Product and intended use
Define the configuration, people, information and tasks being assessed.
Legal AI versus General AI
Public claim only
AU pages distinguish Legal AI grounded in Lexis content/CaseBase from General AI model choices (GPT-4o, o3, GPT-5, Claude Sonnet 4 as at the March 2026 blog). Models and availability change. Lexis+ AI requires Lexis+ plus a minimum content package (GTC 3.9).
Ask: Which modes and models are on our order form, and is General AI (including web search) enabled or off by default?
Australian hosting and failover
Public claim only
GTC 3.9: primary hosting location for Lexis+ AI is Australia. If third-party cloud fails or significantly degrades, the customer authorises failover to a secondary location of existing AI cloud providers, which may be outside Australia; upload is disabled during an overseas failover. March 2025 announcement: stored and processed in Australia using AWS and Azure.
Ask: Confirm whether prompts, outputs, retrieval and existing Vault documents leave Australia on failover, how we are notified, and whether an Australia-only configuration can be contracted.
Protégé surfaces
Public claim only
AU Protégé page: research, drafting (Create+), Vault, pre-built and custom workflows, CaseBase summaries, DMS drafting, General AI. Some screenshots are labelled US product with region-varying release dates.
Ask: List generally available Australian features versus US-only or preview, including Vault limits (50 vaults, 500 documents).
Australian content and citator
Public claim only
Legal AI is described as grounded in LexisNexis Australian content with CaseBase citation checks. General AI answers are not that citator path. Subscription exclusions apply.
Ask: Which Australian collections are in our licence, and does Legal AI refuse to cite when CaseBase has no match?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Not a law firm; verification duty
Public claim only
GTCs: LexisNexis is not a law firm and does not provide legal advice; authorised users must verify AI output. Folder contents are not reviewed without authorisation except as needed to operate the service or meet legal obligations.
Ask: Can we exclude named matters, and what client-disclosure wording do you recommend under Australian rules?
Models
Public claim only
AU product/blog: GPT-5, GPT-4o, o3 (OpenAI) and Claude Sonnet 4 (Anthropic) inside the LexisNexis environment; Legal AI plus those General AI choices. Infrastructure: Azure and AWS Bedrock. The list will change; labelling of which model produced an answer is claimed for General AI.
Ask: Provide the current provider/endpoint schedule per mode, including Bedrock versus direct API and processing country.
Subprocessors
Not confirmed
Azure, AWS Bedrock, OpenAI and Anthropic are named in product material. No dated AU Protégé subprocessor list with notice/objection rights was found.
Ask: Provide the current subprocessor schedule for Australian Lexis+ AI/Protégé, locations and change-notice rights.
Training
Public claim only
GTC 4.8: Customer Information (prompts and uploaded documents) is not used by LexisNexis to train any AI Technology; third-party technology suppliers are obliged to keep it in the controlled environment and not provide it to other users. Product FAQ: does not use customer data to train models for other users. General AI blog: never used to train external models.
Ask: Confirm the signed 4.8 wording applies to General AI, Vault, embeddings and any personalisation data.
Feedback and personalisation
Public claim only
Personalisation by role, jurisdiction and practice area is described, with user-controlled settings and opt-out. How feedback ratings are used was not specified in the GTCs extract.
Ask: Is personalisation built only from our tenancy, and are ratings used to train any model?
Retention
Public claim only
GTC 4.7: Customer Documents processed non-persistently and purged at end of session or inactivity. FAQ: uploads of up to 10 documents outside a Vault auto-delete at session end; Vaults until deleted; Vault results kept 90 days in My Conversations. Prompt-history deletion is user-controlled. LN is not obliged to back up Customer Information. Do not import older UK 90-day/10-minute figures as current AU defaults without checking.
Ask: Confirm current AU retention for prompts, Vault, pinned documents, DMS indexes, logs and backups, including administrator delete.
