Cursor
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | 5 / 5 | |
| Pages still reachable | 8 / 8 | |
| Total | 95 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Cursor's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/cursor"><img src="https://thirdpartyindex.com/badge/cursor.svg" alt="Cursor transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/cursor)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot | ||
| Security advisories | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Cloud Infrastructure Provider; Primary cloud hosting provider for Cursor's infrastructure. Our infrastructure is primarily hosted on AWS US region with some latency critical services in Europe and Singapore. | US, EU, Singapore | |
| Anthropic | Inference Provider; Provider of proprietary AI models via API. See the [Anthropic subprocessor list](https://trust.anthropic.com/subprocessors). | Worldwide | |
| Azure | Cloud Infrastructure Provider; Some secondary infrastructure is hosted on Microsoft Azure. | US | |
| Baseten | Inference Provider; Inference infrastructure provider for hosting and serving AI models. | US, Canada | |
| Cloudflare | CDN, reverse proxy, network security, and Zero Trust tunneling provider. See [Cloudflare](https://www.cloudflare.com/gdpr/subprocessors/cloudflare-services/).; Cloud monitoring | Worldwide | |
| Databricks | Analytics Database and Inference Provider; Data platform provider for storing and processing analytics data, and inference infrastructure provider for hosting and serving AI models. See [Databricks model hosting locations](https://docs.databricks.com/aws/en/resources/designated-services). | Worldwide | |
| Datadog | Application logging and monitoring.; Logging and monitoring | US | |
| Exa | Web Search; Web search API provider for retrieving web content and search results. | US | |
| Fireworks | Inference Provider; Inference infrastructure provider for hosting and serving AI models. | US, Canada, Asia (UAE), EU, UK | |
| Google Cloud Platform | Cloud Infrastructure Provider; Cloud hosting provider | US | |
| Google Gemini | Inference Provider; Provider of proprietary AI models via Vertex API. See Gemini model hosting locations [here](https://docs.cloud.google.com/vertex-ai/generative-ai/docs/learn/locations). | Worldwide | |
| Meta | Inference Provider; Provider of proprietary AI models via API. See [here](https://cursor.com/docs/models/muse-spark-1-3) for more information. | Worldwide | |
| OpenAI | Inference Provider; Provider of proprietary AI models via API. See the [OpenAI subprocessor list](https://openai.com/policies/sub-processor-list/). | Worldwide | |
| SpaceXAI | Inference Provider; Provider of proprietary AI models via API. | US | |
| Together | Inference Provider; Our custom models are hosted with Together. We have a zero data retention agreement with Together. | US, Canada, UK | |
| Vercel | Web Hosting; Web hosting and compute services provider. | US | |
| WorkOS | Enterprise authentication and SSO/SCIM provider. See [WorkOS](https://trust.workos.com/subprocessors).; SSO/SCIM provider | US |
Listed as a subprocessor by (2)
Purposes as each company states them.
Ahrefs ahrefs.com AI Coding Platform
Serverless Framework serverless.com Developer tooling used by engineering teams to support software development workflows.; Engineering
Service status
10 incidents in the last 9 days (2 major or critical, 8 minor, 0 with no stated impact) · typically resolved in 45 min · longest major: 5 h 43 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Investigating service degradation — Grok Bot | minor | 45 min evidence | |
| Investigating service degradation — Grok Bot | minor | 1 h 34 min evidence | |
| Investigating service degradation - Grok 4.7 | minor | 8 min evidence | |
| Investigating — Cloud Agent Dockerfile Builds | minor | 1 h 29 min evidence | |
| Investigating service degradation — Automations and Cloud Agents w/ Grok 4.7 | minor | 43 min evidence | |
| Investigating service degradation | minor | 35 min evidence | |
| Investigating service degradation | minor | 21 min evidence | |
| Sign-in and dashboard errors for some users | minor | 11 min evidence |
As Cursor's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.