CafeX Communications vs CURSOR

Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.

	CafeX Communications cafex.com	CURSOR cursor.com
Verification	Listed	Listed
SOC 2 type	SOC 2 Type II	SOC 2 Type II
Auditor	—	—
Last report	—	—
Renewal	Unknown	Unknown
Region	United States	United States
Size	1–50 employees	—
Certifications	ISO 27001ISO 42001SOC 2 Type II	SOC 2 Type II
Documents	ISO/IEC 27001:2022 CertificatePublic Auditing and monitoringOn request Data Masking & Protection MeasuresOn request Penetration test - Statement of Attestation 2025On request Development Secure configuration baselinesOn request	Security & Compliance Program Update - Cursor.pdfOn request SOC 2 Bridge LetterOn request Cursor W9On request Latest Penetration Testing ReportOn request Cursor_CAIQ_Security_Self_Service_Guide.pdfOn request All Security Policies Combined.pdfOn request Anysphere - Evidence of Insurance.pdfOn request Cursor_HIPAA_Implementation_Guide.pdfOn request BCDR_Test_Summary.pdfOn request Cursor - ISO 42001 and ISO 27001 Confirmation of Engagement Letter.pdfOn request Cursor Review - Previously known as Graphite - SOC2 Type 2 Report.pdfOn request
Hosting	AWS	AWS, GCP, Azure
Subprocessors	6 listed	17 listed
Key controls	Not provided	Not provided