LexisNexis Risk Solutions: screening, identity and fraud controls

LexisNexis Risk Solutions supplies data, analytics and decision tools used to detect fraud, assess risk and support financial-crime controls. For a brokerage, its relevant products sit around customer onboarding, continued screening and payment or account activity. The range combines source intelligence with software that applies the customer’s rules to that intelligence.[2]

WorldCompliance supplies fielded details such as aliases, dates of birth, identity-document attributes and segment-update timestamps. Its published sanctions schedule is up to four deliveries daily within 24 hours of source publication. The scope includes indirect exposure through ownership and control, alongside direct list entries. A sanctions dataset, a matching engine and the broker’s adjudication process therefore address different parts of the screening task.[3]

WorldCompliance offers XML, delimited-text and KZ files, with delivery schedules aligned to operational requirements. It can run within the customer’s network or feed Bridger, Firco and Compliance Lens. Selecting an external screening engine does not require the data file itself to become a hosted case-management platform.[3]

Bridger accepts an existing customer portfolio through batch or API ingestion and supports third-party data providers. Portfolio or watchlist changes can trigger rescreening. Single-tenant and multi-tenant hosting are both described, alongside on-premises installation; these are deployment choices with different operating responsibilities.[4]

RiskNarrative’s journey builder links rules, scorecards, data services and secondary checks. Cases can move to specialist teams, where agents add notes, change scores and prioritise work. Its optional Virtual Agent learns from human-agent decisions and can emulate their activity when enabled. That is consequential automated action within a configured workflow, rather than merely a summary tool.[6]

These January 2026 GBP examples are G-Cloud 15 offers for UK public-sector procurement. Software, data, implementation and support are separate components; private brokerage pricing remains subject to its commercial agreement.[11][12]

Those annual software fees include standard support. Material enhancements or new functionality are excluded unless agreed in writing.[11]

ThreatMetrix invoices on mutual purchase-order execution. Purchased transactions expire on consumption or one year from purchase, whichever comes first. Unless specified otherwise, unused services expire after one year without credit. Training is separately priced.[12]

The UK Q1 2026 master terms require payment within 30 days of invoice date and invoice disputes within five business days of receipt. Amounts exclude VAT and other applicable taxes. Schedule A takes precedence.[13]

The separate US master terms use 20 days from invoice date. Although they permit termination generally, a fixed-term or minimum-commitment Schedule A can restrict customer cancellation. These differences make the contracting entity and service schedule material to the commercial comparison.[14]

RiskNarrative’s published service description assigns project management, configuration, testing and training to its Professional Services engagement. Technical consultants support API calls and expected results, and a sandbox is available. LNRS maintains the SaaS environment and hardware; customer teams configure and operate their risk policies.[9]

Firco’s optional Watchlist Update Manager converts native watchlists and tracks changes. Its Screening Operations Controller exposes list and rule configuration, while Stripping Detector looks for deliberately altered payment messages before processing. These modules make change management and payment-message integrity part of the implementation; they are not interchangeable with onboarding identity checks.[5]

The US master terms require successful credential verification before access. They restrict access through IP addresses outside the United States and its territories without written approval, and normally require customer-held LN information to be purged within 90 days of initial receipt, with an exception for permitted legal or regulatory archives. These provisions are specific to that agreement, not a claim that the global product range is US-only.[14]

Under the UK master terms, a customer suspecting or confirming a security event must notify LNRSUK within 24 hours where practicable and always without undue delay. The processor DPA separately requires LNRS to notify its customer without undue delay after becoming aware of a personal-data breach within that DPA’s scope.[13][16]

The UK contract identifies LexisNexis Risk Solutions UK Limited, company 07416642. Product-specific terms and regional entities determine the actual supplier.[13]

The financial-crime processing notice names LexisNexis Risk Solutions FL Inc. and WorldCompliance, Inc. as providers of its covered intelligence services. It requires customers to verify data accuracy and prohibits decisions affecting individuals based exclusively on those results. Screening records can contain allegations and associations drawn from public sources; a returned match requires the customer’s own review.[18]

