Product and intended use
Define the configuration, people, information and tasks being assessed.
What Lexis+ is, and what sits outside it
Public claim only
GTC 3.7 states that to access Lexis+ the customer 'must maintain, at a minimum, a current subscription to CaseBase Case Citator, Unreported Judgments, LawNow Plus and at least one qualifying AU Practical Guidance module', and that subscribed content is accessed via the Lexis+ platform. The product page draws the boundary with the generative layer itself: 'Lexis+ is the core legal research platform ... Protege builds on Lexis+ by adding a generative and agentic AI layer, including conversational legal research, AI-assisted drafting and document analysis.' GTC 3.9 adds that Lexis+ AI requires Lexis+ plus a minimum content package. Read 2026-09-27.
Ask: Which content subscriptions and Practical Guidance modules are on our order form, and is Protege, Argument Analyser or Lexis Create+ included or separately priced?
Deployment and hosting region
Not confirmed
Two published sources disagree. The product FAQ states 'Your sensitive information is stored and processed within Australia using Amazon Web Services (AWS) and Microsoft Azure'. The subprocessor list, last updated 17 September 2026, gives a processing-location column per service and records for 'Lexis+ (Automated Templates)' Amazon Web Services, Inc. as Host Provider with location 'Canada, USA', and for 'Lexis+ (Brief analysis)' Amazon Web Services, Inc. as Host Provider with location 'Canada, USA'. Neither entry lists Australia, and the list carries no general Lexis+ entry. GTC 3.9 fixes Australia as the primary hosting location for the Lexis+ AI Service, not for Lexis+. Checked 2026-09-27.
Ask: Reconcile the product FAQ's statement that Lexis+ data is stored and processed within Australia with the subprocessor list recording Canada and USA for the Lexis+ Automated Templates and Brief analysis services, and tell us which applies to our tenancy.
Named features and how the vendor labels them
Public claim only
The product page names Lexis Answers ('Type any legal question in plain language and Lexis Answers searches across cases, legislation and commentary to surface the exact answer'), Search Term Maps, CaseBase, Legislation Compare ('surfaces every addition and deletion across any time frame') and Leading Cases ('the most cited and relevant authority'), and presents four platform tools: Legal Research, Practical Guidance, Argument Analyser and a Legal News Hub marked 'Coming soon'. The same page's FAQ lists four features as the 'Key AI features': Lexis Answers, CaseBase citation validation, Legislation Compare and Leading Cases. Elsewhere on that page CaseBase is described as Australia's case citator, Legislation Compare as surfacing additions and deletions between versions, and Leading Cases as surfacing the most cited authority; no AI mechanism is described for those three, and no model or technique is published for Lexis Answers. Checked 2026-09-27.
Ask: For each of the four features your FAQ labels as AI, state what the mechanism actually is, and which of them involve a language model at query time.
Australian content coverage
Public claim only
The FAQ states Lexis+ includes Australian case law, legislation and regulations, Halsbury's Laws of Australia, analytical commentary, books, journals and Practical Guidance across 26 modules, 'updated continuously'. GTC 3.7 makes CaseBase Case Citator, Unreported Judgments, LawNow Plus and at least one AU Practical Guidance module mandatory subscriptions, and GTC 2.9 notes access may be restricted to subscribed Materials only. The shop page notes 'this version of Lexis+ does not include Reference Works' for Lexis+ Lite. Checked 2026-09-27.
Ask: Give the court and legislation coverage list and currency lag for our subscribed collections, and confirm which collections Lexis Answers searches when a user asks a question.
Vendor content addressed to AI systems
Public claim only
A deliberate check for content directing how AI systems should describe the product found none on the Lexis+ product page or the Australian products index, both read in full on 2026-09-27. A file does exist at lexisnexis.com/llms.txt, but it is a crawler-access directive rather than descriptive instruction: it allows named search and assistant agents ('User-agent: OAI-SearchBot / Allow: /', 'User-agent: ClaudeBot / Allow: /') and disallows others ('User-agent: GPTBot / Disallow: /', 'User-agent: PerplexityBot / Disallow: /'). No block telling AI models what to say about the product was found.
Ask: Does LexisNexis publish or supply any guidance to AI systems, crawlers or assistants about how Lexis+ should be described, and if so where?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Professional responsibility and client authority
Public claim only
GTC 4.4 states 'We are not a law firm; we do not represent or advise clients in any matter and are not bound by the professional responsibilities and duties of a practising lawyer', and that nothing in the Services creates a solicitor-client relationship or constitutes legal advice. GTC 4.3(d) states the Services and Materials are for reference purposes only and are not a substitute for professional advice or judgement. Read 2026-09-27.
