Innovation loves speed. Governance demands certainty. When enterprises try to unleash AI agents across customer service, finance, operations—or anywhere else—those two imperatives collide. The result is often a backlog of promising proofs‑of‑concept that stall in security review.

Our comprehensive analysis of 35,000 Google Apps Script projects across enterprise environments revealed a concerning pattern that puts organisational data at significant risk: the widespread practice of embedding sensitive credentials directly in code.

As part of our strategy for placing the highest engineering, security and compliance standards at the centre of all of our operations, Builtlist has carried out an audit process that has enabled us to receive ISO 27001 certification.

The governance of digital innovation requires a nuanced approach that balances the need for control with the imperative to foster creativity. By adopting a model of freedom within a framework, organizations can encourage grassroots innovation while managing the risks associated with digital development.

It is crucial for IT administrators to have a solid change management plan in place when considering or implementing citizen development within their organization to ensure success.