AI tools and client data

Is Lexis+ with Protégé safe for client data?

Short answer: Whether Lexis+ with Protégé is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Lexis+ with Protégé and on Lexis Create+ and other LexisNexis products with Protégé, LexisNexis says it does not train its models on what staff type, by default. Every fact on this page is LexisNexis's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.

By Kfir Yair, CISSP. Published . Updated .

See which AI tools your staff use

Plan by plan, in LexisNexis’s own words

LexisNexis' legal AI assistant for research, drafting and analysis. It can also be pointed at the firm's own documents and prior work, which is the setting that decides how much client material it touches. LexisNexis sold it as Lexis+ AI until it renamed it Protégé.

What you are askingLexis+ with ProtégéLexis Create+ and other LexisNexis products with Protégé
Trains the vendor's models by defaultNo, and LexisNexis pairs that with a claim about retention and deletion policies it does not publish the terms of.“We never use customer data to train AI models and maintain robust data retention and deletion policies.” source, read The same statement. LexisNexis publishes it for Protégé as a whole rather than per product.“We never use customer data to train AI models and maintain robust data retention and deletion policies.” source, read
How to turn training offNot found in the pages we read.Not found in the pages we read.
How long data is keptA Vault of your own documents stays until you delete it, so the deletion is the firm's job and nobody else's.“Vaults are retained until you decide to delete them, and you can add/remove documents from your Vault at any time.” source, read Not found in the pages we read.
What an admin can see or controlThe organisation decides whether the AI may read its own documents at all. That is the control worth finding before anyone uses it.“Customers decide whether personalization services are enabled and whether their organization documents are used in AI responses.” source, read The same organisation-level decision, published for Protégé wherever it appears.“Customers decide whether personalization services are enabled and whether their organization documents are used in AI responses.” source, read
Single sign-onNot found in the pages we read.Not found in the pages we read.
Business Associate AgreementNot found in the pages we read.Not found in the pages we read.
Where the data is processedNot found in the pages we read.Not found in the pages we read.

An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the LexisNexis pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask LexisNexis before client information goes near it.

What this means for

The duty does not change because the tool is new. What changes is where the client information ends up.

  • Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
  • Dental and medical practices. We didn't find a BAA statement in the pages listed below; ask LexisNexis before any patient data goes in. See dental practices.
  • CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
  • Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
  • Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.

How to tell which version your staff use

The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.

  1. 1. Ask

    Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.

  2. 2. Look at the billing and the admin console

    This finds what the business pays for. It does not find a personal account, which is the one that matters here.

  3. 3. Look on the computers

    A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.

Settings to check today

From LexisNexis’s own documentation. Each one is a change somebody can make this afternoon.

  • Decide whether the AI may read the firm's own documents before anyone switches it on. LexisNexis makes it a choice, which means somebody will make it by accident otherwise.“Can incorporate organization documents and prior work (when enabled)” source, read
  • Tell staff the personalisation settings are theirs to change, so the configuration you approved is not the one in use six months later.“Users control their personalization settings and can modify or disable them at any time.” source, read
  • Know that your conversation history outlives the session by three months, whatever you do with the Vault.“Results from Protégé Vault are retained for 90 days…” source, read

Worth knowing

  • Read this next to the “never train” line: LexisNexis says identifiable information is removed and the interaction is then used to improve performance. Both are LexisNexis's own statements; ask LexisNexis which applies to your plan.“Identifiable information is removed from AI interactions so that we can improve performance without compromising privacy.” source, read
  • LexisNexis publishes this line separately from the training one, and it names other users. Ask LexisNexis what it covers for your plan.“Does not use customer data to train models for other users” source, read
  • There is no published price and no published plan, so what your firm agreed to is in your contract rather than on the website.“Pricing is customized based on organization size, practice needs, and subscription requirements.” source, read

Questions we get asked

Is Lexis+ with Protégé safe for client data?

Whether Lexis+ with Protégé is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.

On Lexis+ with Protégé and on Lexis Create+ and other LexisNexis products with Protégé, LexisNexis says it does not train its models on what staff type, by default.

Every fact on this page is LexisNexis's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.

Does LexisNexis train its models on what we put into Lexis+ with Protégé?

On Lexis+ with Protégé and on Lexis Create+ and other LexisNexis products with Protégé, LexisNexis says it does not train its models on what staff type, by default.

On Lexis+ with Protégé: No, and LexisNexis pairs that with a claim about retention and deletion policies it does not publish the terms of.

LexisNexis's own words: "We never use customer data to train AI models and maintain robust data retention and deletion policies." (read 2026-11-03). On Lexis Create+ and other LexisNexis products with Protégé: The same statement.

LexisNexis publishes it for Protégé as a whole rather than per product. LexisNexis's own words: "We never use customer data to train AI models and maintain robust data retention and deletion policies." (read 2026-11-03).

How long does LexisNexis keep what we put into Lexis+ with Protégé?

On Lexis+ with Protégé: A Vault of your own documents stays until you delete it, so the deletion is the firm's job and nobody else's.

LexisNexis's own words: "Vaults are retained until you decide to delete them, and you can add/remove documents from your Vault at any time." (read 2026-11-03).

On Lexis Create+ and other LexisNexis products with Protégé: Not found in the pages we read.

Can an administrator read what we put into Lexis+ with Protégé?

On Lexis+ with Protégé: The organisation decides whether the AI may read its own documents at all. That is the control worth finding before anyone uses it.

LexisNexis's own words: "Customers decide whether personalization services are enabled and whether their organization documents are used in AI responses." (read 2026-11-03).

On Lexis Create+ and other LexisNexis products with Protégé: The same organisation-level decision, published for Protégé wherever it appears.

LexisNexis's own words: "Customers decide whether personalization services are enabled and whether their organization documents are used in AI responses." (read 2026-11-03).

Will LexisNexis sign a Business Associate Agreement for Lexis+ with Protégé?

We didn't find a BAA statement in the pages listed below; ask LexisNexis before any patient data goes in.

How do we find out which version of Lexis+ with Protégé our staff are using?

LexisNexis sells this to practices rather than to individuals, so there is no personal account to find.

What decides the answers above is which plan your practice is on and what your own administrator has switched on, both of which are in your subscription and your admin console rather than on anybody's laptop.

Obsidian Ridge's free 30-day AI security assessment covers the tools nobody approved, which is the other half of the picture.

Sources

LexisNexis’s own pages, with the date each was read. Nothing on this page comes from anywhere else.

All 35 tools, side by side, or run the AI tool risk checker over the ones you know about.

Other tools people ask about

Same question, different answers. The ones in the same category are the ones staff swap between.