Cursor
cursor.com
Automated, point-in-time. Not independently reviewed or approved by TRUSTYCYBER unless expressly stated.
- No formal subprocessor register disclosed
- No clear commitment that your data will not train their models
- Data retention window not stated
See Before you sign, with what to ask for ↓
Scanned Oct 21, 2026 · Public evidence · Point-in-time
Higher scores indicate stronger, independently supported AI assurance, governance, AI systems, models, data, supply chain and third-party assurance evidence. The score and the decision are related but different: a well-scored vendor can still carry conditions.
Before you sign
Why it matters: The vendor names AI-related providers or partially addresses its supply chain, but the public sources scanned do not include a formal, dated subprocessor register.
What to ask for: Request a dated subprocessor register with change-notification terms for the DPA/order form.
Why it matters: The public sources scanned do not clearly state that customer prompts, files, and outputs are excluded from training or fine-tuning of first- or third-party models.
What to ask for: Get a no-training clause covering first- and third-party models into the DPA/order form.
“We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our Terms of Service ), (2) you explicitly report them to us (for example, as Feedback), or (3) you’ve explicitly agreed to their use for such training purposes. You can find instructions in the Service on how to manage your preferences regarding the use of Inputs and Suggestions for training.”
Why it matters: The public sources scanned do not give a retention period for customer data or prompts/outputs.
What to ask for: Get retention windows, in days, in writing.
“Anysphere retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements.”
Buyer questionsanswered only from the public evidence scanned, click a row for the answer
!Will they train on your data?Ask the vendor
Anysphere states it does not use Inputs or Suggestions to train its models, nor permit third parties to, except where content is flagged for security review, explicitly reported as Feedback, or the user has explicitly agreed; training preferences are managed in the Service.
Requires written confirmation, see Before you sign ↓
“We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our Terms of Service ), (2) you explicitly report them to us (for example, as Feedback), or (3) you’ve explicitly agreed to their use for such training purposes. You can find instructions in the Service on how to manage your preferences regarding the use of Inputs and Suggestions for training.”
!How long do they keep your data?Ask the vendor
Retention is criteria-based: data is kept only as long as necessary for the Service and legitimate business needs, with the period varying by purpose, sensitivity, risk and legal requirements; user settings can affect retention and some temporary interactions may be stored for a limited duration for safety and system monitoring. No fixed retention window is stated.
Requires written confirmation, see Before you sign ↓
“Anysphere retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements.”
!Who else can access your data?Ask the vendor
Personal data may be disclosed to third-party service providers including hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment, compliance and IT providers; the providers are described by category, not named, in the policy.
Requires written confirmation, see Before you sign ↓
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
“Subprocessors: For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at trust.cursor.com/subprocessors .”
!Where is your data processed?Ask the vendor
Personal data is processed on servers in various jurisdictions including the United States; EEA and UK data may be transferred to US servers and other countries, using legally valid transfer mechanisms and requiring an adequate level of protection. Jurisdictions beyond the US are not named.
Confirm in writing: Ask the vendor to state this in writing before signing.
“Anysphere processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. For users in the European Economic Area, (“EEA”), when you access our Service, your personal data may be transferred to our United States servers to other countries outside the EEA and the UK. Where information is transferred outside the EEA or the UK, we require an adequate level of data protection.”
!What happens in a security incident?Ask the vendor
Anysphere states it applies commercially reasonable technical and organisational measures to protect personal data, while disclaiming that no transmission or storage method is completely secure. No incident-notification commitment or vulnerability-disclosure process is described.
Confirm in writing: Ask the vendor to state this in writing before signing.
“We implement commercially reasonable technical and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, please remember that no method of transmission over the Internet or method of electronic storage is completely secure.”
