Tracker / Coding assistant

Does Cursor train on your code? Cursor admin guide

With Privacy Mode on, Cursor does not train on your data and has zero-retention agreements with its model providers. With it off, code and prompts can be used for training. Individuals choose for themselves. Teams and Enterprise can enforce Privacy Mode org-wide. Enterprise adds SCIM, audit logs, MDM allowed-team policies and a tenancy-restriction header.

Vendor: Anysphere · Last checked Oct 22, 2026 · 3 plans tracked

Plan by plan

Hobby / Pro (individual) consumer

Trains on your data?
User's choice Privacy Mode is the user's choice. With it off, Cursor may use codebase data, prompts and editor actions to train its models. source ↗ checked Oct 22, 2026
Retention
Zero retention at model providers with Privacy Mode on Abuse-flagged prompts may be kept for investigation. source ↗ checked Oct 22, 2026
SSO
No Plan comparison: SAML/OIDC SSO is only ticked for Teams and Enterprise. source ↗ checked Oct 22, 2026
SCIM
No Plan comparison: SCIM seat management is Enterprise-only. source ↗ checked Oct 22, 2026
Audit logs
No Plan comparison: audit logs are Enterprise-only. source ↗ checked Oct 22, 2026
Data residency
Unknown Not verified from a vendor-owned source yet.
DPA
Unknown Not verified from a vendor-owned source yet.

Teams business

Trains on your data?
no (when enforced) Admins can enforce Privacy Mode org-wide. New members inherit the team setting. source ↗ checked Oct 22, 2026
Retention
Admin-set custom chat retention; zero retention at model providers in Privacy Mode Plan comparison lists “Custom Chat data retention” for Teams; Privacy Mode keeps code from being stored by model providers. source ↗ checked Oct 22, 2026
SSO
Yes SAML 2.0 SSO at no extra cost on Teams and Enterprise. source ↗ checked Oct 22, 2026
SCIM
No The plan comparison shows SCIM only on Enterprise. source ↗ checked Oct 22, 2026
Audit logs
No Audit logs are Enterprise-only. source ↗ checked Oct 22, 2026
Data residency
Unknown Not verified from a vendor-owned source yet.
DPA
Unknown Not verified from a vendor-owned source yet.

Enterprise enterprise

Trains on your data?
no (when enforced) source ↗ checked Oct 22, 2026
Retention
Admin-set custom chat retention; zero retention at model providers in Privacy Mode Plan comparison lists “Custom Chat data retention” for Enterprise; Privacy Mode keeps code from being stored by model providers. source ↗ checked Oct 22, 2026
SSO
Yes source ↗ checked Oct 22, 2026
SCIM
Yes Requires SSO. source ↗ checked Oct 22, 2026
Audit logs
Yes Covers authentication, user management and admin actions, with SIEM streaming. source ↗ checked Oct 22, 2026
Data residency
US-only program (inference, processing, storage); EU+UK inference-only Customers enrolled in the data residency program can keep inference, processing and storage in the US; EU + UK coverage is inference-only. source ↗ checked Oct 22, 2026
DPA
Yes The Cursor DPA governs processing under the Master Services Agreement. source ↗ checked Oct 22, 2026

HIPAA BAA available for Enterprise.

How to block or allow Cursor

  1. network

    Restrict to your org/teams (header)

    Have your proxy add x-cursor-allowed-tenants: v1.orgs=<ids>;teams=<ids> on requests to api2.cursor.sh and cursor.com. A blank or malformed value is refused.

    source ↗ checked Oct 22, 2026

  2. mdm

    MDM: allowed team IDs and extensions

    MDM policies can enforce allowed team IDs and extensions on managed devices (Enterprise).

    source ↗ checked Oct 22, 2026

Domains

“Primary domain only” means we haven't found a full endpoint list from the vendor, so blocking just this domain may not catch every API or desktop-app endpoint.

Change history

Sources