Skip to content
A FinePrint investigation · fineprint.report
Accurint Files

LexisNexis Technical Setup Requirements — Accurint Crime Analysis / AVCC / Lumen (Client, 08-2022)

August 1, 2022
View source document →

This document is hosted externally. Click to open in a new tab.

About this document

LexisNexis Risk Solutions Technical Setup Requirements for Accurint Crime Analysis, the Accurint Virtual Crime Center, and Lumen (Client version, dated 08-2022). The document is the engineering playbook behind PSDEX contribution. It instructs the agency to stand up a computing environment inside its own network where LexisNexis builds a custom interface named the PSDex Data Client. That client runs an automated ETL process that extracts read-only data from the agency Records Management System and Computer-Aided Dispatch, reformats it, and uploads it to LexisNexis servers over SFTP. The setup runs on a daily schedule, with a service account whose password is set never to expire so the job does not break, and LexisNexis is given VPN access into the agency network to build and maintain it.

Two details stand out. First, the document states a data preference: limited copies and filtered views are not preferred, and raw access to the unfiltered RMS is preferred. The default configuration pulls the whole records system rather than a curated subset. Second, the document publishes the exact network destinations an agency firewall must allow, including PSTRANSFER, PSIMPORTER, and API.PSDEX at lexisnexisrisk.com, plus communitycrimemap.com and the Lumen environment in AWS GovCloud. Those endpoints are a fingerprint: a network that talks to them is running the contribution pipeline.

This is a generic vendor document rather than an agency-specific contract, so it does not by itself establish that any particular department contributes. What it establishes is the mechanism. It is the technical counterpart to the AVCC XML Addendum: the addendum is the legal permission to contribute, and this is the plumbing that carries the data out. It also confirms that Community Crime Map is fed by the same Data Client, which supports treating CCM presence as a contribution indicator.

Key language

Overview (p.1): LexisNexis builds a custom interface (PSDex Data Client) to the agency's RMS and/or CAD. ETL process defined as: Extract limited data (read-only) from RMS and/or CAD systems / Transform and clean the data into a format LexisNexis requires / Load the data from agency to LexisNexis servers. Networking Connectivity, Internal (p.2): "Using views or limited copies of data is not preferred; raw access to unfiltered data within the RMS is preferred (either replicated or otherwise)." Firewall Rules (p.3): outbound endpoints PSTRANSFER.LEXISNEXISRISK.COM (SFTP/22), PSIMPORTER.LEXISNEXISRISK.COM (HTTPS/443), API.PSDEX.LEXISNEXISRISK.COM (HTTPS/443; ranges 198.62.62.0/23, 69.84.182.0/23, 198.62.63.0/23, 69.84.183.0/23), COMMUNITYCRIMEMAP.COM (HTTPS/443); Lumen: SSH.RUNLUMEN.COM and *.RUNLUMEN.COM (AWS Gov Cloud). Email whitelist (p.4): RUNLUMEN.COM, AMAZONSES.COM. Access Permissions / Setup Checklist (pp.4-5): service (SQL or Windows) account with read-only access to source RMS and/or CAD; "Password set to 'never expires' for daily scheduled job"; VPN connectivity and credentials provided to LexisNexis (or GoToAssist screen-share); "No data is saved long-term within the ETL environment; it is only a temporary workplace."