Cursor Privacy and Security: Keeping Your Code Safe

Understand Cursor data handling, Privacy Mode, code indexing, and SOC 2 security certifications. Configure privacy settings for enterprise compliance.

Cursor offers robust privacy and security controls to protect your proprietary code.

Privacy Mode

When enabled, code is never stored by model providers or used for training. Over 50% of users have Privacy Mode enabled, and it is forcibly enabled for all team members.

Data Retention Agreements

With Privacy Mode on:

• Zero data retention with Fireworks and Together
• Zero data retention with OpenAI
• All plaintext code ceases to exist after the request

Infrastructure

• Primary: AWS (US)
• Secondary: Cloudflare, Microsoft Azure, Google Cloud Platform
• SOC 2 certified

Code Indexing

When you index your codebase:

• Code is uploaded in small chunks to compute embeddings
• All plaintext code ceases to exist after processing
• Only embeddings and metadata are stored, never raw code

Enabling Privacy Mode

Go to Settings > General > Privacy Mode and toggle it on.

Without Privacy Mode

Cursor may use codebase data, prompts, and code snippets to improve AI features and train models.

Enterprise Considerations

• Enforce Privacy Mode organization-wide
• Review data retention policies for compliance
• Configure allowed model providers
• Use audit logging for compliance reporting
• Document security posture for SOC 2 alignment

Team Privacy

Privacy Mode is forcibly enabled for all team plan members, ensuring consistent data protection across your organization.