented: all 2 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Cursor Enterprise vs. Tabnine Enterprise
| Feature | CursorEnterprise | TabnineEnterprise (SaaS) |
|---|---|---|
| differs by plan | yes | not publicly documented |
| Details: DPA available | yes (public DPA, applies together with the Master Services Agreement; EU SCCs Module Two and UK Addendum) Provider’s DPA | not publicly documented (Trust Center lists a Master Services Agreement, no DPA; Privacy Policy describes Tabnine as processor when used for organisations, but does not refer to any DPA) |
| differs by plan | opt-out available | no |
| Details: Training on inputs | Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Enterprise: according to the documentation, Privacy Mode is enabled by default and enforceable; requests to models with provider-side storage (according to the documentation, Claude Fable 5 and 5.1) fail until an admin approves the retention policy. | Docs 'Privacy': 'no-train-no-retain' policy for Tabnine models; Tabnine does not store code, does not share code with third parties and does not train on customer code. Tabnine's code completion and Protected Chat model are stated to be trained only on open-source code under permissive licences; private fine-tuned models (team opt-in) accessible only to the team. Optional third-party chat models: privacy rules and protection may differ (Docs 'AI Models'). Terms of Use (as of 2024-07-25): Tabnine uses code developed during use only to improve the service for that specific customer, not for other users; "Tailor Made" models only at express request. |
| differs by plan | mixed | not publicly documented |
| Details: Data residency | Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development. | Security documentation: SaaS on AWS (North Virginia, USA) and Google Cloud (Council Bluffs, Iowa, USA), plus Heroku (Virginia, USA) as main locations. Docs 'Deployment options': Secure SaaS is 'hosted, managed, and monitored by Tabnine', without stating a location. The Trust Center names Google Cloud Platform under 'Infrastructure'. An EU region or choice of region is not documented. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | With Privacy Mode: ZDR with model… | Docs: context |
| Details: Data retention | With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented. | Docs: context (code snippets, chat history) is deleted immediately after the response (ephemeral processing); operational metrics and logs of the Tabnine cluster are retained for one week; stored data is encrypted with AES-256. Privacy Policy (as of 2024-09-12): personal data only as long as necessary for the services and legitimate business/legal purposes; specific retention periods not stated. |
| differs by plan | custom | not publicly documented |
| Details: Price | Custom (pricing page: 'Custom'); invoice/PO billing available | not publicly documented (tabnine.com/pricing redirects to the Tricentis contact form; Terms: fees in USD, excluding taxes) |
| yes | yes | |
| Details: AI features included | yes (as Teams, plus pooled usage, invoice/PO, SCIM, access, network and model controls, audit logs, Priority Support; optional US data residency) | yes (code completion, chat, agent, CLI, context engine; Tabnine's own models as well as optional third-party models) |
| 7 sources | 9 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by plan
- Cursor Enterpriseyes
- Tabnine Enterprisenot publicly documented
- Cursor Enterprise
yes (public DPA, applies together with the Master Services Agreement; EU SCCs Module Two and UK Addendum)
Provider’s DPATabnine Enterprisenot publicly documented (Trust Center lists a Master Services Agreement, no DPA; Privacy Policy describes Tabnine as processor when used for organisations, but does not refer to any DPA)
Training
- differs by plan
- Cursor Enterpriseopt-out available
- Tabnine Enterpriseno
- Cursor Enterprise
Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Enterprise: according to the documentation, Privacy Mode is enabled by default and enforceable; requests to models with provider-side storage (according to the documentation, Claude Fable 5 and 5.1) fail until an admin approves the retention policy.
Tabnine EnterpriseDocs 'Privacy': 'no-train-no-retain' policy for Tabnine models; Tabnine does not store code, does not share code with third parties and does not train on customer code. Tabnine's code completion and Protected Chat model are stated to be trained only on open-source code under permissive licences; private fine-tuned models (team opt-in) accessible only to the team. Optional third-party chat models: privacy rules and protection may differ (Docs 'AI Models'). Terms of Use (as of 2024-07-25): Tabnine uses code developed during use only to improve the service for that specific customer, not for other users; "Tailor Made" models only at express request.