Email to send the vendor10 items to confirm in writing
Hello Cursor team, We are assessing Cursor as part of our supplier review. Before we proceed, please confirm the following in writing: 1. Please provide your current, dated subprocessor list and explain how you notify customers of changes. 2. Do you use our data (inputs, outputs or uploaded files) to train or improve your models? Please confirm in writing, including any opt-out and whether it applies to every plan. 3. How long do you retain our data, in days, for each type (inputs, outputs, logs and backups), and how is it deleted? 4. In which countries and regions is our data processed and stored, and can processing be limited to a region we choose? 5. What is your commitment to notify customers of a security incident affecting our data, including the timeframe? 6. Which legal entity is the contracting party and data controller/processor for Cursor customers following the SpaceX acquisition, and is any customer data (prompts, code, telemetry) shared with SpaceX or other group affiliates, including for model development? 7. Provide the AIUC-1 certificate (issuer, scope, date, validity) and any published evaluation or red-teaming results for cloud agents, Projects coordinators and the Security Review and Rollouts bots. 8. AWS appears to be involved as a platform provider: confirm whether this dependency exists, and whether it processes customer data. 9. Google appears to be involved as a model provider: confirm whether this dependency exists, and whether it processes customer data. 10. Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data. A written reply to each point, or a link to where it is documented, is enough. Where a point is covered by a certification or independent report, please include the certificate number or the report and its date. Thank you,
Key findingsclick a row for the evidence
✓Default no-training commitment with enumerated carve-outs and user controlsStrong
The Privacy Policy states that Inputs and Suggestions are not used to train Anysphere's models, nor shared with third parties for training, except where content is flagged for security review, explicitly reported as Feedback, or the user has explicitly agreed, and it says preferences can be managed in the Service. It also commits not to re-identify de-identified data and points commercial customers to a published subprocessor register.
A written default-off training position with a bounded exception list is materially better than silence or a blanket 'improve our services' clause. The carve-outs are real, though: security-review flagging is vendor-triggered, and rating a Suggestion as Feedback may store the whole exchange and make it eligible for training. Buyers should confirm the enterprise-tier position in writing.
Question for vendor: For Teams and Enterprise accounts, confirm in the DPA that no Inputs, Suggestions or Feedback are used to train or fine-tune any model (including Grok models), and describe what 'flagged for security review' analysis involves and how long such content is retained.
“We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our Terms of Service ), (2) you explicitly report them to us (for example, as Feedback), or (3) you’ve explicitly agreed to their use for such training purposes. You can find instructions in the Service on how to manage your preferences regarding the use of Inputs and Suggestions for training.”
“We may aggregate or de-identify personal data so that it no longer identifies you, and use that information for the purposes described above, such as analyzing how the Service is used, improving or adding features, and conducting research. We will maintain de-identified information in its de-identified form and will not attempt to reidentify it, except as required by law.”
“Subprocessors: For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at trust.cursor.com/subprocessors .”
!Public policy excludes enterprise (data-processor) use; contractual terms not in the reviewed materialGap
The Privacy Policy expressly does not apply where Anysphere acts as a data processor for commercial customers, deferring to customer agreements that are not among the reviewed documents. Retention is criteria-based with no fixed window, processing locations are 'various jurisdictions including the United States', and the only security statement is a generic 'commercially reasonable measures' clause with no breach-notification or vulnerability-disclosure commitment.
For an organisation deploying Cursor to staff, the operative data terms (training, retention, residency, subprocessors, incident notification) sit in the DPA and trust portal rather than the public policy. The public surface therefore cannot be relied on to clear or condemn the enterprise position; it has to be confirmed contractually.
Question for vendor: Provide the Enterprise DPA and security addendum, including retention windows for prompts, code context and agent transcripts, available data-residency options, the current subprocessor list from trust.cursor.com, and the security-incident notification commitment (trigger and timeframe).
“Please note that this Privacy Policy does not apply where Anysphere acts as a data processor and processes personal data on behalf of commercial customers using our commercial services, for example, if your employer has provisioned a Cursor account for you to use at work. Our use of that data is governed by our customer agreements covering access to and use of those offerings.”
“Anysphere retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements.”
“Anysphere processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. For users in the European Economic Area, (“EEA”), when you access our Service, your personal data may be transferred to our United States servers to other countries outside the EEA and the UK. Where information is transferred outside the EEA or the UK, we require an adequate level of data protection.”
“We implement commercially reasonable technical and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, please remember that no method of transmission over the Internet or method of electronic storage is completely secure.”
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
!Ownership change: Cursor states it is now part of SpaceX while the Privacy Policy still names Anysphere, Inc.Gap
Cursor's blog (August 2026) states the company has been acquired by SpaceX. The Privacy Policy in the same pack identifies Anysphere, Inc. as the responsible entity and permits sharing with affiliates under common control and transfers in corporate transactions. Nothing in the reviewed documents says which legal entity now contracts with customers or whether customer data flows to the parent group.
An acquisition changes who is accountable, which affiliates can receive data under the 'Affiliates' clause, and potentially where and by whom models are developed. Buyers with existing agreements should check whether their contracting party, DPA and subprocessor list have been updated.
