Lexis+ AI procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “The data protection representative for our businesses that are processing personal data within the scope of United Kingdom (UK) data protection laws and established outside of the UK is RELX (UK) Limited, trading as LexisNexis, Lexis House, 30 Farringdon Street, London EC4A 4HH, United Kingdom.” | Captured 2026-06-09Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “10.1 The ability of LN to provide Materials is regulated by a variety of privacy, data protection, and other laws in a variety of jurisdictions (“Data Laws”) and by the licenses under which it obtains Materials (“Licenses”). You acknowledge that LN will perform a due diligence review of your account upon registration and that the due diligence review will be heightened if you desire to access sensitive, non-public Materials about individuals. You also acknowledge that LN will perform periodic reviews of you and your Authorized Users' use of Materials subject to Data Laws or Licenses (“Regulated Data”) to comply with Data Laws and license restrictions, and that the review may include asking you or your Authorized Users to verify that use of Regulated Data was for a permissible purpose. You and your Authorized Users will cooperate with LN in any such due diligence or regulatory review and will promptly produce all relevant records and documentation and other assistance reasonably requested by LN to enable LN to fulfill its obligations under Data Laws and Licenses. All reviews will be at the expense of LN. If there is any failure to cooperate with LN, or if any review reveals the lack of a permissible purpose to access Regulated Data, LN may deny access to the Online Services or to Regulated Data. LN will be under no obligation to reduce the fees payable by you to the extent that it is unable to provide Regulated Data to you based solely on your non-cooperation.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “Your personal information may be stored and processed in your region or another country where LexisNexis, its affiliates and their service providers maintain servers and facilities, including Australia, Canada, France, Germany, Hong Kong, India, Ireland, Ivory Coast, the Netherlands, the Philippines, Singapore, South Africa, Sweden, the United Kingdom and the United States. We take steps, including through contracts, intended to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.” | Captured 2026-06-09Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “10.3 You are responsible for the legality of the personal data that you or your Authorized Users provide to us. To the extent that you or your Authorized Users provide personal data to us for account registration or otherwise, the parties acknowledge and agree that we will process such information in accordance with the data protection laws, the LexisNexis Privacy Policy at [https://www.lexisnexis.com/global/privacy/privacy-policy.page](https://www.lexisnexis.com/global/privacy/privacy-policy.page) and the LexisNexis Data Processing Addendum at [https://www.lexisnexis.com/global/privacy/processing-terms.page](https://www.lexisnexis.com/global/privacy/processing-terms.page). Terms used but not defined in this section shall have the meanings ascribed to them in the DPA.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “You also acknowledge that LN will perform periodic reviews of you and your Authorized Users' use of Materials subject to Data Laws or Licenses (“Regulated Data”) to comply with Data Laws and license restrictions, and that the review may include asking you or your Authorized Users to verify that use of Regulated Data was for a permissible purpose. You and your Authorized Users will cooperate with LN in any such due diligence or regulatory review and will promptly produce all relevant records and documentation and other assistance reasonably requested by LN to enable LN to fulfill its obligations under Data Laws and Licenses.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “4.6 If LN's third-party cloud services fail or significantly degrade resulting in a material impact to the AI Services, and an alternative is available under the specific circumstances, you authorize LN to failover from the primary AI Services hosting location to a secondary location provided by LN's existing AI cloud providers, which may not be in the same country. You can opt out of such failover process at any time during the term of your Agreement by giving 30 days' written notice to LN.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “1.5 Health Data. To the extent that LN acts as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the LN Services will operate in compliance with HIPAA and its implementing regulations. Notwithstanding the foregoing, you are solely responsible for ensuring that any data, content, or information that you upload, transmit, or otherwise make available through the LN Services will comply with all applicable laws, including HIPAA. You acknowledge that LN does not monitor, review, or verify such content for compliance purposes. The LN Business Associate Addendum is found here [https://www.lexisnexis.com/en-us/terms/business-associate-addendum.page](https://www.lexisnexis.com/en-us/terms/business-associate-addendum.page) and is incorporated by reference herein.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “2.4 To comply with local privacy, data protection and other laws, each LN ID is country specific and may not be used outside the country for which it is issued, except for short periods not to exceed 30 continuous days. If LN suspects use of an LN ID outside the country of issue for a period in excess of 30 continuous days, LN may suspend the LN ID or require you to use and pay for an LN ID for the relevant country. On request, LN will issue a geographically compliant LN ID, subject to any applicable additional costs.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “LexisNexis, a division of RELX Inc., has certified to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce. Please view its[Data Privacy Framework Notice](https://www.relx.com/~/media/Files/R/RELX-Group/documents/legal/DPF-notice.pdf). To view its certification and learn more about the Data Privacy Framework program, please visit the [Data Privacy Framework website](https://www.dataprivacyframework.gov/).” | Captured 2026-06-09Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “The data protection representative for our businesses that are processing personal data within the scope of European Union data protection laws and established outside of the European Economic Area (EEA) and Switzerland is LexisNexis Business Information Solutions B.V., Radarweg 29, Amsterdam 1043 NX, The Netherlands.” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “(d)store Materials to the extent required for legal or regulatory compliance.