Hosting
- differs by plan
- Cursor Enterprisemixed
- Tabnine Enterprisenot publicly documented
- Cursor Enterprise
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.
Tabnine EnterpriseSecurity documentation: SaaS on AWS (North Virginia, USA) and Google Cloud (Council Bluffs, Iowa, USA), plus Heroku (Virginia, USA) as main locations. Docs 'Deployment options': Secure SaaS is 'hosted, managed, and monitored by Tabnine', without stating a location. The Trust Center names Google Cloud Platform under 'Infrastructure'. An EU region or choice of region is not documented.
Sub-processors
- Cursor Enterpriselist available
- Tabnine Enterpriselist available
- Cursor Enterprise
- Amazon Web Services (primary cloud hosting; US, EU, Singapore)
- Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
- Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
- Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
- Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)
Tabnine Enterprise- Hosting providers according to the security documentation: Amazon Web Services (main data centre North Virginia, USA), Google Cloud Platform (Council Bluffs, Iowa, USA), Heroku (Virginia, USA)
- Google Cloud Identity (identity management according to the security documentation)
- Optional third-party chat models (depending on selection): Anthropic Claude, OpenAI GPT, Google Gemini and others; according to the documentation, privacy rules of these models may differ
- According to the Privacy Policy, also payment service providers, analytics and marketing service providers as well as affiliated companies (e.g. Tabnine Inc.), without names
- Complete sub-processor list: not publicly documented (tabnine.com/subprocessors still returns HTTP 502 when retrieved on 2026-10-18; the Trust Center contains no sub-processor list)
Retention
- differs by plan
- Cursor EnterpriseWith Privacy Mode: ZDR with model…
- Tabnine EnterpriseDocs: context
- Cursor EnterpriseWith Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented.Tabnine EnterpriseDocs: context (code snippets, chat history) is deleted immediately after the response (ephemeral processing); operational metrics and logs of the Tabnine cluster are retained for one week; stored data is encrypted with AES-256. Privacy Policy (as of 2024-09-12): personal data only as long as necessary for the services and legitimate business/legal purposes; specific retention periods not stated.
Price
- differs by plan
- Cursor Enterprisecustom
- Tabnine Enterprisenot publicly documented
- Cursor Enterprise
Custom (pricing page: 'Custom'); invoice/PO billing available
Tabnine Enterprisenot publicly documented (tabnine.com/pricing redirects to the Tricentis contact form; Terms: fees in USD, excluding taxes)
- Cursor Enterpriseyes
- Tabnine Enterpriseyes
- Cursor Enterprise
yes (as Teams, plus pooled usage, invoice/PO, SCIM, access, network and model controls, audit logs, Priority Support; optional US data residency)
Tabnine Enterpriseyes (code completion, chat, agent, CLI, context engine; Tabnine's own models as well as optional third-party models)
Evidence
- Cursor Enterprise7 sources
- Tabnine Enterprise9 sources
- Cursor Enterprise
- PricingPricing page, retrieved 18 Oct 2026
- Security (as of 2026-08-25)Trust Center, retrieved 18 Oct 2026
- Data Use & Privacy Overview (as of 2026-09-03)Privacy notice, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-11)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2025-11-05)DPA, retrieved 18 Oct 2026
- Docs: Privacy and data governanceDocumentation, retrieved 18 Oct 2026
- Trust Center: Subprocessors (Vanta, 20 entries)Sub-processor list, retrieved 18 Oct 2026
Tabnine Enterprise- Docs: PrivacyDocumentation, retrieved 14 Oct 2026
- Docs: SecurityDocumentation, retrieved 14 Oct 2026
- Docs: Enterprise (SaaS)Documentation, retrieved 14 Oct 2026
- Docs: AI ModelsDocumentation, retrieved 18 Oct 2026
- Tabnine Trust Center (SafeBase)Trust Center, retrieved 18 Oct 2026
- Tabnine Privacy Policy (as of 2024-09-12, PDF; redirect from tabnine.com/privacy)Privacy notice, retrieved 14 Oct 2026
- Tabnine Terms of Use incl. Multi-Model Addendum (as of 2024-07-25, PDF; redirect from tabnine.com/terms-of-use)Terms and conditions, retrieved 14 Oct 2026
- Docs: Deployment optionsDocumentation, retrieved 18 Oct 2026
- Docs: Subscription plansDocumentation, retrieved 18 Oct 2026
| Feature | Cursor | Tabnine |
|---|---|---|
| differs by tool |
| not publicly documentedall 2 plans |
| Details: DPA available |
|
|
| differs by tool | opt-out availableall 5 plans | noall 2 plans |
