enterprise

Enterprise Privacy & Security

The #1 question enterprises ask: "Will our proprietary code be safe?"

This section contains deep-dive guides into Cursor's privacy architecture, designed for CTOs, security teams, and decision-makers evaluating AI coding assistants.

---

Guides

Guide	Language	Description
Enterprise Privacy Guide	English	Deep-dive into Cursor's privacy architecture, Merkle trees, dual infrastructure
Enterprise Datenschutz-Leitfaden	Deutsch	Deutsche Version des Privacy Guides

---

Key Topics Covered

• Privacy Mode vs Share Data - What each setting actually does
• What's actually stored - Embeddings, file paths, hashes explained
• Zero Data Retention agreements - With OpenAI, Anthropic, Google, and more
• GDPR compliance - EU SCCs, DPA, and UK GDPR Addendum
• Practical .cursorignore recommendations - Template for sensitive codebases
• Network controls - Domain whitelisting for enterprise firewalls

---

Quick Assessment

After reading these guides, you'll be able to answer:

1. Is Privacy Mode sufficient for our compliance requirements?
2. What data leaves our network and where does it go?
3. Can we use Cursor with GDPR/SOC 2/HIPAA requirements?
4. What's the risk profile of embedding reversal attacks?
5. Do we need to wait for self-hosted deployment?

---

Sources

All information is sourced from official Cursor documentation:

• cursor.com/security
• cursor.com/privacy
• cursor.com/data-use
• Cursor Blog: Secure Codebase Indexing

---

Back to main README