Teams and Leadership

Teams & Leadership

An online team and leadership development platform with structured learning journeys.

T&L offers benchmarking reviews for your teams and leaders; what's going well, what could improve, and research based exercises to get there.

For further information:


  • Team Review: supportive, benchmarking report for teams at all levels.
  • Individual 360: self-reflection tool (for all staff not just leaders).
  • Branded for your organisation: Your colours, your logo, as standard.
  • Personalised, structured learning journey: strengths, challenges, improvement steps.
  • Evidence based resources and support for your team leaders.
  • Targeted exercises: matched to identified development needs.
  • Benchmarking: your people against 2,000+ real teams and leaders.
  • Cloud based, real time reporting, confidential to the user.
  • Remote access and unlimited report generation and platform access.
  • Expert Guidance: the latest research on team and leadership excellence.


  • Reviews improve team performance: clarifying priorities, roles and responsibilities.
  • Improved team wellbeing: all voices included, reviewing stresses and resilience.
  • Improved team cohesion: enhance dynamics, teams talking about what matters.
  • Evidence based framework to improve team leaders' competencies.
  • Empowered learning journey, confidential to the user.
  • Input from stakeholders about what's good, what could be better.
  • Anonymous contributions to encourage candour.
  • Common change language develops across your organisation.
  • Stimulates team reflection and develops improvement strategies.
  • Exercises: targeted, practical exercises the professionals use, with time estimates.


£12.50 to £16.50 per user per year

Service documents


G-Cloud 11

Service ID

4 3 2 3 0 3 1 0 8 3 4 9 8 2 9


Teams and Leadership

Oscar Mathew


Service scope

Software add-on or extension
Cloud deployment model
Private cloud
Service constraints
System requirements
Internet access, browser.

User support

Email or online ticketing support
Email or online ticketing
Support response times
We provide support by email. We respond to questions during UK office hours (9am-5pm). Enquiries within that time are engaged with within 24 hours (and usually far more quickly).
User can manage status and priority of support tickets
Phone support
Web chat support
Onsite support
Yes, at extra cost
Support levels
We provide swift responses to queries and issues raised, in any event within 24 hours of the issue being raised (within UK office hours).

We work closely with our technical team to resolve issues if and when they arise. It's rare that an issue isn't resolved within the first 24 hours.

We are supported by a cloud support engineer.
Support available to third parties

Onboarding and offboarding

Getting started
Subject to the option selected, we provide:

1. An introductory session with a senior team, to discuss strategy for use of the platform (organisation wide license).

2. Implementation services to help generate engagement (organisation wide license, up to 5 days).

2. Communications materials for use with your organisation.

3. Onsite 'train the trainer' sessions for those interested in facilitating the use of the platform (if required, extra cost).

4. Onsite 'introduction to managers' sessions to introduce your managers to the Team Review tool, and how to run a team development process with their team (if required, extra cost).

5. Team facilitation and coaching services (if required, extra cost).
Service documentation
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
We collect limited data with the user registration process (email address, and password generated to log in). We also keep a record of the titles given to reviews that are set up, which are linked to the user. All other elements are accessed anonymously.

If a user would like their identifiable data removed at the end of the contract, they are signposted to email who will complete that request.
End-of-contract process
At the end of the contract, access to the platform is rescinded unless further arrangements have been made. There is no cost.

Using the service

Web browser interface
Supported browsers
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install
Designed for use on mobile devices
Differences between the mobile and desktop service
The platform is designed to be Mobile First.
Service interface
Customisation available
Description of customisation
The platform can be customised with an organisation's logo and colour scheme. Customers provide us with their brand guidelines / logos, and we implement the scheme in discussion with the customer.

We offer a selection of communication / email templates for introducing the platform to the organisation, which are also customised with a logo, client branding and colour scheme.


Independence of resources
The platform is hosted on open stack servers (currently provided by Memset), with backup potential with other providers.

