ISO 27001 certified processing
Information security is built into how we develop, operate and support the LeadScale Engine. Our ISO/IEC 27001:2022 certification reflects the information security management system (ISMS) that governs this work.
Leadscale Engine Limited holds ISO/IEC 27001:2022 certification. Our ISMS provides a structured approach to managing information security risks, with documented controls, responsibilities and ongoing review across our software and consultancy services. The certificate details the holder, scope and validity dates below.
Certificate holder, scope and dates
Certificate holder
Leadscale Engine Limited
Standard
ISO/IEC 27001:2022
Certificate number
18666-ISMS-001
Certification body
ISOQAR
Initial registration
September 2020
Reissued
2 September 2026
Stated expiry date
15 September 2029
The certificate states its scope as:
The design, development, delivery, operation and ongoing support of Leadscale Engine Limited's software and consultancy services. In accordance with Statement of Applicability version 3.
It also states the condition for remaining current:
This certificate will remain current subject to the company maintaining its system to the required standard. This will be monitored regularly by ISOQAR.
Our certification covers the named company and the services described in the scope above. You can review the original certificate as part of your supplier assessment.
How our ISMS shapes the way we work
Our ISMS governs how we plan, develop, deliver and support our technology and technical services. It gives our teams a methodical, controlled and transparent way to manage security requirements, assess risks, document decisions and maintain the resilience of the infrastructure supporting client data processing.
Security controls across data processing
The LeadScale Engine is hosted on Microsoft Azure and supports controlled, traceable processing across connected systems. These operational controls help your team understand who can work with data, what has happened to a record and where it has been delivered. Read more about our Compliance and Governance capabilities.
- Access and permissions. User roles and permissions help restrict access to authorised people and control who can view or change data and configurations.
- Hosting and infrastructure. The LeadScale Engine is hosted on Microsoft Azure, with infrastructure security and operational practices governed by our ISMS.
- Audit trails. Record histories capture source information, timestamps, consent and relevant metadata, together with processing steps and delivery destinations. These logs support investigation, reconciliation and responses to data subject access requests.
- Configured processing. Checks, routing rules and system-to-system delivery can be automated, reducing manual handling and providing a consistent record of how data was processed.
- Retention and removal. Where configured, records follow agreed retention periods and secure disposal processes; authorised privacy requests can trigger deletion or irreversible anonymisation.
How this supports your governance requirements
LeadScale helps clients support their obligations under data protection and privacy regulations, including GDPR, UK GDPR, CASL and CCPA, through configurable consent and provenance controls, data processing rules, access permissions and audit trails. The requirements for each programme are agreed with the client, who remains responsible for determining the lawful basis and permitted uses of their data.
Our ISO 27001 certification provides assurance about the management system governing our work. The LeadScale Engine provides practical controls that help you apply your own data governance requirements, including access management, traceability, consent records and controlled routing between systems.
Our API-first approach also helps reduce manual transfers and repeated handling of data. Processing and delivery can follow agreed rules, with audit logs showing the path each record took. For more detail on these capabilities, see Compliance and Governance and our Integrations pages.
Questions for your security review
Does ISO 27001 certification make a particular use of data compliant?
Certification applies to our information security management system within the stated scope. Your legal obligations, data uses and the responsibilities of each party still need to be assessed for the specific engagement.
How does LeadScale support our data governance processes?
We configure the Engine around your agreed processing rules, access requirements and delivery destinations. Source, consent, processing and delivery histories help your teams trace how data was handled. Controller and processor responsibilities are established for each engagement.
Discuss your security and processing requirements
Review our ISO 27001 certificate, explore Compliance and Governance, or talk to our team about the systems, controls and data processes you need to manage.
Talk to us
If you want to discuss a demand programme, your data or how the LeadScale Engine could fit the systems you already use, talk to the team.
Or request a free audit of leads from a recent programme.