Whoever Had Admin Rights built a GDPR request tracker, ironically unsecured

“The database isn't exposed. I think.”— Head of Operations

Reason:

Honestly? Because nobody could find the right SharePoint folder in 19 minutes of looking. With a roadmap in the README, last touched 141 days ago.

Built by:

Nadia, an analyst

Build time:

an afternoon, mostly

Built with:

Airtable plus four Zapier zaps

Database:

a GitHub Gist that became business critical

Authentication:

the audit log is disabled because it filled the disk

Deployment:

running on an EC2 instance somebody resized manually

Responsible:

nobody officially, Marco emotionally

Documentation:

a calendar invite description from February

Security situation:

it was reviewed once, by Nadia, who built it

Future disaster:

It will become impossible to shut down because 6 other tools depend on it.

Age: 8.0 years · originally expected to last 4 weeks · 4 owners so far · survived 1 reorganisation · last meaningful change 210 days ago · original builder left 228 days ago

Rated common mostly because: alive 98x longer than intended, nobody owns it, the builder has left.