| Details: Training on inputs |
|
|
| differs by tool | mixedall 5 plans | not publicly documentedall 2 plans |
| Details: Data residency |
|
|
| list availableall 5 plans | list availableall 2 plans | |
| Details: List published |
|
|
| differs by tool | With Privacy Mode: ZDR with model…all 5 plans | Docs: contextall 2 plans |
| Details: Data retention |
|
|
| differs by tool |
| not publicly documentedall 2 plans |
| Details: Price |
|
|
| yesall 5 plans | yesall 2 plans | |
| Details: AI features included |
|
|
| 8 sources | 10 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- Cursor
- not publicly documentedFree (free of charge), Plus, Premium / Super / Ultra (Individual), Teams
- yesEnterprise
- Tabninenot publicly documentedall 2 plans
- Cursor
- Free (free of charge)
not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')
- Plus
not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')
- Premium / Super / Ultra (Individual)
not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')
- Teams
not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')
- Enterprise
yes (public DPA, applies together with the Master Services Agreement; EU SCCs Module Two and UK Addendum)
Provider’s DPA
Tabnine- Enterprise (SaaS)
not publicly documented (Trust Center lists a Master Services Agreement, no DPA; Privacy Policy describes Tabnine as processor when used for organisations, but does not refer to any DPA)
- Enterprise (private installation: VPC or on-premises)
not publicly documented (Trust Center lists a Master Services Agreement, no DPA; Privacy Policy describes Tabnine as processor when used for organisations, but does not refer to any DPA)
- Free (free of charge)
Training
- differs by tool
- Cursoropt-out availableall 5 plans
- Tabninenoall 2 plans
- Cursor
- Free (free of charge)
Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is also available for Free and can be enabled in the settings; default setting for individual accounts not publicly documented.
- Plus
Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is available for Free and Pro and can be enabled in the settings; default setting for individual accounts not publicly documented.
- Premium / Super / Ultra (Individual)
Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is available for Free and Pro and can be enabled in the settings; default setting for individual accounts not publicly documented.
- Teams
Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Teams: team-wide privacy settings; new members inherit the team setting; admins can enforce Privacy Mode.
- Enterprise
Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Enterprise: according to the documentation, Privacy Mode is enabled by default and enforceable; requests to models with provider-side storage (according to the documentation, Claude Fable 5 and 5.1) fail until an admin approves the retention policy.
Tabnine- Enterprise (SaaS)
Docs 'Privacy': 'no-train-no-retain' policy for Tabnine models; Tabnine does not store code, does not share code with third parties and does not train on customer code. Tabnine's code completion and Protected Chat model are stated to be trained only on open-source code under permissive licences; private fine-tuned models (team opt-in) accessible only to the team. Optional third-party chat models: privacy rules and protection may differ (Docs 'AI Models'). Terms of Use (as of 2024-07-25): Tabnine uses code developed during use only to improve the service for that specific customer, not for other users; "Tailor Made" models only at express request.
- Enterprise (private installation: VPC or on-premises)
Docs 'Privacy': 'no-train-no-retain' policy for Tabnine models; Tabnine does not store code, does not share code with third parties and does not train on customer code. Tabnine's code completion and Protected Chat model are stated to be trained only on open-source code under permissive licences; private fine-tuned models (team opt-in) accessible only to the team. Optional third-party chat models: privacy rules and protection may differ (Docs 'AI Models'). Docs: even with private deployment, code in the context window remains ephemeral; in self-hosted operation, clusters send metrics and logs to Tabnine servers, in air-gapped operation they do not. According to the Docs, no code and no PII are sent in the process. Terms of Use (as of 2024-07-25): Tabnine uses code developed during use only to improve the service for that specific customer, not for other users; "Tailor Made" models only at express request.
