TEAMS AND LEADERSHIP LIMITED

Teams and Leadership Platform

Teams and Leadership Platform provides confidential 360 feedback and team diagnostics for public sector development. The platform gathers anonymous inputs to produce actionable reports, improving leadership, team dynamics, and psychological safety. It supports workforce wellbeing through structured reflective learning. UK-hosted on AWS. Optional configuration to align with organisational competency frameworks.

Features

• Confidential 360 feedback with contributor input for development
• Team diagnostics with stakeholder feedback to build positive team dynamics
• Unlimited reviews under organisation wide licence model
• Configurable question sets aligned to buyer competency frameworks
• Anonymised development processes with strict confidentiality thresholds to protect participants
• Evidence-based guidance and practical exercises for all staff levels
• Admin dashboards for real-time tracking and organisational theme analysis
• Mobile first with PDF reports
• UK-hosted on AWS UK Region ensuring data sovereignty
• Support via email or ticket with clear response targets

Benefits

• Improve leadership effectiveness through clear feedback and practical actions
• Strengthen team working by highlighting themes and friction points
• Identify strengths and development priorities quickly across teams and leaders
• Enhances wellbeing and psychological safety through confidential, supportive feedback processes
• Track progress over time using repeated reviews
• Client dashboard to monitor cross-organisation development needs over time
• Create consistent development language across the organisation
• Improve engagement by signposting to tailored resources and exercises
• Provide evidence for development conversations and coaching follow up

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at oscar.mathew@teamsandleadership.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

835845171761771

Contact

Oscar Mathew
07779292666
oscar.mathew@teamsandleadership.com

About the service

• Service categories:
  • Applications
    • Enterprise resource management
      • Human capital management
        • Talent Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Browser-based SaaS accessed over HTTPS. Requires internet access, a modern supported browser, and users able to receive email invitations. Planned maintenance is communicated in advance. Support is provided during UK business hours.
• System requirements:
  • Internet access to the public web over HTTPS
  • Supported modern browser
  • Users able to receive email invitations and links
  • Buyer allows access to teamsandleadership.net via web filtering
  • No local installation or administrator privileges required

User support

• Email or online ticketing support: Yes
• Support response times: We endeavour to respond within 2 hours during 9am to 5pm UK time Monday to Friday. Requests received outside these hours are responded to the next working day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Standard support is included within the service price.; ; Implementation support and onboarding are included. Optional enhanced support and account management can be agreed in the call-off, including onsite training or facilitation at additional cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We support onboarding with an initial remote setup session covering configuration, cohort setup, and internal communications. We provide online guidance and user documentation for administrators and participants, including step-by-step instructions for setting up reviews, inviting stakeholders, completing questionnaires, and accessing reports and development resources. Onsite onboarding, workshops, or facilitated sessions can be provided at additional cost where required.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our documentation is provided in plain English with clear headings and short sections. It is available online and can be provided in accessible formats on request. We aim to use readable fonts, good contrast, and descriptive link text, and to avoid conveying meaning by colour alone. Where a user requires reasonable adjustments, we will provide support and alternative formats as needed.
• End-of-contract data extraction: At end of contract, the buyer can request an export of their organisational data and reports from the supplier. Individual users can request a copy of their personal data via the support email address. Exports are provided securely in agreed formats (for example PDF reports and CSV extracts where appropriate) in line with data protection requirements and confidentiality safeguards.
• End-of-contract process: At contract end, buyer access to the service ends on the agreed expiry date unless the contract is renewed. The supplier will support offboarding by confirming the end date, disabling access, and providing data extraction on request. A standard export of anonymised data is available. Data is retained and deleted or anonymised in line with the agreed retention schedule and data protection requirements.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The service is mobile first and responsive, and works on modern mobile browsers. Core functionality is the same on mobile and desktop. Some admin tasks and viewing longer reports are easier on a larger screen. No native mobile app is required.
• Service interface: Yes
• Description of service interface: Users access the service through a secure web browser interface over HTTPS. Participants complete questionnaires, view their outputs, and access linked development resources within the platform. Users access a dashboard to set up and manage reviews, and track progress . No local installation is required.
• Accessibility standards: None or don’t know
• Description of accessibility: While we have not completed formal WCAG 2.2 certification, our platform is built on a responsive web framework using semantic HTML to support keyboard navigation and screen readers. We provide all core reports in structured PDF formats and can provide alternative formats (e.g., large print or plain text) upon request as a reasonable adjustment. We are currently implementing a roadmap to achieve full WCAG 2.2 AA compliance by the end of 2026 (see section 12 in the Service Definition Document).
• Accessibility testing: We have carried out an informal accessibility review with a UK charity supporting blind and partially sighted users. They reviewed key user journeys in the platform and provided feedback on usability with assistive technology. We made colour scheme changes as a result. We have not completed a formal third-party WCAG 2.2 or EN 301 549 audit of the full service interface.
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Configuration options include applying organisation branding (logo and colours), and selecting from a number of pre-existing team and individual reviews. Customisation is carried out by the supplier. All customisation is agreed with the buyer and implemented within the standard platform. Buyers can fully customise questionnaires and reporting to align to their competency framework, values, and leadership programmes at additional cost.

