Many nonprofits run critical operations through spreadsheets that were never designed to become permanent systems.
A workbook may calculate grant expenses, track volunteer hours, manage program capacity or prepare monthly board reports. It may contain complicated formulas created by an employee who left years ago. Staff know which cells to update, but nobody can explain how the spreadsheet works or what would happen if it broke.
That is not merely a filing problem. It is operational risk.
Find the Spreadsheets That Actually Matter
The first step is identifying spreadsheets that influence decisions, payments, reporting or service delivery.
For each important workbook, document:
- Its operational purpose
- The employee responsible for it
- The source of its data
- The meaning of important fields
- The formulas or macros it relies on
- Who may edit or approve it
- Which reports depend on it
- How errors are detected
- What system should ultimately replace it
- What happens when the owner is unavailable
A spreadsheet used for an informal contact list does not require the same controls as one calculating payroll allocations or grant reimbursements. The nonprofit should prioritize files according to their operational and financial consequences.
NIST guidance on testing spreadsheet applications recommends assessing spreadsheet risk according to factors such as complexity, data use and the consequences of errors. It also emphasizes testing important spreadsheets rather than assuming formulas are correct because the workbook has been used for years. (NIST)
Stop Treating Personal Drives as Systems
Critical workbooks should not live exclusively on an employee’s computer, personal OneDrive folder or email account.
SharePoint should serve as the organized knowledge source for approved spreadsheet instructions, data definitions, ownership records and related procedures. Important files may also be stored in controlled SharePoint libraries when that is operationally appropriate.
Microsoft 365 version history can preserve earlier versions of Excel files stored in SharePoint or OneDrive, allowing authorized users to compare changes or restore a previous version. Version history provides recovery support, but it does not prove that a spreadsheet’s formulas, assumptions or source data are correct. (Microsoft Learn)
An organization should still establish review procedures, backup ownership and clear approval rules.
Know When Excel Is No Longer Enough
A spreadsheet may begin as a reasonable temporary solution and gradually become an unofficial database.
Warning signs include:
- Several employees editing separate copies
- Manual copying between systems
- Formulas understood by only one person
- Participant or donor information stored without proper controls
- Reports that cannot be reproduced consistently
- No record of who changed important values
- Decisions based on undocumented assumptions
The CRM, accounting platform, case-management system or grant-management platform remains authoritative for records that belong there. A spreadsheet may summarize or analyze exported information, but it should not quietly replace the source system.
Maisy can help employees find approved instructions, definitions and ownership information through a conversational interface built with Copilot Studio. Staff might ask who owns a workbook, where its data comes from or which system contains the official record.
Maisy should not independently validate formulas, approve financial calculations or decide whether a spreadsheet is legally compliant. Those questions still require accountants, program leaders, data specialists or other qualified reviewers.
How Maisy Helps
Pixeldust begins by inventorying important spreadsheets, identifying repeated questions, tracing authoritative data sources and locating files that depend on one employee.
Pixeldust then documents ownership, resolves conflicting versions, reviews permissions and organizes approved guidance in SharePoint. Realistic questions are tested through Maisy so employees can retrieve explanations without relying on personal memory.
This helps the nonprofit retain institutional knowledge about the spreadsheets it depends on while creating a path toward stronger systems, clearer ownership and fewer invisible operational risks.
