Compliance frameworks, security audits, and quality certifications this company maintains.
Thomson Reuters maintains ISO 27001 information security management certification across its global technology infrastructure and data centers, protecting the confidential legal research data, tax filing information, and client documents managed by Westlaw, ONESOURCE, and Practical Law on behalf of over one million professional subscribers.
Thomson Reuters' SaaS products including Westlaw, ONESOURCE, HighQ, and CoCounsel maintain SOC 2 Type II certification, providing independent verification that Thomson Reuters' security, availability, and confidentiality controls meet the standards required by law firms, corporate legal departments, and accounting firms storing privileged client information.
Thomson Reuters operates as both a data controller and data processor under EU GDPR, managing the personal data of European legal professionals and citizens referenced in case law, regulatory filings, and news content across Westlaw and Reuters platforms. Thomson Reuters' global privacy program governs data subject rights, retention schedules, and cross-border data transfers.
Thomson Reuters complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy laws for its Canadian legal and tax subscriber data managed through Westlaw Canada and Checkpoint Canada, including subscriber account information and usage analytics.
Regulatory
FedRAMP Authorized
CertifiedThomson Reuters' Westlaw and related legal research platforms are FedRAMP authorized for use by US federal government agencies, allowing US government legal teams, including DOJ and federal agency counsel, to use Westlaw on government cloud infrastructure with the required security controls.
Quality
AICPA Trust Services
CertifiedThomson Reuters' accounting and audit tools including Checkpoint and ONESOURCE comply with AICPA Trust Services Criteria for reliability and processing integrity, ensuring that tax calculations, regulatory lookups, and financial compliance outputs generated by Thomson Reuters software meet the accuracy standards expected by CPA firms and corporate auditors.
Thomson Reuters' Westlaw, Practical Law, and ONESOURCE platforms comply with WCAG 2.1 AA accessibility standards, ensuring that legal, tax, and compliance professionals with disabilities can access Thomson Reuters' content and technology tools without barriers.
Thomson Reuters maintains ISO 9001 quality management certification for its content production, editorial, and software development processes, ensuring systematic quality control over the legal, tax, and regulatory content that professional subscribers rely on for authoritative research and compliance guidance.
Thomson Reuters complies with the California Consumer Privacy Act (CCPA) and CPRA for California residents' data processed through Reuters News, Westlaw, and other Thomson Reuters digital platforms, including rights to access, delete, and opt out of sale of personal information.
Thomson Reuters holds ISO 14001 environmental management certification at its primary data center and office facilities, supporting the company's commitment to carbon neutrality by 2030 and responsible energy management across its global technology infrastructure.