1 min lesson
Check the facts behind the answer
Say what this means in practice. "The evidence must be current and exact."
Step 1 of 3
Check the facts behind the answer
The evidence must be current and exact. Check these details before a technical or security discussion, and do not quote a figure you have not verified.
Learn more
Full explanation
What Cursor stores for security and IP reviews
- Indexing is ephemeral
- On first open, Cursor splits the codebase into functions and stores vector embeddings with obfuscated filenames. It holds raw code in memory briefly, then deletes it. Only the vector database remains in long-term storage. "We don't want your codebase any more than you want us to have it long term."
- Baseline posture
- On Enterprise, Privacy ModeCursor's setting that guarantees code data is not used for training by Cursor or its model providers, and that an admin can enforce org-wide; data-retention terms are a separate, contractual layer. Press Enter for the full definition. is on by default and an admin can enforce it company-wide. Bring-your-own-key use has exceptions. Zero-data-retention agreements cover most models routed through Cursor, but not your own API keys or a few models with provider retention terms. Cursor has SOC 2 Type II plus SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition. and MDM enforcement. US-only data residency is an Enterprise opt-in program with a 10% increase in model pricing, not the default. Ask before promising it, and point buyers to trust.cursor.com.
- 'Self-hosted' caveat
- Self-hosted or private workersCloud-agent machines that run inside your own network so they can reach internal systems; the model inference still calls external providers. Press Enter for the full definition. run the container in your network. They can reach on-premises source control and internal MCPModel Context Protocol. A standard that lets an AI agent pull in context from outside the repo, like Jira tickets or internal docs. Press Enter for the full definition. servers, but inference remains external. The agent still calls a model provider API, such as Anthropic for Opus, just like the desktop app. 'Self-hosted' does not mean self-hosted inference. Getting this wrong can lose the security review.
"I do not know that off the top of my head. I will verify it and follow up." Use this when a question falls outside what you can prove.
No single feature guarantees good code. Project RulesVersion-controlled instructions in the repo that every Cursor agent interaction inherits, so standards are encoded once. Press Enter for the full definition. and better context shape the change. A public de-slop command can scan generated code for common patterns. BugbotCursor's automated PR reviewer that posts inline findings and can push fix commits from isolated VMs. Press Enter for the full definition., automations and Cloud Agent reviews add checks before or during pull request review.