Snapshot 103113
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Global Subprocessor List Updated Trust Center Overview LexisNexis® Legal & Professional is a data and analytics company serving customers in more than 150 countries. Our mission is to bring the percentage of people living outside the umbrella protection of the rule of law down to zero through our day-to-day business operations, products and services, and actions as a corporate citizen. We deliver powerful, new decision tools and analytics to customers by applying machine learning, natural language processing, visualization, and artificial intelligence to our global legal and news database. We do not train or fine-tune our AI models using Customer Data. Information Security Commitment The LexisNexis® Information Security team continually enhances our data protection practices to uphold the availability, confidentiality, and integrity of the data and systems under our care. Our vision is to safeguard customer data with unwavering commitment—treating it as our own and maintaining the gold standard of security controls. Our Security Measures Include: Defense in Depth Controls: We deploy multiple layers of network security capabilities. Data Encryption: Data is encrypted both in transit and at rest. Logging & Detection Systems: We utilize detailed logging and advanced detection systems. These controls and safeguards are implemented while consistently delivering best-in-class solutions and services to our customers. Commitment to Evolving Security Practices In light of the dynamic nature of the information security space—and to reflect the evolving nature of relevant procedures, regulations, and threats—LexisNexis updates this site regularly. Compliance IRAP SOC 2 Type 2 SOC 2 Type 1 SOC 3 ISO 14001:2015 CCPA GDPR HIPAA ISO/IEC 27001 ISO/IEC 27001 SoA ISO 9001:2015 NIST CSF VPAT ISO 22301:2019 WCAG Cyber Essentials EU AI Act SOC 1 Type 2 ISAE 3402 ISO 14001 AI AI Training Data and Bias AI Security AI Monitoring View more Product Security Diagrams Audit Logging Data Security View more App Security Responsible Disclosure Application Penetration Testing Code Analysis View more Risk Management Data Access/Impact Levels Risk Assessments Supply Chain Risk Management View more Access Control Access Log Management Data Access Device Lock View more Data Security Access Monitoring Data Asset Classification Data Erasure View more Corporate Security Asset Management Practices Email Protection Employee Training View more Endpoint Security Anti-Malware Disk Encryption DNS Filtering View more Infrastructure Amazon Web Services Anti-DDoS BC/DR View more Network Security Data Loss Prevention Firewall IDS/IPS View more Incident Response Data Breach Notifications Designated Response Personnel Business Continuity/ Disaster Recovery Business Continuity Management System (BCMS) Business Continuity Plan (BCP) Data Backup/Backup Protection View more Self-Assessments CAIQ HECVAT Full SIG View more Data Privacy Data Privacy Officer Data Protection Impact Assessment (DPIA) Employee Privacy Training View more Policies Acceptable Use Policy Access Control Policy AI System Development and Evaluation Policy View more Change Management Change Management Program Configuration Management Program Least Functionality View more Reports Network Diagram Pentest Report SOC 1 Report View more Legal Cyber Insurance Privacy Policy Training Employee Privacy Training Secure Development Training Security Awareness Training ESG Anti-Bribery and Corruption Anti-Competitive Practices Anti-Modern Slavery View more Documents DOCUMENTSSecurity Controls Overview DOCUMENTSTrust Center Information REPORTSPentest Report COMPLIANCECyber Essentials COMPLIANCEHIPAA COMPLIANCEISAE 3402 COMPLIANCEISO 14001 COMPLIANCEISO 14001:2015 COMPLIANCEISO 22301:2019 COMPLIANCEISO/IEC 27001 COMPLIANCEISO/IEC 27001 SoA COMPLIANCESOC 1 Type 2 Knowledge Base (FAQ) What is the privacy team email address for customers to use? Can LexisNexis provide confirmation that none of Lexis' LLM providers has human reviewers (for functions other than abuse monitoring) who would be able to read our prompts, or the LLMs' responses (“completions”), whether in real time or at some future time? Does LexisNexis use customer data to train their LLM models? View more Trust Center Updates 2026 Lexis, Lexis+ AI, Lexis+ with Protege, CaseMap+ Publish SOC2 Type 2, SOC3 and HIPAA/HITECH Reports Compliance We are pleased to announce the publication of our latest compliance and attestation reports. These updates reflect our ongoing commitment to maintaining the highest standards for security, availability, and confidentiality. Newly Published Reports Our trusted solutions, including Lexis, Lexis+ AI, Lexis+ with Protege and CaseMap+, continue to meet industry and regulatory standards. SOC2 Type 2 Report This report, which focuses on security, availability, and confidentiality service controls, is now available for secure download. Access the report here. SOC3 Type 2 Report Verify our compliance with industry standards by reviewing the report. Read the report here. HIPAA/HITECH Attestation Report Our adherence to HIPAA and HITECH requirements is available for secure download. Access the attestation here. Commitment We remain dedicated to transparency and compliance as part of our commitment to providing secure, reliable, and compliant solutions for our valued customers. LexisNexis Security Matter Incidents LexisNexis Legal & Professional has investigated a security matter and based on the investigation and testing we have done to date, we believe the matter is contained. We have no evidence of compromise of or impact to our products and services. We engaged a preeminent cybersecurity forensic firm to assist in our investigation and response and have reported this issue to law enforcement. Our investigation has confirmed that an unauthorized party accessed a limited number of servers. These servers contained mostly legacy, deprecated data from prior to 2020, including information such as customer names, user IDs, business contact information, products used, customer surveys with respondent IP addresses, and support tickets. The impacted information did not contain Social Security numbers, driver’s license numbers, or any other sensitive personally identifiable information; credit card, bank accounts, or any other financial information; active passwords; customer client or matter information, or customer contracts. We take our responsibility to safeguard customer information extremely seriously and have informed impacted current and previous customers of this matter. We are continuing to investigate and have implemented containment and remediation steps, in coordination with our expert cybersecurity forensic firm. LexisNexis releases new SOC 1 Type 2 Report Compliance LexisNexis is pleased to announce the successful update of its SOC 1 Type 2 report for Digital Content Management and Information Technology Services. This update reflects our continued commitment to maintaining strong controls, ensuring reliability, and upholding the highest standards of security, compliance, and operational integrity. To review the detailed SOC 1 Type 2 report and gain further insight into our control environment and practices, we invite you to register through our Trust Center, where authorized users can securely access this information. Global Subprocessor List Updated Subprocessors The LexisNexis Legal & Professional Subprocessors page has been updated. Please click here for further information. The LexisNexis Legal & Professional Subprocessors page has been updated. Please click here for further information. LexisNexis updates its BCM/DR program statements Compliance LexisNexis is pleased to confirm the annual review and update of its Business Continuity Management (BCM) and Disaster Recovery (DR) program statements. This annual update demonstrates our ongoing commitment to operational resilience and our ability to maintain service continuity in the event of a disruption. Our BCM and DR programs are designed to support the availability, integrity, and recovery of critical systems and services.