Cursor
Anysphere
Standalone AI coding IDE with rapid enterprise growth and credit-based pricing controversy.
Curated by Tiberiu ArvaVerified
Strengths
- Strong adoption
- Standalone IDE UX
- High-end coding focus
Practitioner note
Strong for fast-moving product teams that optimize for developer speed, though central governance and cost predictability need more scrutiny than incumbent platform copilots.
Warning
Where it sits in the stack
Listed under Assistants & copilots in the Use layer.
Governance posture
Reviewed 2026-09-13No data-residency options documented; no EU residency option found.
SourceStandalone SaaS IDE; Privacy Mode (zero retention); MDM supported; no self-hosted LLM in standard tiers. (saas)
SourceEnterprise audit logs (admin/security/auth) with SIEM streaming (Splunk/Datadog/S3).
SourceSOC 2 Type II available on request via trust.cursor.com.
SourceCursor states that it holds ISO/IEC 27001:2022 certification; the certificate is available through its trust portal.
SourceCursor states that it holds ISO/IEC 42001:2023 certification; the certificate is available through its trust portal.
SourceAssessed limited-risk by product category; no published vendor EU AI Act conformity assessment. (role: limited-risk)
Proprietary SaaS; 2025 credit-pricing change controversy; smaller vendor, no self-hosted escape. (high)
SourceEU AI Act obligations
Risk tier: Limited risk · as of 2026-10-10Source-backed information mapped from Cursor's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.
Providers and deployers must take measures to ensure a sufficient level of AI literacy in staff and other persons operating AI systems on their behalf.
Applies from
Official textPeople must be informed when they interact with an AI system; synthetic audio, image, video, and text content must be marked as artificially generated, and deepfakes disclosed.
Applies from
Official textChange history
Source-backed and auto-detected events for this tool, newest first.
- Feature
Cursor added remote control of local agents from its iOS app. It is on by default except in Enterprise orgs, where admins must enable it.
Cursor changelog - FeatureHigh impact
Cursor launched Projects in beta for long-lived bodies of work, with a coordinator that delegates to parallel cloud and local agents, shared project context, and scheduled or event-driven subscriptions.
Cursor Projects · Cursor changelog - FeatureHigh impact
Cursor now states that it holds ISO/IEC 27001:2022 and ISO/IEC 42001:2023 certifications, alongside its SOC 2 Type II attestation and AIUC-1 certification.
Certifications and third-party assessments · Cursor Security - Auto-detectedHigh impactgovernance.iso27001: unknown → yes
From snapshot diff 2026-08-22 → 2026-09-13.
- Auto-detectedHigh impactgovernance.iso42001: unknown → yes
From snapshot diff 2026-08-22 → 2026-09-13.
Explore the category
Compare this tool against the rest of its category and the cloud platform foundation layer.