Standards
The Leadership & Transformation Studio designs its practice around the principles of three international standards.
An honest note: ISO 9001, ISO/IEC 27001 and ISO/IEC 42001 certify an organisation's management system through an accredited audit. We align our practice with their principles; we do not currently hold certification to these standards, and we will say so clearly if that changes.
ISO 9001
Our approach. We run every engagement through a consistent cycle: agree scope and outcomes, deliver, measure, and review. Client feedback and debrief outcomes feed back into how we improve our methods.
How assessments support it. The Five Spans uses the same fifteen statements and the same scoring for everyone, so results are consistent and comparable over time. Repeating the assessment gives a clear measure of progress after an intervention.
ISO/IEC 27001
Our approach. We collect only what we need, keep it in access-controlled systems, and restrict administration to named Studio staff. Private links use high-entropy tokens stored only in hashed form, and sponsor passwords are hashed and checked on the server.
How assessments support it. Individual answers are never shown in team or organisation reports. Combined results stay hidden until at least three people have completed, so no one can be identified from the numbers.
ISO/IEC 42001
Our approach. AI is optional and used only with explicit agreement. No names or contact details are sent to the AI service, and it is limited to one reflection per completed assessment.
How assessments support it. Your scores are always calculated by our own fixed method, never by AI. Any AI reflection sits alongside the verified result as a prompt for thinking, not a judgement.
Change succeeds when people feel seen, heard and able to contribute.
We say what we know, are honest about what we don't, and never overstate what we hold.
What you share with us is treated as entrusted, not owned.
We measure, reflect and adjust, in our own practice as much as yours.
See how we work, our security, data retention and AI policies, and how we handle personal information in our privacy notice, or ask us about our controls.
