Vendor record · cursor.com
What Anysphere promises about your data.
Where Anysphere publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Anysphere lists its sub-processors at trust.cursor.com/subprocessors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 11, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
We couldn't quote a notice window: we watch cursor.com/legal/dpa for Anysphere's data processing agreement, but the page we were watching has gone, and we have not found a replacement.
- Window
- —
- Sub-processors
- 20
- Pages
- 8
- Copies
- 38
no window we can quote yet
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Anysphere DPA
We watch cursor.com/legal/dpa for Anysphere's data processing agreement, and the page we were watching has gone, and we have not found a replacement. There is no sub-processor notice window we can quote.
Anysphere sub-processors
Anysphere publishes a sub-processor list at trust.cursor.com/subprocessors; we last read it on October 15, 2026. It names 20 entries. The first 15, as the list prints them: Amazon Web Services; Anthropic; Azure; Baseten; Cloudflare; CoreWeave; Databricks; Datadog; Exa; Fireworks; Google Cloud Platform; Google Gemini; Meta; Nebius; OpenAI; and 5 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
20 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Anysphere keeps your data
We hold no statement about data retention from Anysphere's watched pages. The pages we watch: changelog cursor.com/changelog; pricing page cursor.com/pricing; privacy policy cursor.com/privacy; sub-processor list trust.cursor.com/subprocessors; terms of service cursor.com/terms-of-service; terms of service cursor.com/en-US/terms-of-service; trust and security page cursor.com/security; trust and security page cursor.com/en-US/security. On training with customer data, Anysphere's privacy policy (cursor.com/privacy, in the copy read October 13, 2026) says: “We do not use Inputs or Suggestions to train our models, or permit third parties to use them for training, unless: (1) they are flagged for security review (in which case we may analyze them to improve our ability to detect and enforce our Terms of Service), (2) you explicitly report them to us (for example, as Feedback), or (3) you’ve explicitly agreed …”
Training on customer data
“Model Training.** ANYSPHERE WILL NOT USE CONTENT TO TRAIN, OR ALLOW ANY THIRD PARTY TO TRAIN, ANY AI MODELS, UNLESS YOU’VE EXPLICITLY AGREED TO THE USE OF CONTENT FOR TRAINING.”
cursor.com/terms-of-service · read 2026-10-13
Training on customer data
“Model Training.** ANYSPHERE WILL NOT USE CONTENT TO TRAIN, OR ALLOW ANY THIRD PARTY TO TRAIN, ANY AI MODELS, UNLESS YOU’VE EXPLICITLY AGREED TO THE USE OF CONTENT FOR TRAINING.”
cursor.com/en-US/terms-of-service · read 2026-10-13
Training on customer data
“Contacting us](#8-contacting-us) Note: For information about how we collect and use training information to develop our models that power the Service, and your choices with respect to that information, please see our Privacy Overview. ## #Introduction We at Anysphere, Inc. (“Anysphere”, “we” or “us”) are strongly committed to respecting your privacy and keeping secure…”
cursor.com/privacy · read 2026-10-13
Training on customer data
“You can find instructions in the Service for how to manage your preferences regarding the use of Inputs and Suggestions for training. **1.4.”
cursor.com/terms-of-service · read 2026-10-13
Training on customer data
“You can find instructions in the Service for how to manage your preferences regarding the use of Inputs and Suggestions for training. **1.4.”
cursor.com/en-US/terms-of-service · read 2026-10-13
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 20 · 5 name an AI provider we list
Amazon Web Services
Primary cloud hosting provider for Cursor's infrastructure. Our infrastructure …
AnthropicAI · Anthropic
Provider of proprietary AI models via API. See the [Anthropic subprocessor list](https://trust.anthropic.com/subprocessors).
Worldwide
Azure
Some secondary infrastructure is hosted on Microsoft Azure.
US
BasetenAI · Baseten
Inference infrastructure provider for hosting and serving AI models.
US, Canada
Cloudflare
CDN, reverse proxy, network security, and Zero Trust tunneling provider. See [Cloudflare](https://www.cloudflare.com/gdpr/subprocessors/cloudflare-services/).
Worldwide
CoreWeave
Inference infrastructure provider for hosting and serving first party AI models.
US
Databricks
Data platform provider for storing and processing analytics data, and inference infrastructure provider for hosting and serving AI models. See [Databricks mode…
Worldwide
Datadog
Application logging and monitoring.
US
Exa
Web search API provider for retrieving web content and search results.
US
FireworksAI · Fireworks AI
Inference infrastructure provider for hosting and serving AI models.
US, Canada, EU, UK
Google Cloud Platform
Cloud hosting provider
US
Google GeminiAI · Google (Gemini / Vertex AI)
Provider of proprietary AI models via Vertex API. See Gemini model hosting locations [here](https://docs.cloud.google.com/vertex-ai/generative-ai/docs/learn/lo…
Worldwide
Meta
Provider of proprietary AI models via API. See [here](https://cursor.com/docs/models/muse-spark-1-3) for more information.
Worldwide
Nebius
Inference infrastructure provider for hosting and serving first party AI models.
UK
OpenAIAI · OpenAI
Provider of proprietary AI models via API. See the [OpenAI subprocessor list](https://openai.com/policies/sub-processor-list/).
Worldwide
SpaceXAI
Provider of proprietary AI models via API.
US
Together
Our custom models are hosted with Together. We have a zero data retention agreement with Together.
US, Canada, UK
TypeSafe AI
Provider of proprietary AI models via API.
US
Vercel
Web hosting and compute services provider.
US
WorkOS
Enterprise authentication and SSO/SCIM provider. See [WorkOS](https://trust.workos.com/subprocessors).
US
Certifications the trust page names · ISO 27001 · ISO 27001 · ISO 42001 · ISO 42001 · SOC 2 · SOC 2 · SOC 2 Type II · SOC 2 Type II
The pages' own stamps: Last updated 2026-10-11 · Last updated 2026-08-25 · Last updated 2026-09-03 · Last updated 2026-09-03 · Last updated 2026-08-25
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Anysphere does not publish where we can read it
Of the 8 public pages we watch for Anysphere, these give us nothing right now.
Data processing agreement
the page we were watching has gone, and we have not found a replacement
cursor.com/legal/dpaModel or system card
the page at that URL is not that document
cursor.com/docs/modelsBefore you conclude anything
This only means we couldn’t read it on a public page. Anysphere may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Anysphere. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Anysphere? With an email at cursor.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Anysphere in your product? Hear the morning we read a change.
You get the lines that moved, in Anysphere’s own words, and the date any window closes. No card. Nothing to cancel.