2 min lesson
Check the facts behind the answer
Explain the current security and data facts, including their limits.
Step 1 of 2
Check the facts behind the answer
The evidence must be current and exact. Check these details before a technical or security discussion, and do not quote a figure you have not verified.
- Indexing is ephemeral
- On first open, Cursor splits the codebase into functions and stores hashed vector embeddings. It holds raw code briefly, then deletes it. Only the vector database remains in long-term storage. "We don't want your codebase any more than you want us to have it long term."
- Baseline posture
- Privacy ModeCursor's setting that guarantees code data is not used for training by Cursor or its model providers, and that an admin can enforce org-wide; data-retention terms are a separate, contractual layer. Press Enter for the full definition. is on by default, and an Enterprise admin can enforce it company-wide. Bring-your-own-key use has exceptions. Zero-data-retention agreements cover most models routed through Cursor, but not your own API keys or a few models with provider retention terms. Cursor has SOC 2 Type II plus SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition. and MDM enforcement. US-only data residency is an Enterprise opt-in program with a 10% increase in model pricing, not the default. Ask before promising it, and point buyers to trust.cursor.com.
- 'Self-hosted' caveat
- Self-hosted or private workersCloud-agent machines that run inside your own network so they can reach internal systems; the model inference still calls external providers. Press Enter for the full definition. run the container in your network. They can reach on-premises source control and internal MCPModel Context Protocol. A standard that lets an AI agent pull in context from outside the repo, like Jira tickets or internal docs. Press Enter for the full definition. servers, but inference remains external. The agent still calls a model provider API, such as Anthropic for Opus, just like the desktop app. 'Self-hosted' does not mean self-hosted inference. Getting this wrong can lose the security review.
No single feature guarantees good code. Project RulesVersion-controlled instructions in the repo that every Cursor agent interaction inherits, so standards are encoded once. Press Enter for the full definition. and better context shape the change. A public de-slop command can scan generated code for common patterns. BugbotCursor's automated PR reviewer that posts inline findings and can push fix commits from isolated VMs. Press Enter for the full definition., automations and Cloud Agent reviews add checks before or during pull request review.
Older material says BugbotCursor's automated PR reviewer that posts inline findings and can push fix commits from isolated VMs. Press Enter for the full definition. resolved more than 70 to 80% of the issues it found. Treat that figure as dated and verify it before use. Current evidence should state the review time, defects found and cost in the same conditions used for the claim.