Cursor
Provider: Anysphere, Inc. · Based in: Anysphere, Inc., 2261 Market Street STE 86466, San Francisco, CA 94114, USA · Provider website
- Plans
- 5
- Sources
- 10
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 3 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- mixed: all 5 plans
- Training on inputs
- opt-out available: all 5 plans
- DPA
- not publicly documented: Free, Plus, Premium / Super / Ultra, Teamsyes: Enterprise
- Provider
- Anysphere, Inc.
- Based in
- Anysphere, Inc., 2261 Market Street STE 86466, San Francisco, CA 94114, USA (contact address according to the Terms of Service, q7)
Values from 5 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare Cursor
Compare with another toolCompared plan by plan with other tools in the category Software development:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | Free (free of charge)Compare Cursor Free (free of charge) with another tool | PlusCompare Cursor Plus with another tool | Premium / Super / Ultra (Individual)Compare Cursor Premium / Super / Ultra (Individual) with another tool | TeamsCompare Cursor Teams with another tool | EnterpriseCompare Cursor Enterprise with another tool |
|---|---|---|---|---|---|
| differs by plan | 0 USD/mo | 8 USD/mo | several tiers | from 30 USD/user/mo | custom |
| Details: Price | USD 0 per month (pricing page; prices excl. taxes such as VAT) | USD 8 per month (pricing page, excl. taxes). According to the pricing page FAQ, subscriptions are sold via X Subscription Corp. | Premium USD 30, Super USD 100, Ultra USD 200 per month (pricing page, excl. taxes); third-party models are billed separately based on usage. According to the FAQ, sold via X Subscription Corp. | from USD 30 per user per month (pricing page: "$30+/user/month", excl. taxes); seat types can be combined. | Custom (pricing page: 'Custom'); invoice/PO billing available |
| yes | yes | yes | yes | yes | |
| Details: AI features included | yes (limited AI usage, limited Agent and chat requests; Grok Chat/Imagine/Build limited) | yes (shared AI usage pool; according to the pricing page, Grok models only; Grok Chat, Voice, Imagine, Build, Grok API access; plus X features) | yes (Premium 4x, Super 15x, Ultra 50x usage compared with Plus; Cloud Agents and automations, Bugbot, third-party models at API list price, Grok Bot, video generation; plus X features) | yes (as Premium, plus team marketplace, centralised billing, team-wide privacy settings, custom chat data retention, SAML/OIDC SSO; usage 4x to 50x Plus depending on seat tier) | yes (as Teams, plus pooled usage, invoice/PO, SCIM, access, network and model controls, audit logs, Priority Support; optional US data residency) |
| differs by plan | not publicly documented | not publicly documented | not publicly documented | not publicly documented | yes |
| Details: DPA | not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service') | not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service') | not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service') | not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service') | yes (public DPA, applies together with the Master Services Agreement; EU SCCs Module Two and UK Addendum) Provider’s DPA |
| opt-out available | opt-out available | opt-out available | opt-out available | opt-out available | |
| Details: Training on inputs | Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is also available for Free and can be enabled in the settings; default setting for individual accounts not publicly documented. | Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is available for Free and Pro and can be enabled in the settings; default setting for individual accounts not publicly documented. | Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is available for Free and Pro and can be enabled in the settings; default setting for individual accounts not publicly documented. | Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Teams: team-wide privacy settings; new members inherit the team setting; admins can enforce Privacy Mode. | Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. Enterprise: according to the documentation, Privacy Mode is enabled by default and enforceable; requests to models with provider-side storage (according to the documentation, Claude Fable 5 and 5.1) fail until an admin approves the retention policy. |
| With Privacy Mode: ZDR with model… | With Privacy Mode: ZDR with model… | With Privacy Mode: ZDR with model… | With Privacy Mode: ZDR with model… | With Privacy Mode: ZDR with model… | |
| Details: Data retention | With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented. | With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented. | With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented. | With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented. | With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented. |
| mixed | mixed | mixed | mixed | mixed | |
| Details: Hosting | Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development. | Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development. | Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development. | Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development. | Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development. |
| list available | list available | list available | list available | list available | |
| Details: Sub-processors |
|
|
|
|
|
| differs by plan | 6 sources | 7 sources | 7 sources | 6 sources | 7 sources |
| Details: Sources with retrieval date |
|
|
|
|
|
Compare Cursor Free (free of charge) with another tool
Price and scope
- differs by plan
- 0 USD/mo
USD 0 per month (pricing page; prices excl. taxes such as VAT)
- yes
yes (limited AI usage, limited Agent and chat requests; Grok Chat/Imagine/Build limited)
Contract and data use
- differs by plan
- not publicly documented
not publicly documented (the public DPA refers to a Master Services Agreement with Anysphere; according to the Terms of Service an MSA applies only if the organisation has concluded one; the Privacy Policy mentions a processor role only generally 'For commercial uses of the Service')
- opt-out available
Data Use (as of 2026-09-03): with Privacy Mode enabled, Customer Data is not used by Cursor for training; Cursor has zero data retention agreements with all model providers, and the providers do not store or train on the data. Exception: risk classifiers; where abuse detection is triggered, data may be stored for investigation. Non-ZDR models are labelled or require admin approval. Without Privacy Mode, Cursor may store codebase data, prompts, editor actions and code snippets and use them to train its own models. According to the Security page, Privacy Mode is also available for Free and can be enabled in the settings; default setting for individual accounts not publicly documented.