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “The Service may allow registered users to directly access and review their account information and make corrections or updates upon login at any time. Keeping such information up to date is the responsibility of the user. Registered users may also close their account directly through the Service or by contacting the Service’s customer support.” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “4.10 Prompt Retention. Certain features of the Online Services, including those utilizing AI technology, permit an Authorized User to enter or create a prompt (a “Prompt”), including Prompts requesting the summarization or analysis of text entered into the Prompt by the Authorized User. You represent and warrant that your Prompts (or any portions thereof) do not violate applicable law or infringe the rights of any third party. The retention of Prompt history and its deletion is within the control of the Authorized User.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “We retain your personal information for as long as necessary to provide the Service and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements. If you access the Service through a subscription administered or sponsored by your organization, we retain your organizational contact details after the termination of your organization’s subscription to continue to communicate with you.” | Captured 2026-06-09Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “(ii)store copyrighted Materials for more than ninety days;” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “4.9 “Subscriber Files” means files (including voice recordings for transcription) that you or your Authorized Users upload to the Online Services (inclusive of any of Subscriber’s client’s information). You represent and warrant that Subscriber Files do not violate applicable law or infringe the rights of any third party. Uploading Subscriber Files to the Online Services shall not give rise to any claim of ownership in the Subscriber Files by LN. Unless otherwise stated herein, Subscriber Files will be processed in a non-persistent state, secured in transit, and are purged automatically at the end of a user session or a period of inactivity, whichever occurs first. Subscriber Files do not include Prompts (in Section 4.10).” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “(b)upload Subscriber Files into certain AI Services (as defined in 4.3) where such Subscriber Files are hosted and/or stored by LN. Subscriber will have secured all necessary rights from its clients or data-sources to utilize their information in Subscriber Files. LN disclaims any warranty or liability, of any kind, for the accuracy of data in reports generated using Subscriber Files and disclaims responsibility for any results obtained through Subscriber-designed and - generated reports using the AI Services. Upon termination or expiration of this Agreement, LN will provide Subscriber with an opportunity to export or retrieve Subscriber Files stored in the Online Services. After a reasonable period of not less than 60 days from the effective date of termination, LN reserves the right to permanently delete all Subscriber Files stored in the Online Services unless otherwise required by law to retain such data. Upon request by Subscriber made before or within sixty (60) days after the effective date of termination, LN will make available to Subscriber, in a mutually agreed upon format and medium, a file of Subscriber Files.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- meet any applicable law, regulation, legal process or other legal obligation;” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- as part of a corporate transaction, such as a transfer of assets to or an acquisition by or merger with another company.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “- where necessary for our compliance with applicable law or other legal obligation;” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “If you access a third-party application on the Service through a license agreement with the licensor of that application, personal information relevant that third-party application may be shared with the licensor so that it can provide you access to the application, subject to the terms of its license agreement and privacy policy.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Publicly available sources and data suppliers from which we obtain data to validate or supplement the information we hold.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We also may obtain contact details and other information about you from our affiliates and from other third parties, including:” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Businesses with which we offer co-branded services or engage in joint marketing activities; and/or” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “- where necessary to enable our customers to comply with their legal obligations;” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Our affiliates, trading names and divisions within [LexisNexis Legal & Professional](https://www.lexisnexis.com/pdf/contact-us/LNLP-legal-entities-list.pdf) worldwide and certain RELX companies that provide technology, customer service and other shared services functions; and/or” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “**4.3 Our Companies and Service Providers**” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Service providers that help us determine a location in order to customize certain products to your location;” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We also will disclose your personal information if we have a good faith belief that such disclosure is necessary to:” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Our service providers, suppliers, agents and representatives, including but not limited to, payment processors, customer support, email service providers, event venues and service providers, IT service providers, marketing service providers, research providers, mailing houses and shipping agents;” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- protect the rights, property or safety of LexisNexis, our users, employees or others; and” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “Dependent upon the Services provided, we share information with:” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “to process the information as necessary to provide the Service, complete a transaction or fulfill your request or otherwise on our behalf based on our instructions and in compliance with this privacy policy and any other appropriate confidentiality and security measures.” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Social networks when you grant permission to the Service to access your data on one or more networks;” | Captured 2026-06-09Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “**4.5 For Legal Reasons**” | Captured 2026-06-09Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.