Your Peace of Mind Is Our Priority
Our customers place their trust in us. It’s aresponsibility we at LexisNexis® take very seriously.

Sound privacy, security and compliance practices
are essential to the well-being of your business. We
incorporate best practices in these areas into thesolutions that we offer customers in business, legal,corporate, government and non-profit organizations.
Because we place a strong, competitive focus on privacy,
security and compliance and because we integrate eachof these components into our business model, you cantrust that LexisNexis® is a partner who is dedicated toprotecting your interests. Mitigating risk for customers
and consumers while delivering best-in-class solutions
and services is our priority.
• We strive to employ best-in-industry safeguards so thatthe information you need is accessible and reliable.
• Our safeguards are designed to protect you against
improper access and impermissible use.

Our Promise to You:• Risk-Mitigation Framework. Our holistic approach toprivacy, security and compliance enhances your risk
mitigation and helps ensure compliance.
• Data Security. LexisNexis provides you with backend
security controls that alert you to anomalous activity.
Improve your security by signing up for valuable
information that can thwart a potential security threat
before it materializes.
• Credentialing. Our credentialing protocols are designed
to protect customers and consumers from criminals andfrom fraudulent activity.
• Policies, Standards and Guidelines. To safeguard against
inappropriate data access and use, LexisNexis executes
meaningful and necessary privacy and security policies,standards and guidelines.

All of this means that when you choose LexisNexis
solutions, you’ll know we are taking steps to help you
ensure that your business and your identity are safe,secure and protected. Our risk-management programis designed to provide you with the peace of mind you
need to focus on what is most important: driving results
for your business.

• Audit and Compliance. To ensure you receive the reliablerisk-mitigating protection you need and that privacy
and security safeguards are functioning effectively andefficiently, LexisNexis employs an audit and complianceprogram that consists of a system of checks and balances.

Seven key areas differentiate
LexisNexis in privacy, security
and compliance:• Training, Communication, Outreach and Transparency.
LexisNexis is focused on building and maintaining trustwith customers, employees, vendors, stakeholders andconsumers by regularly and transparently communicating
about privacy, security and compliance practices andprocedures.

1. Risk-Mitigation Framework
LexisNexis promotes the responsible use of informationby employing a risk-management framework for privacy,information and physical security, and compliance.
The framework is based on ISO 27002 and includes
administrative, physical and technical safeguards
designed to reasonably protect the privacy,
confidentiality and security of personal informationcollected from or about consumers. Proprietarycustomer credentialing criteria and continuous security
controls are also key components of the LexisNexis
privacy, security and compliance framework.

• Accountability. We recognize that our customers place
their trust in us, and we take that responsibility very
seriously. LexisNexis will be there with and for you, deliveringsound privacy, security and compliance safeguards.

Richer data. More security.
Strong compliance. Enhancedconfidence. Reliable decisions.
And the peace of mind that comeswith making the right choice.

2. Data Security
To deliver a consistently high standard for data
security, LexisNexis utilizes controls across systems.
In addition to utilizing more than 150 internal controls
designed to prevent unauthorized access, LexisNexis
conducts back-end suspicious activity monitoring todetect and respond to anomalous account activity.
We also work proactively to identify and resolve
potential vulnerabilities in our systems.
3. Credentialing
LexisNexis credentialing and re-credentialing
processes verify that access to data is granted tolegitimate individuals or entities and for permissible
purposes. Our credentialing and re-credentialing
processes include: (1) customers, (2) LexisNexis
employees and (3) vendors/third parties. Throughthese processes, LexisNexis helps to mitigate therisk of fraud by verifying and re-verifying LexisNexis
employee background information, customerand vendor business credentials and permissible
regulatory and legitimate business purposes foraccessing information products, systems and data.
4. Policies, Standards and Guidelines
LexisNexis has implemented strict policies, standards
and guidelines throughout the company that govern
data access, protection, transport, restriction,retention, deletion and classification for customers,
employees and vendors. Policies, standards andguidelines are reviewed and updated regularly—inlight of changing legal, regulatory and operational
environments, as well as to address new and emerging
threats—and communicated to our customers,
employees and vendors on an ongoing basis.

6. Accountability
At LexisNexis, privacy, security and complianceare integrated into the business model. To us,
accountability means fulfilling our obligations tocustomers, consumers, employees, stakeholders andshareholders, specifically including privacy, security
and compliance.
7. Training, Communication, Outreach and Transparency
We are committed to keeping both internal and external
stakeholders informed and up to date about what
LexisNexis is doing to respect privacy and keep
information secure. Employees receive mandatory
training with assessment; and customers, employees
and vendors are informed of their obligations relating toprivacy, security and compliance. Dedicated LexisNexis
personnel are available to assist consumers with generalinquiries and requests.
Our team of experts is always willing to furnish further
information about what we’re doing to provide you withthe peace of mind you need to focus on your business.
For more information about privacy, security andcompliance at LexisNexis, please visit
www.lexisnexis.com/privacy

5. Audit and Compliance
A robust and detailed program of audit and complianceis in constant operation to review and test policies,
standards and guidelines, as well as legal and regulatory
requirements, to assess whether they are working
effectively and efficiently and being adhered to bycustomers, employees and vendors, as appropriate.
The LexisNexis audit program includes in-house andthird-party audits as well as independent assessments.

LexisNexis and the Knowledge Burst logo are registered trademarks of RELX Inc. Other products and services may be
trademarks or registered trademarks of their respective companies. © 2017 LexisNexis.