The Training Room built a GDPR request tracker, ironically unsecured

“We only need it until the migration.”— Managing Director

Reason:

Because the CEO found the one button that does not work. Started as Budget2026_use-this-one.xlsx with a script attached.

Built by:

Bastian, someone from Procurement

Build time:

19 minutes

Built with:

whatever the AI picked first

Database:

an audit table that nobody has ever queried

Authentication:

the password manager is memory

Deployment:

deployed into production because staging was broken

Responsible:

nobody officially, Olivier emotionally

Documentation:

a Slack message saying "I'll document this later"

Security situation:

the app is secure because the browser shows a padlock

Future disaster:

It will become business critical in 17 months.

Age: 1.7 years · originally expected to last 14 days · 2 owners so far · last meaningful change 420 days ago · original builder left 30 days ago

Rated common mostly because: alive 45x longer than intended, nobody owns it, the builder has left.