Platform use is monitored and scalable at short notice.


Service usage metrics
Metrics types
We will provide data on the number of team reviews, 360 reviews that have been set up by your organisation, on request.

Google analytics is implemented on the site from which we can provide certain organisation specific data (e.g. site visits, time on platform, etc).
Reporting types
Reports on request


Supplier type
Not a reseller

Staff security

Staff security clearance
Staff screening not performed
Government security clearance

Asset protection

Knowledge of data storage and processing locations
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Datacentre security standards
Managed by a third party
Penetration testing frequency
Protecting data at rest
  • Physical access control, complying with another standard
  • Other
Other data at rest protection approach
Data held on Memset servers. Access to servers is restricted to certain people.
Data sanitisation process
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
In-house destruction process

Data importing and exporting

Data export approach
A user must be registered in order to set up a review on the site. These users are able to set up, read and download their own reviews only.

Their reviews are stored within the Review Dashboard section of the site, where the registered user can download PDF versions.

Registered users can export their data, and they can only export their own data.

No personal data is captured from unregistered users.

There is no further exporting of data available from the platform.
Data export formats
Other data export formats
Data import formats
Other data import formats
Completing forms online in HTML.

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Other
Other protection within supplier network
Encrypted database backups.

Availability and resilience

Guaranteed availability
We are hosted on Memset, and have had excellent levels of availability.

Memset's SLA is here:
Approach to resilience
The server has a number of layers of resilience. Further details are available on request.
Outage reporting
We use email alerts to nominated individuals at our clients if there is a problem with the servers going down (or other issue which interferes with use or access).

Identity and authentication

User authentication needed
User authentication
  • Username or password
  • Other
Other user authentication
Registered users are authenticated by Username and Password.

Unregistered users from within the client organisation are authenticated by IP restriction, if IP restriction is specified by the organisation.
Access restrictions in management interfaces and support channels
The platform is restricted to certain IP addresses, if requested by the client (and we are provided with IP addresses).

There are processes in place to allow employees access from outside of a client organisation, if certain steps have been taken.
Access restriction testing frequency
At least every 6 months
Management access authentication
Username or password

Audit information for users

Access to user activity audit information
You control when users can access audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
You control when users can access audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
Less than 1 month

Standards and certifications

ISO/IEC 27001 certification
ISO 28000:2007 certification
CSA STAR certification
PCI certification
Other security certifications

Security governance

Named board-level person responsible for service security
Security governance certified
Security governance approach
We are currently seeking to become Cyber Essentials certified. The previous contracting body (Change-Fx Consulting Limited) is Cyber Essentials certified, and we have recently set up this new company.
Information security policies and processes
Our information security policies and processes are governed subject to our Teams & Leadership IT Security Policy.

We review this policy quarterly. We are GDPR compliant.

Oscar Mathew is the T&L data protection officer, advising on data protection laws and best practices.

Further details and policy document available on request.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
We have a prescribed process for any changes that are made to the platform.

All prospective changes are made to a separate 'live' test server, and assessed for security impact and stability by at least 2 people.

The stability of the platform is also then assessed when any changes are moved to the client platforms upon implementation.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Drupal is kept updated and patched by way of a contract with our developer.

Infrastructure is kept updated and patched automatically nightly.

Memset has high levels of protection:
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Access is logged and we look for unusual behaviour.

Our team are vigilant over changes to the infrastructure integrity and unexpected occurrences.
Incident management type
Supplier-defined controls
Incident management approach
We operate an email help desk with users who can raise issues. We deal with each issue raised on an individual basis.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks


£12.50 to £16.50 per user per year
Discount for educational organisations
Free trial available
Description of free trial
We offer a free trial report to organisations.

Full access to the platform, including to our reviews and improve process, is allowed.

We may come and introduce the platform in person to a senior team, if required.
Link to free trial
On request:

Service documents

Return to top ↑