Ask: Where a Lexis Answers response is relied on in advice to a client, what disclosure do you recommend under Australian professional conduct rules, and can named matters be excluded?
Foundation-model providers
Not confirmed
No model, provider or technique is published for Lexis Answers or any other Lexis+ feature on the pages read. The subprocessor list dated 17 September 2026 names AI-functionality providers service by service — Anthropic PBC, OpenAI LLC, Microsoft Corporation, Mistral AI and Google LLC appear against Lexis+ AI and Lexis+ with Protege entries — while the two Lexis+ entries in that list, Automated Templates and Brief analysis, name only Amazon Web Services, Inc. as Host Provider and no AI-functionality subprocessor. Checked 2026-09-27.
Ask: Which models and providers serve Lexis Answers, in which country does that inference run, and why does the subprocessor list record no AI-functionality subprocessor against the Lexis+ entries?
Subprocessors
Public claim only
DPA clause 3.1 gives general authorisation to engage processors from the published list, requires the list to be updated at least 14 days before a change and gives the customer 14 days to object with reasons, after which LexisNexis will use reasonable endeavours to avoid processing by the objected-to processor. The list, last updated 17 September 2026, records under 'Lexis+ (Automated Templates)' and 'Lexis+ (Brief analysis)' only Amazon Web Services, Inc. (Canada, USA), and names RELX Trading Australia Pty Ltd among the affiliates providing data centre operations, service maintenance and support. There is no general Lexis+ entry and no entry for Lexis Answers, CaseBase, Legislation Compare or Leading Cases. Checked 2026-09-27.
Ask: Which subprocessor-list entries govern Lexis Answers, CaseBase and Legislation Compare on our Australian tenancy, and will you publish them with processing locations so the DPA 3.1 objection right is usable?
Training on customer content
Public claim only
GTC 4.8 defines Customer Information as Prompts and Customer Documents together and states that LexisNexis will, and will ensure its third-party technology suppliers are obliged to, keep Customer Information within the controlled environment, not make it public or provide it to any other user except the originating Authorised User, and that it 'is not used by LexisNexis to train any AI Technology'. The product FAQ puts it more narrowly: 'your data is never used to train AI models for other users'. The Trust Center states 'We pride ourselves on never using customer data to train our models.' Read 2026-09-27.
Ask: Confirm the contractual clause 4.8 wording governs rather than the FAQ's narrower 'for other users' phrasing, and that it covers prompts, uploads, embeddings and telemetry at every model provider.
Feedback, ratings and service improvement
Not confirmed
Neither the GTCs, the DPA nor the product page describes in-product feedback or ratings for Lexis+ features, or whether such signals are used to tune retrieval, ranking or models. GTC 4.8 addresses Prompts and Customer Documents and is silent on ratings and usage telemetry. Checked 2026-09-27.
Ask: If a user rates a Lexis Answers response, what is stored, for how long, and is it used to change results for other customers?
Retention of prompts, uploads and saved work
Public claim only
GTC 4.7 states Customer Documents are processed in a non-persistent state and 'purged automatically at the end of a user session or a period of inactivity, whichever occurs first', and that retention of Prompt history and its deletion is within the Authorised User's control. GTC 3.6 says Folders let users save copies of Materials and links, with LexisNexis not responsible for backing them up. GTC 4.8 states LexisNexis is not obliged to store, maintain, back up, retrieve or restore Customer Information. No retention period is published for search history, Lexis Answers queries or logs. Read 2026-09-27.
Ask: State the inactivity period that triggers purge, and the default and configurable retention for search history, Lexis Answers queries, Folders and system logs on our tenancy.
Deletion and certified erasure
Public claim only
GTC 4.7 purges uploaded documents automatically at session end or after inactivity, and leaves Prompt-history deletion to the user. DPA clause 2.3(g) requires LexisNexis, at the customer's choice, to delete or return all personal data after the end of the provision of services and delete existing copies unless law requires storage. Neither document offers certified erasure or a deletion deadline, and GTC 4.8 disclaims any obligation to retrieve Customer Information. Read 2026-09-27.
Ask: Will you certify deletion in writing after termination, covering Folders, search history, Lexis Answers queries and copies at subprocessors, and within how many days?
Vendor and provider access to content
Public claim only
GTC 3.6 warrants Folders are under the exclusive control of Authorised Users and that LexisNexis 'will not access or otherwise review the content of Folders without your authorisation', while reserving access or disclosure 'to the extent necessary to facilitate features and functions of the Services and to comply with contractual and legal obligations including, but not limited to, an administrative or judicial proceeding'. DPA 2.3(b) requires authorised personnel to be under confidentiality obligations, and 6.3 requires reasonable steps so that anyone with access processes data only on the customer's instructions. The Trust Center publishes a knowledge-base question asking whether any LexisNexis language-model provider has human reviewers able to read prompts or completions; the answer was not visible without registration. Checked 2026-09-27.
