Data

Cursor and the GDPR: AI training, data location and DPA

Teams: Trains on your data in part. EU hosting not documented · DPA in the terms.

Vendor: Anysphere (Cursor)Code and app buildersChecked on How we check

Verdict

Is Cursor GDPR compliant?

Teams

Business

Trains on your data in part

EU hosting not documented · DPA in the terms

Price: From $30 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Cursor train on your data?

Trains on your data by default?

Checked

Trains on your data in part.

Depends on Privacy Mode: with it off, Cursor may store and use code, prompts and editor actions to train its models; with it on, nothing is trained. A team admin can turn it on for everyone; whether new Teams start with it on is not stated

Source: cursor.comData Use & Privacy Overview (updated 3 Sep 2026)Second source: cursor.comChecked on

Switch-off

How do you turn off AI training in Cursor?

How to switch training off

Checked

You can switch the training off.

Turn on Privacy Mode in settings, or have a team admin enable it for the whole team; new members inherit the team setting

Source: cursor.comSection 'Privacy Mode'Second source: cursor.comChecked on

Location

Where does Cursor store your data?

Where data is stored by default

Checked

United States: infrastructure is mainly on AWS in the US, with some latency-critical services in Europe and Singapore

Source: trust.cursor.comSubprocessor note for Amazon Web ServicesSecond source: cursor.comChecked on

Contract

Does Cursor sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes. A Cursor DPA is offered in the Trust Center documents

Source: trust.cursor.comDocuments list ('Cursor DPA')Checked on

Processors

Who else handles Cursor data?

Sub-processors (companies that handle the data for them)

Checked

20 listed.

Public. 20 entries; inference by OpenAI, Anthropic, Google Gemini, Fireworks, Databricks, Baseten, Together, SpaceXAI (xAI), Meta, Nebius, TypeSafe AI and CoreWeave; hosting on AWS, Azure and Google Cloud

Source: trust.cursor.comSubprocessors list ('20 results')Checked on

EU–US Data Privacy Framework

Checked

Not listed.

No listing found for search term 'Anysphere'

Source: dataprivacyframework.govSearch 'Anysphere' returned 'Query returned no results'Checked on

Retention

How long does Cursor keep your data?

How long data is kept

Checked

With Privacy Mode on, file contents are cached only during a request and model providers keep nothing (zero data retention); otherwise Cursor keeps data as long as needed for the service; prompts flagged by abuse detectors may be stored for investigation

Source: cursor.comData Use & Privacy OverviewSecond source: cursor.comChecked on

Security

Which certifications and admin controls does Cursor have?

Admin controls for AI

Checked

Yes. Teams has team-wide privacy settings, centralised billing and administration, and SAML/OIDC SSO

Source: cursor.comComparison rows 'Team-wide privacy settings', 'Centralized billing and administration', 'SAML/OIDC SSO'Checked on

The vendor doesn't say: EU hosting, price.

Alternatives

Cursor alternatives that don't train on your data

Other code and app builders tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Amazon Q Developer

    Pro tier · $19 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓?✓

  • GitHub Copilot

    Business · $19 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✓

  • JetBrains AI Pro

    organisation licence · See details

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✓

  • Webflow Premium

    site plan · $25 / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

  • v0

    Business · $100 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓?✓

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices