The World’s Most Dangerous Spreadsheet

How Version Control Failures Put Workers at Risk

A group of workers are heading to a heliport, bags packed, ready to rotate offshore. Back at the UK head office, someone is confident those workers have everything they need. The ops manager’s spreadsheet says so. So does the one in Stavanger. And the one that was emailed over last week.

The problem? Nobody is sure which version is right.

That’s not a hypothetical. Iain Taylor, founder of Chorus, lived it. Working in Stavanger as a substitute operations manager for a drilling contractor, he found himself in exactly that scenario, workers arriving at the heliport without the certifications they needed to board the helicopter and get to site. No sabotage. No negligence. Just three spreadsheets, three locations, and a “File Save As” that nobody tracked.


That moment is why Chorus exists. And that moment is playing out, in some form, in hazardous industries across the UK right now.

How a Spreadsheet Becomes a Liability

Spreadsheets are not inherently dangerous. They’re actually quite good at what they were built for: organising structured data in a simple, familiar format. For a small team, in a single location, with stable requirements, a spreadsheet can do the job just fine.

The danger creeps in when that spreadsheet gets copied.

Across a large site-based workforce, you don’t have one spreadsheet. You have many. The head office has one. Each site manager has one. HR has theirs. Subcontractors send over their own. Each version starts life as a copy of another, a “Save As” from the last known version. And from that moment, they diverge.

Someone renews a certification. It gets updated in one file. Not the others. A worker moves between sites. Their record is in one spreadsheet, but not the one being checked at the gate. A certificate expires quietly, somewhere in row 847, and nobody gets an alert because spreadsheets don’t send alerts.

This is what Iain describes as the spreadsheet’s fundamental architectural flaw: it is a snapshot, not a live system. Every time you export to Excel, you’re looking at a frozen moment. The world has moved on. Your spreadsheet hasn’t.

The Chain of Events: From “File Save As” to Uncertified Worker on a Hazardous Site

Step back from the drama and trace the chain of cause and effect. It rarely starts with negligence. It starts with good intentions and a lack of the right tools.

A training manager, overstretched and working without adequate resources, builds a spreadsheet to keep track of workforce certifications. It works well enough to start. Then the team grows. More sites are added. Subcontractors join. The spreadsheet gets shared and copied.

A rotation comes around. Workers are assigned to a site. Someone checks the spreadsheet (their version) and confirms readiness. What they don’t know is that another version, used by the site operator, was last updated six weeks ago. The certification that lapsed three weeks ago? It’s still showing as valid.

The worker boards the helicopter.

When they arrive on site (potentially an offshore platform, a high-voltage substation, or a remote pipeline installation), there is no easy way to catch the error. The checks have been done. The spreadsheet said so. And now someone is working in a high-hazard environment without the training they were assumed to have.

In health and safety, practitioners use the Swiss cheese model to explain how incidents happen: individual layers of protection each have holes, and when those holes line up, harm gets through. A stale spreadsheet is one of those holes. And when it lines up with human error, a near-miss, or a moment of uncertainty on site, the consequences can be catastrophic.

Who Pays When the Spreadsheet Gets It Wrong?

According to the UK Health and Safety Executive, the primary victim of any work-related incident is the employee. They carry the physical harm, the time off, the long-term consequences. That alone should focus minds.

But the liability doesn’t stop there. If an investigation finds that a company failed to demonstrate adequate training and competence, that they could have done more, or that systems were not fit for purpose, then the employer faces substantial fines and potential legal action. The UK has seen an increasing number of cases in which charges of corporate manslaughter have been brought against company directors. The cost to UK PLC from work-related incidents runs into the billions each year.

And what about the safety manager whose spreadsheet it was? They are often the person most acutely aware of the problem. They know the spreadsheet is imperfect. They’ve been trying to keep it updated across multiple sites with insufficient resources. They are, in Iain’s words, working in isolation, carrying an enormous burden without the right tools to manage it.

When the HSE inspector walks in and asks to see training records, the safety manager’s answer, “it’s all in a spreadsheet”, is the beginning of a very difficult conversation. Because the spreadsheet will have gaps. It always does. And closing those gaps overnight, under scrutiny, is not a realistic proposition.

The Real Cost of “Free and Familiar”

The spreadsheet’s great advantage, that it’s free, and everyone already knows how to use it, is also its greatest deception. The costs it conceals are enormous.

Managing compliance through spreadsheets demands significant human resource. Someone has to update each file. Someone has to chase delegates for evidence. Someone has to cross-reference versions. Someone has to manually check expiry dates. In large organisations operating across multiple sites with subcontractors in the mix, that someone is often a whole team, or an overstretched individual doing the job of several.

Then there is the cost of uncertainty. In high-hazard industries (offshore energy, utilities infrastructure, construction), operators are not just managing compliance as a paperwork exercise. They are responsible for every person on site. When subcontractors make up as much as 80% of a workforce, and their certifications arrive via emailed spreadsheets, the margin for error is substantial.

Uncertainty, in this context, is not a mild administrative inconvenience. It is a precursor to harm.

What the Spreadsheet Can Never Be

The fundamental problem with the compliance spreadsheet isn’t that people use it badly. Most of the professionals Chorus works with are highly competent, deeply committed to the safety of their teams, and acutely aware that their systems are imperfect.

The problem is that the spreadsheet was never designed for this job. It cannot notify you when a certification is about to lapse. It cannot tell you, in real time, whether the person about to board a helicopter is currently certified to be there. It cannot reconcile itself against an HR system, or alert a line manager, or allow a worker to upload their own evidence. It is a passive document in a world that demands active oversight.

In Iain’s framing: the spreadsheet should be an output, not a source of truth. A report you generate from a live system, not the system itself. When the spreadsheet becomes the single (or multiple) source of truth, that’s when the danger is greatest.

Taking Back Control

For safety managers who know their spreadsheet is a problem but haven’t yet found a way to move beyond it, the message from Chorus is a simple one: we understand, and it’s more achievable than you think.

The right platform doesn’t replace your expertise. It handles the administration that is currently consuming your time and creating your risk (version control, expiry notifications, delegate visibility, gap identification, subcontractor management) so that you can focus on the judgement calls that only a qualified professional can make.

The workers heading to that Norwegian heliport all those years ago were let down by a process that couldn’t keep up with the complexity of the job. That’s not a story anyone in hazardous industries should want to repeat.

The technology to prevent it exists. The question is whether the tools you’re using today are up to the task.

Chorus helps hazardous industry operators move from spreadsheet chaos to workforce readiness. If you’re ready to understand what that looks like for your organisation, get in touch.