- Free (free of charge)
Hosting
- differs by tool
- Cursormixedall 5 plans
- Tabninenot publicly documentedall 2 plans
- Cursor
- Free (free of charge)
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.
- Plus
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.
- Premium / Super / Ultra (Individual)
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.
- Teams
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.
- Enterprise
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.
Tabnine- Enterprise (SaaS)
Security documentation: SaaS on AWS (North Virginia, USA) and Google Cloud (Council Bluffs, Iowa, USA), plus Heroku (Virginia, USA) as main locations. Docs 'Deployment options': Secure SaaS is 'hosted, managed, and monitored by Tabnine', without stating a location. The Trust Center names Google Cloud Platform under 'Infrastructure'. An EU region or choice of region is not documented.
- Enterprise (private installation: VPC or on-premises)
Operation and location are the customer's responsibility (data centre or supported cloud provider). Telemetry: in self-hosted operation, metrics, logs and client telemetry go to Tabnine servers, location not documented.
- Free (free of charge)
Sub-processors
- Cursorlist availableall 5 plans
- Tabninelist availableall 2 plans
- Cursor
- Free (free of charge)
- Amazon Web Services (primary cloud hosting; US, EU, Singapore)
- Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
- Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
- Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
- Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)
- Plus
- Amazon Web Services (primary cloud hosting; US, EU, Singapore)
- Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
- Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
- Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
- Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)
- Premium / Super / Ultra (Individual)
- Amazon Web Services (primary cloud hosting; US, EU, Singapore)
- Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
- Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
- Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
- Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)
- Teams
- Amazon Web Services (primary cloud hosting; US, EU, Singapore)
- Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
- Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
- Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
- Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)
- Enterprise
- Amazon Web Services (primary cloud hosting; US, EU, Singapore)
- Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
- Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
- Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
- Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)
Tabnine- Enterprise (SaaS)
- Hosting providers according to the security documentation: Amazon Web Services (main data centre North Virginia, USA), Google Cloud Platform (Council Bluffs, Iowa, USA), Heroku (Virginia, USA)
- Google Cloud Identity (identity management according to the security documentation)
- Optional third-party chat models (depending on selection): Anthropic Claude, OpenAI GPT, Google Gemini and others; according to the documentation, privacy rules of these models may differ
- According to the Privacy Policy, also payment service providers, analytics and marketing service providers as well as affiliated companies (e.g. Tabnine Inc.), without names
- Complete sub-processor list: not publicly documented (tabnine.com/subprocessors still returns HTTP 502 when retrieved on 2026-10-18; the Trust Center contains no sub-processor list)
- Enterprise (private installation: VPC or on-premises)
- No operation by Tabnine; optionally connected third-party models via private endpoints at the customer's choice
- Telemetry recipient: Tabnine servers (hosting as for SaaS according to the security documentation: AWS, GCP, Heroku in the USA)
- Free (free of charge)
Retention
- differs by tool
- CursorWith Privacy Mode: ZDR with model…all 5 plans
- TabnineDocs: contextall 2 plans
- Cursor
- Free (free of charge)With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented.
- PlusWith Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented.
- Premium / Super / Ultra (Individual)With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented.
- TeamsWith Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented.
- EnterpriseWith Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented.
Tabnine- Enterprise (SaaS)Docs: context (code snippets, chat history) is deleted immediately after the response (ephemeral processing); operational metrics and logs of the Tabnine cluster are retained for one week; stored data is encrypted with AES-256. Privacy Policy (as of 2024-09-12): personal data only as long as necessary for the services and legitimate business/legal purposes; specific retention periods not stated.
- Enterprise (private installation: VPC or on-premises)Docs: context (code snippets, chat history) is deleted immediately after the response (ephemeral processing); operational metrics and logs of the Tabnine cluster are retained for one week; stored data is encrypted with AES-256. Privacy Policy (as of 2024-09-12): personal data only as long as necessary for the services and legitimate business/legal purposes; specific retention periods not stated.
