cursor.com

99 of 100

Enterprise AI readiness, from public pages only

Scanned 2026-11-01 from 94 public pages. Methodology 1.0. Category: Developer tools.

Identity		20 of 20
Assurance		24 of 25
Data and AI terms		16 of 16
Deployment		4 of 4
Agent readiness		17 of 17

Claim this page Compare

Identity

SAML or OIDC single sign-on (10 points) Found

team-wide privacy mode enforcement, custom Chat data retention, and SAML/OIDC SSO. source

Report a problem with this result

SCIM provisioning (6 points) Found

SCIM user provisioning source
Admins can enforce SSO, disable local login, and provision/deprovision users with SCIM. source

Report a problem with this result

Roles and permissions (4 points) Found

Enterprise admins can set role permissions, whitelist or blocklist repos, models, and MCP servers, and configure global agent run settings. source

Report a problem with this result

Assurance

SOC 2 Type 2 (10 points) Found

SOC 2 Type 2 certified and annual penetration testing. source
Cursor is SOC 2 Type II certified, with regular penetration testing. source

Report a problem with this result

ISO 27001 (4 points) Found

Cursor holds AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications source

Report a problem with this result

Trust center (5 points) Found

Contact: https://github.com/getcursor/cursor/security source

Report a problem with this result

security.txt (2 points) Partly found

Contact: https://github.com/getcursor/cursor/security source

Report a problem with this result

Public status page (2 points) Found

Report a problem with this result

Bug bounty or disclosure program (2 points) Found

Vulnerability disclosures source
Responsible disclosure source

Report a problem with this result

Data and AI terms

No training on customer data (8 points) Found

ANYSPHERE WILL NOT USE CONTENT TO TRAIN, OR ALLOW ANY THIRD PARTY TO TRAIN, ANY AI MODELS, UNLESS YOU'VE EXPLICITLY AGREED TO THE USE OF CONTENT FOR TRAINING. source

Report a problem with this result

Retention periods (5 points) Under review

Report a problem with this result

Subprocessor list (5 points) Under review

Report a problem with this result

Data processing agreement (4 points) Found

All sub-processors have data processing agreements. source
Does Cursor's DPA cover Grok Bot? source
Cursor's Data Processing Agreement governs how Cursor processes personal data under enterprise contracts. source

Report a problem with this result

Data residency (4 points) Found

Opting in to regional data residency incurs a 10% uplift on Model pricing for eligible Models. source
US Data Residency source

Report a problem with this result

Deployment

Private deployment (6 points) Under review

Report a problem with this result

Customer-managed keys (4 points) Found

Encrypt Cloud Agent data with your own key when your compliance program requires customer-managed keys. source

Report a problem with this result

Agent readiness

Public API reference (5 points) Found

API endpoint source

Report a problem with this result

Official MCP server (6 points) Found

MCP - Model Context Protocol server trust management source

Report a problem with this result

Controls on AI agent actions (4 points) Found

You can configure network egress controls for users, teams, and saved environments to restrict the domains the agent can access. source
Enterprise team admins can lock the network access setting using the Lock Network Access Policy option. source
Secrets set with type Runtime Secret are still loaded as environment variables, but their contents are redacted from the agent's tool call results source

Report a problem with this result

Audit log export (2 points) Found

Periodically review them and stream to SIEM, webhooks, or S3 for authentication and admin events. source

Report a problem with this result

AI use policy (2 points) Could not check

robots.txt asked us not to read the pages this check needs.

Report a problem with this result

Rate limits documented (not scored) Found

Custom gateways can introduce additional latency, rate limiting, and compatibility issues. source
Rate limits and errors lists the mint limits for both. source
Rate limits and errors source

Report a problem with this result

Changelog

2026-11-01: First score, 99

Scores older than an hour can be refreshed.