Bridger’s published disclaimer excludes its use as a consumer report for US FCRA eligibility decisions such as credit, insurance and employment. The service aggregates source data and calls for independent verification. That restriction should not be confused with an assurance that every other use is permitted.[4]

The November 2025 Data Protection Addendum treats the parties as independent controllers for covered exchanges, excluding processing undertaken on another party’s behalf. Each party handles its own obligations and rights requests. Authentication, account and usage-log data have their own privacy-policy treatment. The separate processor addendum applies when LNRS processes for its customer.[15]

The processor addendum requires the subprocessor list to be updated at least 14 days before a new processor is authorised. Customers may object subject to the contract’s dispute and termination provisions. Its security measures are framed around the processing risk; the addendum does not establish one fixed technical configuration for every product.[16]

The risk business was formed in 2000, initially within LexisNexis Legal & Professional, and later developed as a separate risk business. The broader group serves multiple industries; the screening and fraud products described here are part of that wider portfolio rather than a single all-purpose brokerage platform.[1]

RELX identifies LexisNexis Risk Solutions’ headquarters as Alpharetta, Georgia. Its principal operations span North America, Europe, India and the Philippines. Corporate presence and a product’s permitted processing locations are different facts.[2]

LNRS completed its acquisition of IDVerse on 19 February 2025 and placed it within Business Services. The announcement confirmed existing availability through RiskNarrative and IDU. This adds document and biometric verification capabilities to the broader intelligence and screening range; the acquisition price was not disclosed.[20]

IDVerse’s current policy identifies LNRS (Europe) Limited for most regions, LNRS FL Inc. in the Americas, OCR Labs Pty Ltd in Asia-Pacific and OCR Labs Global Limited in the UK. Regional cloud hosting still allows specified overseas support and SMS-processing transfers.[19]

Operator

Relevant LNRS group entity under the service agreement, including LexisNexis Risk Solutions UK Limited and LexisNexis Risk Solutions FL Inc.

Service scope

Risk intelligence, sanctions and account screening, transaction screening, identity verification, fraud analytics and workflow orchestration.

Customer types

Financial institutions; Financial technology businesses; Corporations; Government organisations

Delivery

SaaS; Hosted; API; On premises

Pricing publication

Public and quoted pricing

Headquarters

Alpharetta, Georgia, United States

Platforms

WorldCompliance; Bridger Insight XG; Firco Continuity; RiskNarrative; ThreatMetrix; IDVerse

Pricing scope

Product-specific commercial agreements; scoped G-Cloud 15 prices distinguish platform, data, implementation and support charges.

Implementation

Select datasets and delivery model, configure matching or decision rules, and integrate the applicable batch, API or capture workflow.

Support

Product-specific support; standard, critical-incident and optional premium coverage differ.

Permissions and regulatory scope

Risk-data and software services support customer controls; permitted uses, regional entities and decision responsibilities remain product-specific.

Provider metadata checked 20 Oct 2026Source 1Source 4Source 21Source 18Source 5Source 8Source 2Source 6Source 11Source 7Source 12Source 13Source 3

That ThreatMetrix event-export window is separate from the processing notice’s purpose-based retention of personal information. The notice also says customers configure scores and retain responsibility for decisions affecting individuals. A fraud score therefore needs to remain connected to the broker’s policy, review history and resulting action.[17]

The US master terms restrict customer use of LN information in public or shared non-enterprise AI systems without written authorisation. They also prohibit model training and other specified AI development uses, including uses of derived summaries. A licence to search or screen is not automatically permission to feed the resulting intelligence into another AI service.[14]

RiskNarrative can send further-information requests by application, email or SMS, then escalate unresolved cases. The distinction between configured automated outcomes and analyst action matters because its workflow can both collect new evidence and change a customer’s treatment.[6]