Technology
Low-code platforms in government: benefits, risks, and governance
Where low-code tools help agencies, where they cause trouble, and the governance that keeps them useful.
Low-code platforms, such as Microsoft Power Platform, ServiceNow, Salesforce, and others, let staff build forms, workflows, and applications with limited coding. Agencies adopt them for speed and because they are often already licensed.
Where they help
- Internal workflows: requests, approvals, inspections, onboarding
- Replacing spreadsheet and email processes with tracked, auditable ones
- Rapid prototypes that clarify requirements before larger investment
- Departments with needs too small for IT's project queue
Where they cause trouble
- Public-facing applications with accessibility, performance, and branding requirements
- Complex data models or high volumes
- Applications holding regulated data without proper controls
- Sprawl: hundreds of apps nobody inventories, built by staff who have since left
- Licensing costs that grow with use in ways nobody forecast
Governance that works
Environments. Separate development, test, and production, with controls on who can publish to production.
Data policies. Rules for which connectors and data sources may be used, and classification of data allowed in the platform.
Inventory. Every app has an owner, a purpose, and a review date.
Standards. Naming, documentation, accessibility, and security baselines for anything used beyond its creator.
Center of excellence. A small group that supports builders, reviews apps that reach a certain significance, and decides when something should graduate to a professionally developed system.
Licensing oversight. Regular review of usage against entitlements.
When to graduate
When an app becomes public-facing, business-critical, or integrated with systems of record, it deserves the same engineering discipline as any other system, whether it stays on the platform or moves off it.
Bottom line
Low-code is a legitimate part of an agency's toolkit when governed. Ungoverned, it recreates the problems of shadow IT with better branding.