Material changes to Cursor’s public trust documents, each linked to its source.
Data as of 2026-10-19 — refreshed on a rolling bake, not live. · cursor.com
Prohibits training on customer data
Reviewed by a Driftline analyst · as of 2026-09-18
13 material changes in the last 12 months · showing the 10 most recent
Summaries are AI-generated and can be wrong. Check the source document linked on each change before relying on it. Vendor? Request a correction.
high · AI subprocessor added · 2026-10-13 · Subprocessor List
Cursor added 1 subprocessor: CoreWeave.
Source documentmedium · AI feature launched · 2026-10-13 · Terms of Service
Cursor added a new section 2.6 ("Meetings") to its Grok Bot Terms, introducing "Meeting Features" that let customers use Grok Bot to listen to, process, capture, transcribe, and take notes from audio/video in meetingscars, along with new customer obligations to obtain participant notices/consents and comply with applicable laws. The diff also adds the privacy policy to the list of incorporated terms and clarifies that an individual customer is also the User.
Source documenthigh · AI subprocessor added · 2026-10-07 · Trust Center
Cursor's trust center announces that CoreWeave was added as a new inference provider ("sub-processor") for Cursor's first-party models, published October 7, 2026. This introduces a new AI subprocessor path for processing customer data during model inference. The diff also reformats the existing subprocessor list (AWS, Fireworks, OpenAI, Anthropic) with no new facts and removes an older announcement about an updated SOC 2 Type 2 report.
Source documentmedium · Terms changed · 2026-10-07 · Privacy Policy
Cursor's privacy policy removed its "No sale or targeted advertising" commitment, which previously stated the company does not "sell" or "share" personal data for cross-contextual behavioral advertising or process personal data for "targeted advertising" purposes under US state privacy laws. The policy also deleted its entire "Jurisdiction-Specific Disclosures" section (with the remaining sections renumbered). This weakens stated privacy protections without introducing a new data flow.
Source documenthigh · AI subprocessor added · 2026-10-06 · Subprocessor List
Cursor added 1 subprocessor: TypeSafe AI.
Source documenthigh · AI subprocessor added · 2026-10-04 · Trust Center
Cursor's trust center added two new AI inference sub-processors: TypeSafe (a sub-processor providing proprietary AI models via API, published October 1, 2026) and Nebius (an inference provider for first-party models, published September 28, 2026). The inference provider region list also dropped "Asia (UAE)", now covering only US, Canada, EU, UK. A Grok Bot penetration test report was also added to the trust center.
Source documenthigh · AI subprocessor added · 2026-09-29 · Subprocessor List
Cursor added 1 subprocessor: Nebius.
Source documenthigh · AI subprocessor added · 2026-09-14 · Subprocessor List
Cursor added 1 subprocessor: Meta.
Source documenthigh · AI subprocessor added · 2026-09-10 · Trust Center
Cursor added Meta as a new inference sub-processor for the Meta Muse series of models that can be used in Cursor, as announced in the Trust Center update published September 10, 2026. This introduces a new AI/ML inference provider that may process customer content.
Source documentmedium · Third-party AI feature changed · 2026-09-07 · Terms of Service
Cursor's Terms of Service now state that if you enable or access Grok Bot, your use of Grok Bot is also subject to the Grok Bot Terms. This reflects that Grok, a third-party AI from xAI, is embedded in Cursor's product, and your use of it is governed by xAI's terms.
Source documentPaste your vendor list and confirm your email, and we build your report and email it to you — the material changes across your vendors in the last 12 months, which of them added AI subprocessors or reserved the right to train on your data, and where your nth-party exposure concentrates. Free.