Question for vendor: Which legal entity is the contracting party and data controller/processor for Cursor customers following the SpaceX acquisition, and is any customer data (prompts, code, telemetry) shared with SpaceX or other group affiliates, including for model development?
“Cursor is now a part of SpaceX Cursor has officially been acquired by SpaceX.”
“Please note that this Privacy Policy does not apply where Anysphere acts as a data processor and processes personal data on behalf of commercial customers using our commercial services, for example, if your employer has provisioned a Cursor account for you to use at work. Our use of that data is governed by our customer agreements covering access to and use of those offerings.”
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
!Model inventory and providers behind Cursor features are not disclosedGap
Cursor presents Grok 4.6 and 4.7 as 'our' models and describes a Cursor Router that picks a model per task, while the Privacy Policy discloses unnamed third-party 'model' service providers. The reviewed documents do not map which models or providers serve which features (Tab, chat, cloud agents, Projects, Security Review, Rollouts), nor whether routing can send customer code to external providers.
Routing between in-house and third-party models means the data recipient can vary per request. Without a model and provider inventory, a buyer cannot assess which external parties see their code or whether residency and training commitments hold across every route.
Question for vendor: List the models and model providers that can serve each Cursor feature, state whether the Router can route to third-party hosted models, and confirm that the no-training and retention commitments apply to every provider in the path.
“Introducing Grok 4.7 Our most capable model for long-running coding and knowledge work.”
“How Cursor Router chooses the right model for the task”
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
!AIUC-1 certification claimed by headline only; no evaluation evidence for Cursor's own agentsGap
The blog index headline says Cursor has earned AIUC-1 certification for agent security and reliability, but the post body, issuer, scope and validity are not in the reviewed documents, so the certification is vendor-claimed and scope-unclear. Separately, the pack contains product descriptions of autonomous agents (Projects coordinators acting without prompts, Automations opening PRs) and some autonomy limits (Rollouts will not merge or roll back), but no published testing or evaluation results for those agents. testing_and_evaluation is therefore marked not_evidenced rather than not_applicable: a vendor shipping autonomous coding agents can publish evaluation evidence, and its absence is a real gap.
A certification headline without scope cannot be relied on, and the governance controls described are largely customer-configured (comment instead of PR, narrow the trigger, Enterprise opt-in for Remote Control) rather than vendor-attested safeguards backed by evaluation.
Question for vendor: Provide the AIUC-1 certificate (issuer, scope, date, validity) and any published evaluation or red-teaming results for cloud agents, Projects coordinators and the Security Review and Rollouts bots.
“Cursor earns AIUC-1 certification for agent security and reliability”
“Tighten the quality bar. Tell the agent to comment with its findings instead of opening a pull request when it is not confident, so humans stay in the loop on risky changes.”
“Tell the coordinator agent to watch a Slack channel, run on a schedule, or follow all your PRs. This way it can take action based on signals it detects, without waiting for your prompt. Connect Slack and point it at a bug-report channel, and it starts delegating each time a bug comes in.”
“When Rollouts detects a regression, it names the change it suspects and notifies the author. Depending on configuration, it can also open a revert PR for review or hand the finding to a cloud agent for a fix. Rollouts does not merge or roll back on its own today.”
“Remote control is on by default, except for Enterprise organizations. Enterprise admins can turn it on in Org settings > Security and identity > Remote control.”
?Technical dependency observed: AWSObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on AWS as a platform provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — AWS appears to be involved as a platform provider: confirm whether this dependency exists, and whether it processes customer data.
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
“Subprocessors: For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at trust.cursor.com/subprocessors .”
“Introducing Grok 4.7 Our most capable model for long-running coding and knowledge work.”
“How Cursor Router chooses the right model for the task”
?Technical dependency observed: GoogleObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Google as a model provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Google appears to be involved as a model provider: confirm whether this dependency exists, and whether it processes customer data.
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
“Subprocessors: For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at trust.cursor.com/subprocessors .”
“Introducing Grok 4.7 Our most capable model for long-running coding and knowledge work.”
“How Cursor Router chooses the right model for the task”
?Technical dependency observed: MicrosoftObservation
Technical evidence (DNS, certificate, or HTTP) shows a dependency on Microsoft as a service provider. This dependency is not identified in the vendor's published materials.
An undisclosed provider dependency is exactly the gap independent verification exists to surface.
Question for vendor: Verification required — Microsoft appears to be involved as a service provider: confirm whether this dependency exists, and whether it processes customer data.
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
“Subprocessors: For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at trust.cursor.com/subprocessors .”
