Whitepaper
How Norwegian companies prepare for CSRD reporting 2026
38 pages · revised May 2026 · free download
Download →Compliance evidence · TSP-verified certificates
Compliance evidence · TSP-verified certificates
Make compliance work easier: targeted learning, clear follow-up and cryptographically verifiable certificates in one platform.
Whitepaper
38 pages · revised May 2026 · free download
Download →Lexico Academy makes complex compliance requirements manageable. The platform brings targeted certification tracks, assessments, follow-up and documentation together, helping the organisation find answers faster when customers, auditors or management ask. New certificates issued with the current TSP solution are sealed with an Ed25519 signature, SHA-256 hash and RFC 3161 timestamp. This makes changes to the signed data detectable and lets a recipient verify the signature and integrity with the public key, including offline. CSRD, DORA, NIS2, the AI Act, AML and other frameworks are addressed according to their actual scope; Academy does not replace legal advice. An Academy certificate documents completion and passed assessments. It is not public accreditation, proof of legal compliance or a guarantee that an organisation meets every legal requirement.
Academy turns regulation into learning, testing and evidence others can verify.
Short learning tracks show what regulation means in daily work.
Passed assessments give organisations a record of completion, results and timing.
TSP-signed certificates can be checked by employers, auditors or others.
Regulation in transition
CSRD, the AI Act, DORA, NIS2 and other frameworks are introduced and amended on different timelines. The applicable obligations depend on factors such as country, sector, organisation size, role and the specific activity.
Up to 7%
The AI Act's highest rate applies to specified prohibited AI practices. Other infringements have different rates, and penalties are assessed case by case.
Management accountability
NIS2 and DORA impose governance duties on management bodies of organisations within their scope. The precise responsibility follows applicable national and sector-specific law.
Phased
Entry into force, transitional rules and who is covered vary by framework and jurisdiction.
Academy brings sources, learning, assessment results, certificates and follow-up items into a structured trail. Your team spends less time searching and more time on targeted follow-up. Academy does not replace the organisation's own legal assessments, controls or responsibilities.
Why Lexico Academy
Each framework is broken down into competence points, control questions and assessments. You quickly see what was completed, which assessments were passed, and where follow-up is still missing.
Share a certificate the recipient can check with the public key, including offline. Verification confirms the signature and integrity of the included data; it does not determine whether the person or organisation complies with the law.
Academy's core platform and database are operated in the EEA, giving the organisation a clear starting point for supplier and privacy reviews. Specialist subprocessors may be used for identity, payments, email, AI features and timestamping and are described in the privacy and data-processing documentation.
How the platform works
Six work areas give the organisation one connected path from regulatory source to learning, follow-up and documentation. The features support compliance work; they do not by themselves determine whether the organisation complies with the law.
Employee, role and department views show assigned tracks, progress, assessment results, certificates and recorded gaps.
Certification tracks can be organised and assigned by role and need. Scope is set in the specific track; Academy does not automatically determine a user's legal obligations.
The guidance uses the organisation's enrolments, deadlines, certificates and recorded TSP evidence to identify follow-up needs. Its answers are operational support, not legal advice.
A background service checks configured sources including EUR-Lex and Lovdata, records changes and flags linked content for expert review. Changes are not published automatically.
When a source changes, content owners can review and update the affected parts. Scope and any reassessment are determined after expert review.
Reporting and export features can collect status by framework, certificates, TSP evidence and recorded gaps. Content and processing time depend on the available data and selected export.
Who it's for
When a customer, auditor or regulator requests competence documentation, Academy can show assignments, completion, assessment results and certificates.
For organisations managing role-based learning, deadlines, follow-up and certificates across employees and departments.
For organisations within the scope of DORA, NIS2 or other governance requirements, Academy can support documentation of training and follow-up. The specific responsibility follows the law that actually applies.
Academy supports shareable, verifiable certificates and can be adapted for partner delivery. Agreed features and branding must be set out in the specific agreement.
The LexiCo ecosystem
Lexico Academy stands on its own commercially, but is built as part of a larger compliance ecosystem from LexiCo AS.
TSP is an open protocol for verifiable evidence. The open protocol layer is published as a public preview under Apache-2.0, and Academy uses TSP to check the signature and integrity of new certificates. TSP does not establish legal compliance, factual correctness or public accreditation.
Read more about TSP →Start with a sample track. A completed certification may provide a TSP-signed certificate documenting completion and passed assessments.
Create account →