Ask: Who can read our Folders, search history and Lexis Answers queries, from which countries, under what ticketed approval, and will you give us the Trust Center answer on model-provider human reviewers?
Identity, access and offshore use
Public claim only
GTC 2.7 makes each LN ID personal and confidential, allows cancellation where an ID is shared and permits additional charges for unauthorised use. GTC 2.8 makes each access method country specific, not to be used outside the country of issue except for periods up to 30 continuous days, with suspension and an indemnity if exceeded. No SSO, SCIM or mandatory multi-factor authentication requirement was found for Lexis+; the Trust Center lists access-control and audit-logging topics whose detail sits behind registration. Checked 2026-09-27.
Ask: Confirm SAML single sign-on, enforced multi-factor authentication and automated deprovisioning on our Lexis+ tenancy, and how clause 2.8 applies to staff working overseas for more than 30 days.
Encryption and key management
Public claim only
The product FAQ refers to 'Privacy by Design principles with state-of-the-art encryption and privacy technology'. The Trust Center states 'Data is encrypted both in transit and at rest.' The Australian products index refers to 'advanced encryption, access controls, and compliance with global privacy and security standards, including ISO 27001 and GDPR where applicable'. DPA 6.1 lists pseudonymisation and encryption among measures to be implemented as appropriate. No algorithm, TLS version, key-management description or customer-managed key option was found. Checked 2026-09-27.
Ask: Name the encryption algorithms and TLS versions protecting Lexis+ content, search history and backups, who holds the keys, and whether customer-managed keys are available.
Independent assurance and its scope
Public claim only
The Trust Center publishes a certification list including SOC 2 Type 2, SOC 2 Type 1, SOC 3, SOC 1 Type 2, ISO/IEC 27001 and its Statement of Applicability, ISO 9001:2015, ISO 22301:2019, ISO 14001, ISAE 3402, NIST CSF and Cyber Essentials, with the reports gated behind registration. A Trust Center update dated 4 May 2026 states the newly published SOC 2 Type 2, SOC 3 and HIPAA/HITECH reports cover 'Lexis, Lexis+ AI, Lexis+ with Protege and CaseMap+'. Lexis+ is not separately named in that scope statement. The Australian products index states compliance with standards 'including ISO 27001 and GDPR where applicable'. Checked 2026-09-27.
Ask: Provide the SOC 2 Type 2 report and the ISO/IEC 27001 certificate with a scope statement naming Lexis+ and its Australian hosting environment, plus exceptions and the current bridge letter.
Contracting entity, liability and forum
Public claim only
The Australian Global Platform General Terms and Conditions state they 'form part of the agreement between RELX Trading Australia Pty Limited trading as LexisNexis ABN 70 001 002 357 ... and the customer entity named on the Order Form'. Clause 7.6 applies New South Wales law with exclusive jurisdiction in the New South Wales courts. Clause 5.7 caps aggregate liability at 'the greatest amount payable by you in any rolling 12 month period', with carve-outs in 5.8, and clauses 5.1 to 5.2 preserve Australian Consumer Law guarantees. Clause 6.3 auto-renews for 12-month terms with the renewal price notified at least 45 days ahead, and 6.6 gives consumer and small business contracts a 30-day termination right in a renewal period. Clause 7.10 incorporates the Privacy Policy and the Data Processing Addendum. The document carries no version date on its face. Read 2026-09-27.
Ask: Confirm RELX Trading Australia Pty Limited (ABN 70 001 002 357) is our counterparty, give us the dated version of these terms, and confirm any negotiated change to the clause 5.7 cap and the clause 6.3 renewal uplift.
Cross-border transfers
Not confirmed
The product FAQ states data is 'stored and processed within Australia using Amazon Web Services (AWS) and Microsoft Azure'. The subprocessor list dated 17 September 2026 records the processing location for 'Lexis+ (Automated Templates)' and 'Lexis+ (Brief analysis)' as 'Canada, USA'. DPA clause 5.1 requires appropriate safeguards for transfers out of the customer's country, and the DPA annex sets jurisdiction-specific terms for the European Economic Area, United Kingdom, Switzerland, Latin America, the Middle East and Africa, and the United States, with no Australia-specific annex; the GTCs contain no Australian Privacy Principle 8 clause. GTC 2.8 restricts each access method to its country of issue. Checked 2026-09-27.
Ask: List every country in which Lexis+ content, search history, Lexis Answers queries, logs, support access and backups are processed, and give us the Australian Privacy Principle 8 analysis for each, including the Canada and USA locations in your own subprocessor list.
