Run regulated security and privacy work inside Cursor, with every claim traced to a source you can show an auditor.