Rules for business-critical spreadsheets: owner, versions, locked formulas, backup and retirement

Almost every small company has a spreadsheet that quietly runs something important: the price calculation, the stock list, the production plan, the commission sheet. Nobody planned it as a system. It grew from a quick table into the file that the whole company depends on.

Such a file deserves a few basic rules, the same ones you would expect from any system that handles money or customers. This article lists five rules that take one afternoon to introduce and prevent the most common failures.

First, find the critical spreadsheets

Not every spreadsheet needs rules. A file is business-critical when at least one of these is true:

• A wrong number would reach a customer, a supplier or the tax office.
• More than one person depends on it every week.
• Nobody could rebuild it in a day if it disappeared.

Make a list of such files. In most small companies it has between three and ten items. Write down the file name, where it lives and who uses it. This list is the starting point for everything below.

Rule 1: one owner

Every critical spreadsheet has one named owner. Not "the sales team" and not "whoever has time", but one person with a name.

The owner does three things: decides who may edit, approves changes to formulas, and answers when something looks wrong. The owner does not have to do all the editing. They are the person others ask before they change the structure.

Also name a deputy. When the owner is on holiday or leaves the company, the file must not become orphaned.

Rule 2: one current version with a clear name

The classic problem is a folder with prices.xlsx, prices_final.xlsx, prices_final2.xlsx and prices_final_NEW.xlsx. Nobody knows which one is used.

Two habits solve it:

1. One live file in one place. Keep it in a shared folder or a shared drive, and let people work in that file, not in copies sent by email.
2. A version name for each real change. When the structure or formulas change, save a dated copy such as prices_2026-10-23_v4.xlsx in an archive folder and write one line about what changed.

Changes to input values do not need a new version. Changes to formulas, columns or rules do.

Rule 3: lock the formulas

Most spreadsheet errors are not wrong inputs. They are formulas that someone overwrote with a number, deleted by accident or dragged one row too far.

Protect the sheet so that:

• Formula cells are locked. Nobody can overwrite them by typing.
• Input cells are open and visibly marked, for example with a light yellow fill.
• A short instruction sits at the top: what to fill in, what not to touch and whom to ask.

The protection password belongs to the owner and the deputy, not in the sheet itself. Locking is not about distrust. It stops honest mistakes.

Add two or three check cells, for example a total that must equal the sum of the parts, and let them turn red when the numbers do not match. A check cell costs five minutes and often catches an error the same day it happens.

Rule 4: a backup you have restored

A backup that has never been restored is only a hope. Agree on three things:

• Automatic copies. Use the version history of your shared drive, or a daily copy to a separate folder.
• Retention. Keep at least the last thirty days, and one copy per month for a year if the file feeds accounting.
• A restore test. Once a year, or after every big change, open an old copy and check that it works and shows the right numbers.

Pay attention to files that pull data from other files or from external sources. A restored copy may have broken links, and you want to find that out during a test, not during an emergency.

Rule 5: decide when to retire it

Every critical spreadsheet is a temporary solution, even if it has lasted ten years. Write down, next to the owner's name, the signals that mean it is time to replace it. Typical ones are:

• Two people regularly need to edit it at the same time.
• Checking the numbers takes longer than the work itself.
• The file is slow, or too large to open on a normal laptop.
• Only one person understands it.
• The same data is retyped into another system.

Review the list once a year. If two or more signals appear, plan the move. Our articles on four signs it is time to switch from a spreadsheet to a small tool and on moving from a spreadsheet to a small internal tool in 30 days describe how to decide and how to carry it out. When the day comes, a cutover weekend plan with rollback keeps the move safe.

The rules in this article are for the time before that, and for the files that will stay spreadsheets for good.

A one-page card for each file

Put the essentials of each critical spreadsheet on one page, or in the first sheet of the file:

The card takes ten minutes to fill in and answers most questions a new colleague would ask.

Common mistakes

• The owner is "everyone". Then nobody decides and nobody answers.
• Rules only on paper. If the sheet is not locked, the rule will be broken within a month.
• Too many files in the list. Start with the three most important ones and add others later.
• No deputy. The file works until the owner leaves.
• Forgetting copies in email. An attached older version can come back into use months later.

How to start this week

1. List the critical spreadsheets and pick the three most important.
2. Name an owner and a deputy for each.
3. Move each into one shared location and create an archive folder.
4. Lock formula cells and add check cells.
5. Set up the backup and restore one old copy as a test.
6. Fill in the one-page card and set a yearly review date.

Summary

A business-critical spreadsheet is a small system, and it needs small system rules: one owner, a clear current version, locked formulas, a tested backup and an agreed time to retire it. These rules cost one afternoon per file and prevent most of the expensive surprises.

Sources

• Our related articles linked above.
• The approach described here is common practice for small and mid-sized companies, used as a practical guide. No client results or market figures are claimed in this article.