Cursor · Cursor Security Practices · View original document ↗

Annual subprocessor vendor risk re-review

Medium severity High confidence Explicitdocumentlanguage Common · 300 of 352 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Cursor Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Cursor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Annual re-review means subprocessors are not assessed only at onboarding; their risk profile is checked on a recurring basis.

Consumer impact (what this means for users)

Readers can expect that every company Cursor uses to process data is subject to both an initial evaluation and a yearly reassessment.

How other platforms handle this

Tinder Medium

If you believe we have taken action against your content or account in a way that does not comply with these Terms, you have the right to bring a claim for breach of contract under UK law.

Perplexity AI Medium

These Terms and the licenses granted hereunder may be assigned by the Company but may not be assigned by you without the prior express written consent of the Company.

See all platforms with this clause type →

Monitoring

Cursor has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Each subprocessor is evaluated under our vendor risk management program and re-reviewed annually.

— Excerpt from Cursor's Cursor Security Practices

Provision details

Document information
Document
Cursor Security Practices
Entity
Cursor
Document last updated
May 12, 2026
Tracking information
First tracked
May 12, 2026
Last verified
May 12, 2026
Record ID
CA-P-062752
Document ID
CA-D-00832
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
f81380b0de4994eb495b7cf2f92f334ba864a29a36516ad999427f2b5dc9f239
Analysis generated
May 12, 2026 17:00 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Cursor
Document: Cursor Security Practices
Record ID: CA-P-062752
Captured: 2026-05-12 17:00:33 UTC
SHA-256: f81380b0de4994eb…
URL: https://conductatlas.com/platform/cursor/cursor-security-practices/provision/CA-P-062752/annual-subprocessor-vendor-risk-re-review/
Accessed: July 12, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Get Compliance

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Cursor's Annual subprocessor vendor risk re-review clause do?

Annual re-review means subprocessors are not assessed only at onboarding; their risk profile is checked on a recurring basis.

How does this clause affect you?

Readers can expect that every company Cursor uses to process data is subject to both an initial evaluation and a yearly reassessment.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 300 platforms. See the full comparison.

Is ConductAtlas affiliated with Cursor?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cursor.