“Introducing Grok 4.7 Our most capable model for long-running coding and knowledge work.”
“How Cursor Router chooses the right model for the task”
Assurance dimensionsweighted components of one score, not eight separate ratings
Organisation & AI governance15% of the score40
Who owns AI risk: policies, responsible-AI principles, human oversight and administrative controls.
Assessed against ISO 42001 · NIST AI RMF · AIUC-1
“No automated decisions: Anysphere does not make decisions based solely on automated processing that impact your legal rights or has similarly significant effects (e.g. your healthcare or financial circumstances).”
“Business Account Administrators: If you create an account using an email associated with an organization (e.g., your employer), we may disclose account-related information (such as your email address and account status) to that organization. If you're part of a business or enterprise account, administrators may access and manage your use of the Service.”
“Tighten the quality bar. Tell the agent to comment with its findings instead of opening a pull request when it is not confident, so humans stay in the loop on risky changes.”
“Tell the coordinator agent to watch a Slack channel, run on a schedule, or follow all your PRs. This way it can take action based on signals it detects, without waiting for your prompt. Connect Slack and point it at a bug-report channel, and it starts delegating each time a bug comes in.”
“When Rollouts detects a regression, it names the change it suspects and notifies the author. Depending on configuration, it can also open a revert PR for review or hand the finding to a cloud agent for a fix. Rollouts does not merge or roll back on its own today.”
“Remote control is on by default, except for Enterprise organizations. Enterprise admins can turn it on in Org settings > Security and identity > Remote control.”
“Make the app public, then submit it from the app's page with a slug, suggested tags, and a demo video. The video should show install, uninstall, and your core product flows. We review the submission and list the app once it's approved.”
“Cursor is now a part of SpaceX Cursor has officially been acquired by SpaceX.”
AI system10% of the score33
What AI the vendor actually runs and where it sits in the product, the map everything else is judged against.
Assessed against ISO 42001 · NIST AI RMF
“Inputs and Suggestions: The Service allows you to submit content (" Inputs "), which generate responses (" Suggestions ") based on your Inputs. If you include personal data or reference external content in your Inputs, we will collect that information and it may be reproduced in the Suggestions we provide.”
“Please note that while we’ll make reasonable efforts to address correction requests, due to the nature of our models, we cannot guarantee the accuracy of Suggestions generated by the Service.”
“Watches. Runs on merges to the default branch or on a schedule. Investigates. Reads recent changes and the repository, updates the affected documentation, and opens a pull request. Reports back. A pull request that brings documentation back in line with the code.”
“The coordinator agent in a project doesn't write code itself; it plans the work, delegates it to agents that implement it, and brings the finished work back to you to check. Coordinators create and manage agents on your behalf, running as many in parallel as the work needs.”
“Security Review is available today. It reads every pull request in the context of the codebase and posts one review comment reporting exploitable bugs. Style and quality stay with Bugbot. Enable it from the dashboard for the repositories you want reviewed. Draft PRs are skipped.”
How AI features are evaluated before and after release, evals, red-teaming, monitoring.
Assessed against NIST GenAI · NIST AI RMF · ISO 42001
How changes to models and AI features are controlled and communicated: versioning, notice, rollback.
Assessed against ISO 27001 · ISO 42001
“The Environments API is now available in beta. Use it to programmatically create and manage the cloud environments your agents run in.”
“When Rollouts detects a regression, it names the change it suspects and notifies the author. Depending on configuration, it can also open a revert PR for review or hand the finding to a cloud agent for a fix. Rollouts does not merge or roll back on its own today.”
AI system description: vendor-evidenced, not yet independently corroborated.
Testing & evaluation: not publicly evidenced.
Model10% of the score40
Which model providers and versions process customer data, and how changes to them are disclosed.
Assessed against NIST GenAI · ISO 42001
“Introducing Grok 4.7 Our most capable model for long-running coding and knowledge work.”
“How Cursor Router chooses the right model for the task”
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
Agent10% of the score35
No independently corroborated agent-specific assurance (AIUC-class or equivalent).
Customer data15% of the score40
Whether customer data trains models, how long it is retained, where it is processed, and how it is protected.
Assessed against ISO 27018 · OAIC APPs · EU AI Act
“We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our Terms of Service ), (2) you explicitly report them to us (for example, as Feedback), or (3) you’ve explicitly agreed to their use for such training purposes. You can find instructions in the Service on how to manage your preferences regarding the use of Inputs and Suggestions for training.”