Incident notification and history
Public claim only
DPA clause 7.1 requires LexisNexis to notify the customer 'without undue delay after becoming aware of a personal data breach'; no fixed hour count and no Notifiable Data Breaches scheme clause appears in the GTCs. A Trust Center update dated 4 March 2026 states LexisNexis investigated a security matter, that an unauthorised party accessed a limited number of servers containing 'mostly legacy, deprecated data from prior to 2020' such as customer names, user IDs, business contact information, product usage, survey responses with IP addresses and support tickets, and that the impacted information did not include customer client or matter information or customer contracts. Checked 2026-09-27.
Ask: State the contractual notification period in hours from discovery, confirm cooperation with our Notifiable Data Breaches obligations, and confirm whether any Australian Lexis+ customer data was in scope of the March 2026 matter.
Change notice for terms, features and processors
Public claim only
GTC 7.1 permits typographical or non-substantive changes without notice, substantive changes on at least 7 days' notice, email notice where a change is considered detrimental, and a 30-day termination right with pro-rata refund in that case. GTC 2.10 allows Materials and features to be added to or withdrawn from the Services 'without notice', with a 30-day termination right where the change materially affects the value of the agreement and a pro-rata adjustment of charges. DPA 3.1 gives 14 days' advance notice of subprocessor changes with a 14-day objection window. GTC 14 equivalents on price are in 6.3, where renewal pricing includes an annual increase notified at least 45 days ahead. Read 2026-09-27.
Ask: What notice will we receive before a collection, the citator, Lexis Answers or the hosting location changes, given clause 2.10 permits withdrawal of features without notice?
Export and exit
Public claim only
GTC 4.8 states LexisNexis is 'not obliged to store, maintain, back-up, retrieve or restore any Customer Information'. GTC 1.3(b) prohibits storing Materials in a database or for more than ninety days except under stated exceptions, which limits what content may be kept after exit. GTC 6.9 terminates the licence and preserves the intellectual property, liability, confidentiality and jurisdiction clauses. GTC 6.8 limits the vendor's only obligation on termination to a pro-rata refund of prepaid charges, and 6.2 prevents cancelling a subscription during the term. No export format is published for Folders or search history. Read 2026-09-27.
Ask: On exit, how do we export Folders, saved searches and Lexis Answers history, in what format, and how does clause 1.3(b) apply to Materials already saved to matter files?
Connectors and third-party AI tools
Public claim only
GTC 1.3(g) permits use of the Services or Materials with large language models, machine learning models or generative AI only where the Services and Materials remain under the customer's control and are not provided to third parties, are not used to train those technologies, and such usage is 'on an incidental basis only'; LexisNexis Services are excluded from that definition. GTC 3.6 permits Folder sharing only with other LexisNexis authorised users who hold a current subscription to the Materials concerned. No connector catalogue is published for Lexis+. Read 2026-09-27.
Ask: Does clause 1.3(g) allow us to paste Lexis+ content into our own approved AI assistant, what counts as 'incidental', and is there any supported connector or API?
Open-web retrieval
Public claim only
The product page describes Lexis Answers as searching 'across cases, legislation and commentary' and the platform as connecting case law, legislation, commentary and practical guidance in a single experience; no open-web retrieval is described for Lexis+, and the generative and agentic layer is placed in Protege as a separate product. No page read states whether any external retrieval occurs or whether it can be disabled. Checked 2026-09-27.
Ask: Does any Lexis+ feature call outside the subscribed LexisNexis corpus, including a search engine or a model provider's browsing tool, and can that be disabled tenant-wide?
Agent actions and confirmation
Not confirmed
No autonomous action, workflow execution, write-back or send capability is described for Lexis+ on the pages read; the product page attributes agentic behaviour to Protege as a separate product. GTC 4.3(e) records that some Services use generative AI for content creation such as draft emails, contract clauses and summaries, without saying which product. No confirmation or stop control is documented. Checked 2026-09-27.
Ask: Does any Lexis+ feature take an action beyond returning results, and if agentic steps are added to Lexis+ rather than Protege, will they be off by default for our tenancy?
Human review before reliance
Public claim only
GTC 4.3(f) states 'AI systems may not always be accurate or error free, which means Authorised Users are responsible for verifying and cross-referencing any information provided in AI Services', and 4.3(a) that Materials analysing the law are current only to the date recorded in the relevant Material. The product page presents CaseBase as the way to 'verify your authority is sound before you rely on it'. No product control forces a named reviewer before output is used. Read 2026-09-27.
Ask: What in-product controls record that a CaseBase check was performed on each authority relied on, and can that step be made mandatory for our users?