Deletion
Public claim only
Session uploads purge automatically. Vault documents can be removed by the user. Exit deletion certification and subprocessor purge were not in the GTC extract reviewed. LN is not obliged to retrieve Customer Information.
Ask: On termination, what is deleted from LexisNexis, Azure, Bedrock and model providers, and will you certify?
Vendor access
Public claim only
GTC 3.6: Folders are under exclusive user control; LexisNexis will not access folder content without authorisation except to operate features or meet legal/contractual obligations. Support access to prompts/Vault is not otherwise described.
Ask: When can staff read Customer Information, is it logged, and can we forbid human review?
Identity
Not confirmed
Access is via LN IDs under the GTCs. SSO/SCIM/MFA for Protégé were not documented on the AU product page reviewed.
Ask: Confirm SAML/SSO, MFA and deprovisioning on our Lexis+ AI tenancy.
Encryption
Public claim only
Product FAQ and General AI blog: encrypted in transit and at rest. Algorithms, key management and BYOK were not specified in those pages.
Ask: Name TLS/AES versions, coverage of Vault and logs, and any customer-managed keys.
Assurance
Not confirmed
Trust Centre URL is published. Product FAQ refers to regular independent security assessments. Current SOC 2/ISO scope for Australian Lexis+ AI/Protégé was not inspected.
Ask: Provide current reports covering Australian Lexis+ AI, Protégé, Vault and General AI, with exceptions.
AU GTCs
Public claim only
RELX Trading Australia Pty Limited GTCs: customer owns Customer Information in Outputs (LN does not claim IP in that); aggregate liability cap is the greatest amount payable in any rolling 12-month period, subject to ACL; Australian Consumer Law clauses for consumers/small businesses. Law and forum beyond ACL were not extracted in this pass.
Ask: Confirm these GTCs plus order form govern Protégé/General AI, and provide liability, DPA and governing-law clauses.
Cross-border failover
Public claim only
Primary hosting Australia (AWS and Azure). GTC 3.9 authorises overseas failover of existing AI cloud providers if service degrades; uploads disabled while failover is outside Australia. General AI model inference country is not separately stated.
Ask: List every country for Legal AI, General AI, Vault and failover, with APP 8 analysis.
Incidents
Not confirmed
No public breach-notification timeline for Lexis+ AI Australia was found in the GTCs extract reviewed.
Ask: What contractual notice period from discovery applies, and is there a 24-month incident summary?
Model and terms changes
Public claim only
General AI model list is already versioned in marketing (updated March 2026). Order form may override GTCs. No contractual model-pinning right was found.
Ask: What notice applies before model, citator or hosting-location changes?
Exit
Public claim only
LN is not obliged to store, maintain, back up, retrieve or restore Customer Information (4.8). Consumers/small businesses have extra termination rights in a renewal period. Export of Vaults and conversation history is not specified.
Ask: How do we export Vaults, chats and workflows, and what is deleted on exit including model-provider stores?
Connectors
Public claim only
DMS drafting is advertised. Connector catalogue and residual copies after disconnect were not documented.
Ask: For each connector, what is indexed, are walls honoured, and what remains after disconnect?
Web search in General AI
Public claim only
GPT-4o in General AI is described with web search and citation-checking. Legal AI is described as grounded in Lexis content, not the open web. Mixing modes in one workspace is the residual risk.
Ask: Can General AI web search be disabled tenant-wide, and what query text leaves Australia?
Workflows and agency
Public claim only
Pre-built and custom workflows automate multi-step legal tasks. Autonomous send/share outside the workspace is not described. A kill switch for workflows was not found.
Ask: Which workflow steps can write to DMS or email without a click, and how do we stop a running workflow?
Human review
Public claim only
GTCs require authorised users to verify and cross-reference AI information. Legal AI claims CaseBase-linked citations; General AI does not replace that check. Stanford RegLab results are a reason not to skim Legal AI citations either.
Ask: Show Australian sample outputs with CaseBase pinpoints and unsupported-answer behaviour for Legal AI versus General AI.