Scaling

• Independence of resources: The service is hosted on AWS in the UK. Capacity and performance are monitored and managed to maintain service performance as usage varies. Customer data is logically separated with role based access controls and isolation controls within the hosting environment. Backup and recovery processes are in place to support service continuity. These measures help ensure one customer’s demand does not adversely affect other customers’ use of the service.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide an admin reporting dashboard showing service usage metrics including user registrations, surveys created, and aggregated average ratings by topic across selected survey types and date ranges. Reports can be filtered by survey type and time period, and exported as CSV or PDF. The dashboard supports monitoring adoption and participation over time and identifying development themes at organisational level.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: Less than once a year
• Penetration testing approach: In-house
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Users export data by downloading reports from the platform . Buyer administrators can request a structured export of organisational data and reports from the supplier via the support channel. Exports are provided securely in agreed formats, with confidentiality safeguards applied where required.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: Not applicable. Users do not upload data files.

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We aim to provide high availability for the service and monitor availability and performance continuously. The platform is hosted on AWS and benefits from AWS service resilience and availability commitments for the underlying cloud services. We target at least 99.9% monthly availability, excluding planned maintenance. Planned maintenance is communicated in advance where possible.; ; If we do not meet the agreed availability level, we will provide incident reporting and a remediation plan.
• Approach to resilience: The service is hosted in AWS UK region and is designed for resilience through the use of managed cloud infrastructure, regular encrypted backups, and monitored service health. The platform is operated with documented recovery processes so that, in the event of an outage or data issue, service can be restored using backups and recovery procedures. Availability and performance are monitored and incidents are handled through an incident management process with communication to affected buyers. Further detail on the resilience approach, including backup and recovery arrangements, is available on request.
• Outage reporting: We report outages and service disruption via direct email updates to nominated buyer contacts. Where an incident affects multiple users, we provide updates during the incident and a summary once resolved, including cause, impact, and actions taken.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support functions is restricted to authorised personnel and buyer-nominated administrators. Administrative permissions are role based and granted on a least privilege basis. Support requests are handled through controlled support channels and verified against known buyer contacts before action is taken on an account. Administrative actions are logged for audit purposes. Access is reviewed periodically and removed promptly when no longer required.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: No
• Security governance approach: We maintain documented security policies and procedures covering access control, incident management, backup and recovery, and data retention and disposal. We align secure development and change management to good practice, and carry out internal security testing. Access is restricted on a least privilege basis and reviewed periodically, with audit logging for administrative activity. The service is hosted in AWS UK and uses encryption in transit and at rest. We hold Cyber Essentials certification and provide assurance evidence on request.
• Information security policies and processes: Security governance is led by the Director and supported by technical roles, with policies reviewed annually for alignment with the Data (Use and Access) Act 2025. We implement role-based access controls, least-privilege permissions, and MFA for all administrative accounts. Operations follow Cyber Essentials standards, including nightly encrypted backups, change control, and continuous audit logging. Compliance is verified through regular risk assessments, system logs, and internal audits. Documented procedures for incident management, data retention, and disposal are in place, with DPA/DPIA assurance available on request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We operate supplier-defined change control for the platform and hosting configuration. Service components and configuration are tracked through version control and documented release notes. Changes are reviewed, tested, and deployed through a controlled release process. Security impact is considered as part of change assessment, including review of access controls, data handling, and dependency updates where relevant. Rollback procedures are in place if a release introduces issues. Changes that materially affect buyers are communicated, and planned maintenance is notified in advance where possible.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We manage vulnerabilities via automated AWS scanning and periodic internal testing. Critical patches (Laravel/PHP) are triaged by risk and deployed rapidly through controlled change management, ensuring continuous platform security and resilience.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We use supplier-defined protective monitoring. We monitor service availability, errors, and unusual activity through cloud and application logs and alerting. Potential compromises are identified through anomalies such as repeated failed logins, unusual access patterns, unexpected configuration changes, or integrity alerts. When a potential compromise is detected, we triage immediately, restrict access if needed, investigate logs, and contain and remediate the issue. We notify affected buyers as appropriate and provide an incident summary and actions taken. Incidents are acknowledged and triaged as soon as practicable during business hours, with urgent issues prioritised.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: We have a documented incident management process with predefined steps for common events such as service outages, suspected security issues, and access problems. Users report incidents via our support email or ticketing channel. Incidents are triaged by severity and impact, with containment and recovery actions taken as needed. We provide updates to nominated buyer contacts during significant incidents and issue a post-incident summary where appropriate, including impact, root cause, and corrective actions. Incident learnings are reviewed and used to improve controls and prevent recurrence.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Full access trial of all platform features on request, for a period to be agreed (usually 2 weeks).

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 5%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 0cccf95c-2b39-4584-8c61-9ac4dc7d6b92
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at oscar.mathew@teamsandleadership.com. Tell them what format you need. It will help if you say what assistive technology you use.