Cursor

Anysphere

Commercial

Standalone AI coding IDE with rapid enterprise growth and credit-based pricing controversy.

Curated by Tiberiu ArvaVerified

Proprietary

Strengths

  • Strong adoption
  • Standalone IDE UX
  • High-end coding focus

Practitioner note

Strong for fast-moving product teams that optimize for developer speed, though central governance and cost predictability need more scrutiny than incumbent platform copilots.

Warning

Cursor: Switched to credit-based pricing in June 2025, causing backlash.

Where it sits in the stack

Listed under Assistants & copilots in the Use layer.

  1. Build & orchestrate
  2. Control plane
  3. Use

Governance posture

Reviewed 2026-09-13
NoData residency

No data-residency options documented; no EU residency option found.

Source
YesDeployment model

Standalone SaaS IDE; Privacy Mode (zero retention); MDM supported; no self-hosted LLM in standard tiers. (saas)

Source
YesAudit logging

Enterprise audit logs (admin/security/auth) with SIEM streaming (Splunk/Datadog/S3).

Source
YesSOC 2

SOC 2 Type II available on request via trust.cursor.com.

Source
YesISO 27001

Cursor states that it holds ISO/IEC 27001:2022 certification; the certificate is available through its trust portal.

Source
YesISO 42001

Cursor states that it holds ISO/IEC 42001:2023 certification; the certificate is available through its trust portal.

Source
UnknownEU AI Act

Assessed limited-risk by product category; no published vendor EU AI Act conformity assessment. (role: limited-risk)

YesLicense risk

Proprietary SaaS; 2025 credit-pricing change controversy; smaller vendor, no self-hosted escape. (high)

Source

EU AI Act obligations

Risk tier: Limited risk · as of 2026-10-10

Source-backed information mapped from Cursor's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

Article 4AI literacy

Providers and deployers must take measures to ensure a sufficient level of AI literacy in staff and other persons operating AI systems on their behalf.

Applies from

Official text
Article 50Transparency for certain AI systems

People must be informed when they interact with an AI system; synthetic audio, image, video, and text content must be marked as artificially generated, and deepfakes disclosed.

Applies from

Official text

Change history

Source-backed and auto-detected events for this tool, newest first.

  1. Feature

    Cursor added remote control of local agents from its iOS app. It is on by default except in Enterprise orgs, where admins must enable it.

    Cursor changelog
  2. FeatureHigh impact

    Cursor launched Projects in beta for long-lived bodies of work, with a coordinator that delegates to parallel cloud and local agents, shared project context, and scheduled or event-driven subscriptions.

    Cursor Projects · Cursor changelog
  3. FeatureHigh impact

    Cursor now states that it holds ISO/IEC 27001:2022 and ISO/IEC 42001:2023 certifications, alongside its SOC 2 Type II attestation and AIUC-1 certification.

    Certifications and third-party assessments · Cursor Security
  4. Auto-detectedHigh impact
    governance.iso27001: unknown → yes

    From snapshot diff 2026-08-22 → 2026-09-13.

  5. Auto-detectedHigh impact
    governance.iso42001: unknown → yes

    From snapshot diff 2026-08-22 → 2026-09-13.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.