The Spreadsheet Running Your Company Is a Risk You Haven’t Priced

Most founder-led companies have at least one spreadsheet doing a job that is far more important than anyone intended.

It might be tracking the cash position, calculating prices, recognising revenue or holding together the assumptions behind the entire business model.

It was probably never designed to become a critical system. Someone built it quickly because the company needed an answer, and it worked well enough to get through the next few months.

Then the company grew, more people started using it, more formulas were added and, without anyone formally deciding it, the spreadsheet became part of the company’s infrastructure.

At that point, it is no longer just a productivity tool. It has become a business risk.

Growth often moves faster than the systems underneath it

This usually happens gradually.

Revenue increases, the team expands and the number of customers grows. But many of the processes underneath the business remain largely the same as they were when the company was much smaller.

Nobody deliberately chooses to operate this way. Controls, reporting processes and system improvements are rarely the most urgent items on a founder’s list.

Boards want to discuss growth, customers and the next funding round. They do not normally ask to see how a monthly reconciliation is performed or how changes to the financial model are recorded.

So growth gets attention and resources, while the systems supporting it are patched together whenever somebody has time.

For a while, that can work perfectly well.

The problem is that a fragile process often looks exactly like a reliable one until something goes wrong.

A manual formula error can sit unnoticed for months. Several people can be working from different versions of the same file. One employee may be the only person who understands how a model works or where an important figure comes from.

Then a board member asks a question that cannot be answered cleanly. A number in the data room does not reconcile with the management accounts. The person who normally updates the model is unavailable when it urgently needs to be changed.

What looked like a convenient spreadsheet suddenly becomes a bottleneck.

What trading operations taught me about controls

I spent six years running trading and operations for international teams.

In that environment, risk management and performance controls were not separate administrative exercises. They were part of how the business operated every day.

When real money is moving through a system, “the spreadsheet normally works” is not a reassuring answer. A weak process can result in a measurable loss within hours.

The feedback loop in a founder-led company is often much slower.

A weak control in a trading business may become visible the same day. A weak control in a scaling SaaS, healthcare or technology company may not become obvious for another year.

It often appears at the worst possible time: during a funding round, an audit or a major commercial decision.

An investor asks why two reports show slightly different revenue figures. The team gives an explanation, but the answer leads to another question. Then another.

The issue may have started with one spreadsheet, but it quickly becomes a question about how much confidence an investor can place in the company’s numbers and processes.

The lesson I took from trading operations was not that every business needs complicated controls.

It was much simpler: understand what could go wrong, make sure you would notice if it did, and do not allow critical knowledge to sit in one person’s head or one unreviewed file.

When an internal inconvenience becomes a commercial problem

Investors do not only look at the numbers a company presents. They also want to understand where those numbers came from.

Was revenue produced from a consistent reporting process, or assembled manually before the meeting?

Can someone other than the founder explain how the forecast works?

Is there a clear record of which assumptions changed, who changed them and why?

Can the company reproduce the same answer next month?

A financial model that only one person understands is a risk. So is a pricing tool with no review process, a cash forecast updated manually from several bank accounts, or a customer profitability report based on assumptions nobody has revisited for a year.

These are not necessarily signs of a badly managed company. They are often normal signs of a business that has grown faster than its operating infrastructure.

But once investors, lenders or potential buyers become involved, they stop being purely internal issues.

They begin to affect confidence, valuation and the speed at which a transaction can move forward.

The answer is usually not a large systems project

Most founder-led companies do not need to replace every spreadsheet with an expensive enterprise platform.

That can create just as many problems as it solves.

The better answer is to identify which spreadsheets and manual processes have become critical to the business.

Then put proportionate controls around them.

That might mean introducing a clear owner, creating a review process, limiting access, documenting the key assumptions or making sure there is a reliable version history.

It might also mean building a simple process that another person can follow when the usual owner is unavailable.

None of those measures is particularly complicated. But together, they can prevent a small mistake from becoming a much larger problem.

The honest caveat

Spreadsheets are not inherently risky.

For many seed-stage and early-growth companies, they are still the most flexible and appropriate tool available. Introducing formal systems too early can slow the company down, create unnecessary work and add costs before the business is ready for them.

The objective should not be to eliminate spreadsheets.

It should be to recognise when a spreadsheet has stopped being a convenient tool and quietly become part of the company’s critical infrastructure.

Because once the business depends on it, the real question is no longer whether the spreadsheet works today.

It is what happens to the company when it does not.

This article draws on operational and risk-control experience from international trading operations, applied more broadly to founder-led and scaling companies.