Cursor expanded its security certifications section in an update detected on August 27, 2026. Previously, the policy listed only SOC 2 Type II attestation availability. The updated language now states that Cursor holds AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications in addition to SOC 2 Type II attestation, with all certificates and reports available on request at trust.cursor.com.
The updated terms disclose additional security certifications that Cursor holds. The policy now states that Cursor holds AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications along with SOC 2 Type II attestation. Certificates and reports remain available on request at trust.cursor.com, consistent with the prior availability of attestation reports.
Expanded from SOC 2 Type II attestation alone to include AIUC-1, ISO/IEC 27001:2022, and ISO/IEC 42001:2023 certifications, with all certificates available on request.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Cursor expanded its security certifications disclosure by adding three industry-recognized certifications to its existing SOC 2 Type II attestation. The change is informational and reflects standard security practice documentation. ISO/IEC 27001:2022 addresses information security management; …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-004647.
Cursor replaced its arbitration-based dispute resolution system with a litigation-based one governed by Texas law and filed exclusively in Texas …
Cursor added a new documentation reference titled 'Security and Privacy Hardening' to its list of security best practices in the …
Cursor's privacy policy was updated in an update detected on July 16, 2026, with changes to how it describes data …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.