# File ignore lists and auditable security **URL:** \ **Category:** Help\ **Created:** [January 23, 2024, 12:07pm UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507 "2024-01-23T12:07:58Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![profexponent](https://avatars.discourse-cdn.com/v4/letter/p/6f9a4e/32.png) [@profexponent](https://forum.cursor.com/u/profexponent)\ **Post date:** [January 23, 2024, 12:07pm UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507/1 "2024-01-23T12:07:58Z")
Hello, I am evaluating cursor as the value prop seems very compelling and I am interested in an IDE that has deeper AI integrations than most of the copilot extensions that I have tried. Key features that are required for my team and I before this is considered more than a POC is file ignore list and auditable code to ensure that secrets are not being scraped from the codebase and being included in the embeddings. If this is already in place I would love to see the implementation code, ideally this would integrate with the existing vscode exclusion patterns and .gitignore. IMO this is a must have feature if it is not in place already. ---
**Author:** ![Jakob](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/jakob/32/93_2.png) [@Jakob](https://forum.cursor.com/u/Jakob)\ **Post date:** [January 25, 2024, 8:21pm UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507/2 "2024-01-25T20:21:49Z")
To ignore files from the codebase indexing you can add them to a .cursorignore or the .gitignore file. ![image](https://us1.discourse-cdn.com/cursor1/original/2X/8/8d7fc9c650d67a277432d9fe29e7fef5e05cb44b.png) ---
**Author:** ![profexponent](https://avatars.discourse-cdn.com/v4/letter/p/6f9a4e/32.png) [@profexponent](https://forum.cursor.com/u/profexponent)\ **Post date:** [January 25, 2024, 9:11pm UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507/3 "2024-01-25T21:11:53Z")
Thanks @Jakob Is there any way I can verify this behavior? Seems like the GH repo is just for issue management > **[GitHub - getcursor/cursor: An AI-powered code editor based on VSCode 🤖](https://github.com/getcursor/cursor)** > > An AI-powered code editor based on VSCode 🤖. Contribute to getcursor/cursor development by creating an account on GitHub. I am under the impression that embeddings created from the indexed files will be persisted on a remote centrally managed db, is that the case or is there a way to only store embeddings locally or preferably provide an alternative gpt to create embeddings in the first place? ---
**Author:** ![Jakob](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/jakob/32/93_2.png) [@Jakob](https://forum.cursor.com/u/Jakob)\ **Post date:** [February 5, 2024, 3:17pm UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507/4 "2024-02-05T15:17:42Z")
> [@profexponent](#): > > Is there any way I can verify this behavior? To verify the behavior you can add a file to the ignore list and try to talk about the file in Chat while using the `@Codebase` [@-Symbol](https://docs.cursor.sh/features/@-symbol-references#f-codebase). The file shouldn’t appear in the references/context. > [@profexponent](#): > > I am under the impression that embeddings created from the indexed files will be persisted on a remote centrally managed db, is that the case or is there a way to only store embeddings locally or preferably provide an alternative gpt to create embeddings in the first place? Yes, the embeddings are stored on Cursor’s managed database, and there’s currently no way to store embeddings locally or use a different model for them. ---
**Author:** ![profexponent](https://avatars.discourse-cdn.com/v4/letter/p/6f9a4e/32.png) [@profexponent](https://forum.cursor.com/u/profexponent)\ **Post date:** [February 9, 2024, 9:04am UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507/5 "2024-02-09T09:04:58Z")
Thanks for following up, we are still evaluating. Love the IDE overall, will stay tuned to see how you guys evolve over time. ---
**Author:** ![jeiea](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/jeiea/32/4268_2.png) [@jeiea](https://forum.cursor.com/u/jeiea)\ **Post date:** [September 8, 2024, 7:06am UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507/6 "2024-09-08T07:06:01Z")
> [@Jakob](#): > > To verify the behavior you can add a file to the ignore list and try to talk about the file in Chat while using the `@Codebase` [@-Symbol](https://docs.cursor.sh/features/@-symbol-references#f-codebase). The file shouldn’t appear in the references/context. I can still reference them in the chat, even though I added them to `.gitignore` and `.cursorignore`, and resync index. I’ve confirmed this for sure in the devcontainer environment, and I believe it was the same on my Mac as well. What could be the issue? ---
**Author:** ![system](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/system/32/99069_2.png) [@system](https://forum.cursor.com/u/system)\ **Post date:** [June 18, 2026, 10:15am UTC](https://forum.cursor.com/t/file-ignore-lists-and-auditable-security/2507/7 "2026-06-18T10:15:30Z")
Closed on June 18, 2026, 10:15am UTC