Open navigation menu

Cursor

Anysphere

Commercial

Standalone AI coding IDE with rapid enterprise growth and credit-based pricing controversy.

Curated by Tiberiu ArvaStale

Proprietary

Strengths

  • Strong adoption
  • Standalone IDE UX
  • High-end coding focus

Practitioner note

Strong for fast-moving product teams that optimize for developer speed, though central governance and cost predictability need more scrutiny than incumbent platform copilots.

Warning

Cursor: Switched to credit-based pricing in June 2025, causing backlash.

Governance posture

Reviewed 2026-05-26
NoData residency

No data-residency options documented; no EU residency option found.

Source
YesDeployment model

Standalone SaaS IDE; Privacy Mode (zero retention); MDM supported; no self-hosted LLM in standard tiers. (saas)

Source
YesAudit logging

Enterprise audit logs (admin/security/auth) with SIEM streaming (Splunk/Datadog/S3).

Source
YesSOC 2

SOC 2 Type II available on request via trust.cursor.com.

Source
UnknownISO 27001

Listed by some secondary sources; no primary Anysphere certificate confirmed.

UnknownISO 42001

No ISO 42001 certification found for Cursor/Anysphere.

UnknownEU AI Act

Assessed limited-risk by product category; no published vendor EU AI Act conformity assessment. (role: limited-risk)

YesLicense risk

Proprietary SaaS; 2025 credit-pricing change controversy; smaller vendor, no self-hosted escape. (high)

Source

EU AI Act obligations

Risk tier: Limited risk · as of 2026-08-23

Source-backed information mapped from Cursor's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

Article 4AI literacy

Providers and deployers must take measures to ensure a sufficient level of AI literacy in staff and other persons operating AI systems on their behalf.

Applies from

Official text
Article 50Transparency for certain AI systems

People must be informed when they interact with an AI system; synthetic audio, image, video, and text content must be marked as artificially generated, and deepfakes disclosed.

Applies from

Official text

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.