“We may aggregate or de-identify personal data so that it no longer identifies you, and use that information for the purposes described above, such as analyzing how the Service is used, improving or adding features, and conducting research. We will maintain de-identified information in its de-identified form and will not attempt to reidentify it, except as required by law.”
“Anysphere retains your personal data only for as long as necessary to operate the Service effectively and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements.”
“Anysphere processes your personal data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including in the United States. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. For users in the European Economic Area, (“EEA”), when you access our Service, your personal data may be transferred to our United States servers to other countries outside the EEA and the UK. Where information is transferred outside the EEA or the UK, we require an adequate level of data protection.”
“Please note that this Privacy Policy does not apply where Anysphere acts as a data processor and processes personal data on behalf of commercial customers using our commercial services, for example, if your employer has provisioned a Cursor account for you to use at work. Our use of that data is governed by our customer agreements covering access to and use of those offerings.”
AI supply chain10% of the score40
The named chain of AI and infrastructure providers behind the product, and how it is disclosed.
Assessed against ISO 27001 · ISO 27017
“This includes third-party hosting, cloud infrastructure, model, analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our and your instructions and applicable law.”
“Subprocessors: For commercial uses of the Service where Anysphere acts as a data processor, you can review the third parties we engage on at trust.cursor.com/subprocessors .”
Security foundation10% of the score40
How security problems are found, reported and handled: disclosure channels, bug bounty, incident response.
Assessed against ISO 27001 · NIST AI RMF
“We implement commercially reasonable technical and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, please remember that no method of transmission over the Internet or method of electronic storage is completely secure.”
Independent assurance evidence10% of the score35
Whether claimed certifications and attestations are independently corroborated, checked against official registries and issuing bodies. Which certifications, and what each one does and does not establish, is stated per certificate.
Assessed against ISO 17021-1 · ISO 42006 · ISO 27006-1 · ISO 27008
“Cursor earns AIUC-1 certification for agent security and reliability”
None of the corroborated certifications is AI-specific (ISO/IEC 42001 or AIUC-class) — this assurance is security and data-transfer attestation, not AI-management-system assurance.
Legal & contractual10% of the score40
The contractual backbone a buyer can rely on, terms, DPAs, privacy commitments and regulatory posture.
Assessed against EU AI Act · OAIC APPs
“Please note that this Privacy Policy does not apply where Anysphere acts as a data processor and processes personal data on behalf of commercial customers using our commercial services, for example, if your employer has provisioned a Cursor account for you to use at work. Our use of that data is governed by our customer agreements covering access to and use of those offerings.”
“To exercise any of these rights, you or your authorized agent may contact us at [email protected] . We may request information to verify your identity before processing your request. If we deny your request, you may appeal by emailing the same address. Anysphere will not discriminate against you for exercising any privacy rights available under applicable law.”
What would strengthen assuranceeach figure is from today's score, resolving one changes the others
Resolving an evidence gap strengthens the dimension it belongs to, and with it the score: 40 → up to 64 with every identified gap resolved.
AI supply chainclick a node to focus it · drag to pan · zoom with the controls
View as list
What you inheritTrustyCyber's AI Shared Responsibility Matrix v1.0
This scan names the vendor’s AI supply chain without assessing the responsibility split, that depends on how you consume the product. Under the common managed models, a deployer inherits 16 of the matrix’s 41 responsibilities from providers, each with named evidence owed.
Map your inherited responsibilitiesAssurance evidence: certifications 2, registry checks and verification ladders, click to view
Claimed via a blog index headline ('Cursor earns AIUC-1 certification for agent security and reliability', Aug 13, 2026). Issuer, certified scope, date and validity are not in the reviewed documents.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Not claimed in any public source scanned. This is the AI-management-system certification — in its absence, the vendor’s AI governance rests on its general security and privacy certifications.
Sources 12, click to view
Appendix: standards landscape 8, click to view
Where each standard behind this assessment stands today, from TrustyCyber’s continuously maintained standards radar.
Want to go further?
This scan assesses Cursor at an organisational level. Assurance can vary significantly between products, models and agents, enter the product you’re evaluating to run a deeper AI System Assurance Scan.
Scan a specific product →This automated result is based on publicly available information at the time of scanning. It is not an audit, certification, legal opinion or assurance engagement. Publicly unavailable evidence may materially change the conclusion.
Monitor for changes
Get an email if its TRUSTYCYBER Score, grade or certifications change. One credit per refresh; reading the report always stays free.