Cursor Privacy and Security: Keeping Your Code Safe

Cursor offers robust privacy and security controls to protect your proprietary code. ## Privacy Mode When enabled, code is **never stored** by model providers or used for training. Over 50% of users have Privacy Mode enabled, and it is forcibly enabled for all team members. ## Data Retention Agreements With Privacy Mode on: - **Zero data retention** with Fireworks and Together - **Zero data retention** with OpenAI - All plaintext code ceases to exist after the request ## Infrastructure - Primary: AWS (US) - Secondary: Cloudflare, Microsoft Azure, Google Cloud Platform - SOC 2 certified ## Code Indexing When you index your codebase: - Code is uploaded in small chunks to compute embeddings - All plaintext code ceases to exist after processing - Only embeddings and metadata are stored, never raw code ## Enabling Privacy Mode Go to **Settings > General > Privacy Mode** and toggle it on. ## Without Privacy Mode Cursor may use codebase data, prompts, and code snippets to improve AI features and train models. ## Enterprise Considerations - Enforce Privacy Mode organization-wide - Review data retention policies for compliance - Configure allowed model providers - Use audit logging for compliance reporting - Document security posture for SOC 2 alignment ## Team Privacy Privacy Mode is forcibly enabled for all team plan members, ensuring consistent data protection across your organization.