Summary
LexisNexis Risk Solutions has 2 registry-verified rows and 9 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 2 registry-verified rows and 9 vendor-stated rows for LexisNexis Risk Solutions, drawn from its trust centre (Drata), FedRAMP Marketplace and the Visa Global Registry. LexisNexis Risk Solutions is listed in the FedRAMP Marketplace for FedRAMP (Agency In Process), assessed by A-LIGN Compliance and Security, Inc. dba A-LIGN. LexisNexis Risk Solutions states on its trust centre that it holds that it will sign a business associate agreement, a SOC 2 Type II report, a data processing agreement, an ISO/IEC 27001 certificate, an Cyber Essentials certificate, a SOC 1 Type II report, a public SOC 3 report, an ISO 22301 certificate and an CCPA / CPRA privacy notice, captured 21 Sep 2026; these are vendor statements, not independent confirmations.
- FedRAMP: Agency In Process, verified as of 2 Nov 2026
- PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-08-31, verified as of 2 Nov 2026
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Evidence count
2verified rows
Compliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 21 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 21 Sep 20262 sources - FedRAMPVerified
Agency In Process
as of 2 Nov 202647 sources · A-LIGN Compliance and Security, Inc. dba A-LIGN
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-08-31
as of 2 Nov 20264 sources · KYTE Consultants, Ltd.
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001 on its trust centre
as of 21 Sep 20262 sources
Cyber EssentialsVendor-statedVendor states Cyber Essentials on its trust centre
as of 21 Sep 20262 sources
SOC 1Vendor-statedVendor states SOC 1 Type 2 on its trust centre
as of 21 Sep 20262 sources
SOC 3Vendor-statedVendor states SOC 3 on its trust centre
as of 21 Sep 20262 sources
ISO 22301Vendor-statedVendor states ISO 22301:2019 on its trust centre
as of 21 Sep 20262 sources- CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 2 Nov 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-08-31.
- 2 Nov 2026PCI DSS auditor changedAuditor changed from Avertium, LLC to KYTE Consultants, Ltd..
- 20 Oct 2026FedRAMP auditor changedAuditor changed from Schellman Compliance, LLC to A-LIGN Compliance and Security, Inc. dba A-LIGN.
- 12 Oct 2026PCI DSS evidence addedA PCI DSS row entered the index with state Verified.
- 25 Sep 2026FedRAMP auditor changedAuditor changed from A-LIGN Compliance and Security, Inc. dba A-LIGN to Schellman Compliance, LLC.
- 24 Sep 2026FedRAMP evidence addedA FedRAMP row entered the index with state Verified.
- 24 Sep 2026FedRAMP evidence no longer foundThe row was not present in the latest ingest.
- 23 Sep 2026FedRAMP evidence addedA FedRAMP row entered the index with state Verified.
- 23 Sep 2026FedRAMP evidence no longer foundThe row was not present in the latest ingest.
- 21 Sep 2026FedRAMP evidence addedA FedRAMP row entered the index with state Verified.
Evidence against regulations
All regulations for LexisNexis Risk SolutionsHow much of each regulation’s vendor requirements LexisNexis Risk Solutions’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read