Price
- differs by tool
- Cursor
- 0 USD/moFree (free of charge)
- 8 USD/moPlus
- several tiersPremium / Super / Ultra (Individual)
- from 30 USD/user/moTeams
- customEnterprise
- Tabninenot publicly documentedall 2 plans
- Cursor
- Free (free of charge)
USD 0 per month (pricing page; prices excl. taxes such as VAT)
- Plus
USD 8 per month (pricing page, excl. taxes). According to the pricing page FAQ, subscriptions are sold via X Subscription Corp.
- Premium / Super / Ultra (Individual)
Premium USD 30, Super USD 100, Ultra USD 200 per month (pricing page, excl. taxes); third-party models are billed separately based on usage. According to the FAQ, sold via X Subscription Corp.
- Teams
from USD 30 per user per month (pricing page: "$30+/user/month", excl. taxes); seat types can be combined.
- Enterprise
Custom (pricing page: 'Custom'); invoice/PO billing available
Tabnine- Enterprise (SaaS)
not publicly documented (tabnine.com/pricing redirects to the Tricentis contact form; Terms: fees in USD, excluding taxes)
- Enterprise (private installation: VPC or on-premises)
not publicly documented (tabnine.com/pricing redirects to the Tricentis contact form)
- Free (free of charge)
- Cursoryesall 5 plans
- Tabnineyesall 2 plans
- Cursor
- Free (free of charge)
yes (limited AI usage, limited Agent and chat requests; Grok Chat/Imagine/Build limited)
- Plus
yes (shared AI usage pool; according to the pricing page, Grok models only; Grok Chat, Voice, Imagine, Build, Grok API access; plus X features)
- Premium / Super / Ultra (Individual)
yes (Premium 4x, Super 15x, Ultra 50x usage compared with Plus; Cloud Agents and automations, Bugbot, third-party models at API list price, Grok Bot, video generation; plus X features)
- Teams
yes (as Premium, plus team marketplace, centralised billing, team-wide privacy settings, custom chat data retention, SAML/OIDC SSO; usage 4x to 50x Plus depending on seat tier)
- Enterprise
yes (as Teams, plus pooled usage, invoice/PO, SCIM, access, network and model controls, audit logs, Priority Support; optional US data residency)
Tabnine- Enterprise (SaaS)
yes (code completion, chat, agent, CLI, context engine; Tabnine's own models as well as optional third-party models)
- Enterprise (private installation: VPC or on-premises)
yes (as SaaS; models run in the customer's own data centre or VPC, private endpoints for further models)
- Free (free of charge)
Evidence
- Cursor8 sources
- Tabnine10 sources
- Cursor
- PricingPricing page, retrieved 18 Oct 2026
- Security (as of 2026-08-25)Trust Center, retrieved 18 Oct 2026
- Data Use & Privacy Overview (as of 2026-09-03)Privacy notice, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-11)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2025-11-05)DPA, retrieved 18 Oct 2026
- Docs: Privacy and data governanceDocumentation, retrieved 18 Oct 2026
- Trust Center: Subprocessors (Vanta, 20 entries)Sub-processor list, retrieved 18 Oct 2026
- SpaceXAI Bundled Subscription Terms (X Subscription Corp)Terms and conditions, retrieved 18 Oct 2026
Tabnine- Docs: PrivacyDocumentation, retrieved 14 Oct 2026
- Docs: SecurityDocumentation, retrieved 14 Oct 2026
- Docs: Enterprise (SaaS)Documentation, retrieved 14 Oct 2026
- Docs: Enterprise (private installation)Documentation, retrieved 14 Oct 2026
- Docs: AI ModelsDocumentation, retrieved 18 Oct 2026
- Tabnine Trust Center (SafeBase)Trust Center, retrieved 18 Oct 2026
- Tabnine Privacy Policy (as of 2024-09-12, PDF; redirect from tabnine.com/privacy)Privacy notice, retrieved 14 Oct 2026
- Tabnine Terms of Use incl. Multi-Model Addendum (as of 2024-07-25, PDF; redirect from tabnine.com/terms-of-use)Terms and conditions, retrieved 14 Oct 2026
- Docs: Deployment optionsDocumentation, retrieved 18 Oct 2026
- Docs: Subscription plansDocumentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Cursor compared with
Individual pages: Cursor, Tabnine. All tools in the category: Software development.