- With Privacy Mode: ZDR with model…
- With Privacy Mode: ZDR with model providers; file contents are encrypted to reduce latency and cached only for the duration of the request. Cloud Agents: according to the documentation, repository contents are stored only during the agent run and deleted afterwards. Without Privacy Mode: inference providers may temporarily store inputs/outputs, which are deleted afterwards. Personal data in general: only as long as necessary (Privacy Policy); specific retention periods not publicly documented.
Hosting and sharing
- mixed
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; data of EEA users may be transferred to the US. Sub-processor list (Trust Center): 'Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore.' Docs: data residency only for Enterprise; US-only (inference, processing, storage incl. backups in the US, 10% uplift); EU/UK inference only on request, further EU coverage in development.
- list available
- Amazon Web Services (primary cloud hosting; US, EU, Singapore)
- Further infrastructure: Microsoft Azure (secondary, US), Google Cloud Platform (US), Vercel (web hosting, US), Cloudflare (CDN/network security, worldwide)
- Model providers: OpenAI, Anthropic, Google Gemini (Vertex API), Meta (each worldwide), SpaceXAI (US), TypeSafe AI (US)
- Inference infrastructure: Fireworks (US, Canada, EU, UK), Baseten (US, Canada), Together (own models, with a ZDR agreement according to the list; US, Canada, UK), Nebius (UK), CoreWeave (US), Databricks (analytics database and inference, worldwide)
- Exa (web search, US), Datadog (logging/monitoring, US), WorkOS (SSO/SCIM, US)
Evidence
- differs by plan
- 6 sources
- PricingPricing page, retrieved 18 Oct 2026
- Security (as of 2026-08-25)Trust Center, retrieved 18 Oct 2026
- Data Use & Privacy Overview (as of 2026-09-03)Privacy notice, retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-11)Privacy notice, retrieved 18 Oct 2026
- Docs: Privacy and data governanceDocumentation, retrieved 18 Oct 2026
- Trust Center: Subprocessors (Vanta, 20 entries)Sub-processor list, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy Policy (as of 2026-10-11): processing on servers in various jurisdictions, including the US; for EEA users, data may be transferred to the US and other countries outside the EEA/UK on the basis of "legally valid transfer mechanisms" (without naming specific mechanisms). DPA (as of 2025-11-05): EU standard contractual clauses (Decision 2021/914, Module Two) and UK Addendum. DPF: named in the DPA only as a possible basis; Anysphere is not listed in the DPF list (search for 'Anysphere' and 'Cursor' on 2026-10-18 without results). Sub-processor list: processing locations including the US, EU, UK, Canada, Singapore; model providers OpenAI, Anthropic, Google Gemini, Meta with 'Worldwide'. Security page: no infrastructure in China, no sub-processors headquartered in China (provider statement).
- Security (as of 2026-08-25) (Trust Center), retrieved 18 Oct 2026
- Privacy Policy (as of 2026-10-11) (Privacy notice), retrieved 18 Oct 2026
- Data Processing Addendum (as of 2025-11-05) (DPA), retrieved 18 Oct 2026
- Trust Center: Subprocessors (Vanta, 20 entries) (Sub-processor list), retrieved 18 Oct 2026
- Data Privacy Framework List (search 'Anysphere' and 'Cursor') (Official register), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Security page (as of 2026-08-25): according to its own statement, Cursor holds AIUC-1, ISO/IEC 27001:2022, ISO/IEC 42001:2023 and a SOC 2 Type II attestation; certificates and reports available on request in the Trust Portal. Third-party penetration test at least annually, summary on request.
- Security (as of 2026-08-25) (Trust Center), retrieved 18 Oct 2026
- Data Processing Addendum (as of 2025-11-05) (DPA), retrieved 18 Oct 2026
AI Act
Functions: AI code editor with Agent, Tab completion, Cloud Agents, Composer model, Bugbot (code review), Grok Chat/Imagine/Build, Grok Bot, video generation and access to third-party models (pricing page, documentation).
