LexisNexis's Protégé legal AI publishes eight compliance certifications and a responsible-AI framework; disclosed audit record limited to a 90-day window, insurance undisclosed

LexisNexis publishes a broader list of compliance certifications for its Protégé legal AI product than most agent vendors in AI Dispatch's index, while limiting its disclosed audit record to a 90-day rolling window, according to the company's site reviewed by aidispatch.news.

The company's trust-center page lists SOC 2 Type 2, SOC 2 Type 1, SOC 3, ISO 14001:2015, CCPA, GDPR, HIPAA and ISO/IEC 27001 among the certifications and frameworks it holds or aligns to: "SOC 2 Type 2 SOC 2 Type 1 SOC 3 ISO 14001:2015 CCPA GDPR HIPAA ISO/IEC 27001," the page states, without further detail on audit dates or scope for each item.

Protégé draws on large language models from more than one outside developer rather than a single proprietary model. "Protégé General AI includes access to large language models from OpenAI, Google, and Anthropic," LexisNexis's product page states. The company says it does not use customer data to improve those models: "We pride ourselves on never using customer data to train our models," according to the same trust-center page.

On oversight, LexisNexis points to a company-wide framework rather than product-specific controls. "Responsibly developed AI with expert human oversight: AI development follows the RELX Responsible AI Principles, with human expertise embedded throughout design and improvement processes," the site states, describing the same framework as intended to keep the product "transparent and explainable" and free of "unfair bias."

On record-keeping, the product's disclosed retention is narrower than its compliance list might suggest. "Results from Protégé Vault are retained for 90 days under 'My Conversations' history," according to the product page — a fixed retention window, not a description of tamper-evident or hash-chained logging.

aidispatch.news's index found no public information on LexisNexis's site describing an insurance policy for Protégé, an indemnification commitment, a liability cap, a runtime-governance mechanism enforcing scope or spend limits at execution time, or outcome-linked pricing. The product is marketed to legal professionals across the "public, private, and academic sectors," according to the site.