Data egress and trust boundaries

Cursor's self-hosted agent workers still send file contents and diffs back to its cloud

Cursor now runs coding-agent tool calls on machines you own, but its documentation is explicit that the loop, the inference and the content the agent reads stay on Cursor's side, so what you get is reachability into your infrastructure while the data boundary stays with Cursor.