Provider’s statement: not publicly documented(no mention of the EU AI Act on the pricing page, Security, Data Use, Privacy Policy, DPA, Terms of Service, docs 'Privacy and data governance', Trust Center and Bundled Subscription Terms; as of 2026-10-18). The Security page names ISO/IEC 42001:2023 (AI management system) and AIUC-1.
Classification (for review, not legal advice): To be reviewed: customer typically a deployer (Art. 3(4) AI Act). Which obligations apply depends on the specific intended use (check Annex III). With third-party models, the user also chooses the model and provider. Not legal advice.
- Pricing (Pricing page), retrieved 18 Oct 2026
- Security (as of 2026-08-25) (Trust Center), retrieved 18 Oct 2026
- Docs: Privacy and data governance (Documentation), retrieved 18 Oct 2026
Current notes 2026
Pricing page (retrieved 2026-10-14): new plan structure Free/Plus/Premium/Super/Ultra/Teams/Enterprise, bundled with X and Grok features; Pro plan no longer listed; according to the FAQ, sold via X Subscription Corp; footer links to "SpaceXAI Subscription Terms" (x.ai/legal). Privacy Policy 2026-10-11, Data Use 2026-09-03, Security 2026-08-25. According to the documentation, the Claude Fable 5/5.1 models store inputs with the provider for abuse review and, under Privacy Mode/Enterprise, can only be used after admin approval. Even with a customer's own API key, requests are routed via Cursor servers.
Provider structure
Cursor is a product of Anysphere, Inc. (US). According to the Bundled Subscription Terms, combined subscriptions (Plus, Premium/Super/Ultra) are sold by X Subscription Corp. (Austin, Texas, US) as 'merchant of record'; the services are provided by the respective service provider, add-on purchases (top-ups) are sold by Anysphere; existing subscriptions (e.g. Pro, Ultra, Teams) remain with Anysphere. An EU establishment, an EU representative or a legal notice (Impressum) is not named on the pages retrieved (Privacy Policy, Terms, DPA, Security, Trust Center); contact according to the Privacy Policy: hi@cursor.com.
Open points of the review
- Whether the public DPA (which refers to a Master Services Agreement) also applies to Free, Plus, Premium/Super/Ultra and Teams without an MSA is not documented.
- Default setting of Privacy Mode for individual and Teams accounts not expressly documented (the pages only say it 'can be enabled'; for Enterprise active by default according to the docs).
- Role of X Subscription Corp or SpaceXSI in the processing of personal data beyond billing not documented; SpaceXSI privacy policy not evaluated.
Frequently asked questions
Where does Cursor store data?
mixed (plans: Free (free of charge), Plus, Premium / Super / Ultra (Individual), Teams, Enterprise). According to the provider, as of 18 Oct 2026.
Is there a DPA for Cursor?
not publicly documented in: Free (free of charge), Plus, Premium / Super / Ultra (Individual), Teams; yes in: Enterprise. Based on our research, as of 18 Oct 2026.
Does Cursor use inputs for AI training?
opt-out available in: Free (free of charge), Plus, Premium / Super / Ultra (Individual), Teams, Enterprise. According to the provider, as of 18 Oct 2026.
Where is the provider based?
Anysphere, Inc., 2261 Market Street STE 86466, San Francisco, CA 94114, USA. According to the provider, as of 18 Oct 2026.
All sources
- 01PricingPricing page · retrieved 18 Oct 2026
- 02Security (as of 2026-08-25)Trust Center · retrieved 18 Oct 2026
- 03Data Use & Privacy Overview (as of 2026-09-03)Privacy notice · retrieved 18 Oct 2026
- 04Privacy Policy (as of 2026-10-11)Privacy notice · retrieved 18 Oct 2026
- 05Data Processing Addendum (as of 2025-11-05)DPA · retrieved 18 Oct 2026
- 06Docs: Privacy and data governanceDocumentation · retrieved 18 Oct 2026
- 07Terms of Service (as of 2026-09-03)Terms and conditions · retrieved 18 Oct 2026
- 08Trust Center: Subprocessors (Vanta, 20 entries)Sub-processor list · retrieved 18 Oct 2026
- 09SpaceXAI Bundled Subscription Terms (X Subscription Corp)Terms and conditions · retrieved 18 Oct 2026
- 10Data Privacy Framework List (search 'Anysphere' and 'Cursor')Official register · retrieved 18 Oct 2026
More tools in Software development with an EU hosting option (in at least one plan)
- Amazon Q Developer · Based in: Depending on the account country: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg
- GitHub Copilot · Based in: According to the GitHub General Privacy Statement
- IONOS AI Model Hub · Based in: IONOS Cloud GmbH, Elgendorfer Straße 57, 56410 Montabaur, Germany
- Lovable · Based in: Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden
All tools in Software development · Tools with an EU hosting option
Further reading
All tools in the category: Software development. Figures across all tools: Data report.