Ghost Systems: The Subscriptions Nobody Remembers

We call them ghost systems

Tools a business signed up for, forgot about, and never turned off. We find them in most of the companies we audit. Most people assume the problem is wasted money. It isn't, or at least, it's not only that.

Still running, still syncing

That $35 tool your team stopped using two years ago is still syncing your data. Nobody notices, because nobody remembers the system exists. We once found a company still paying for a CRM that had been retired in 2019. Five former employees were still listed as active admins. Client data was still connected.

Why this is worse than wasted spend

An active admin account for someone who hasn't worked at the company in years is a standing door into client data, one that nobody's watching, patching, or reviewing. If that old CRM gets breached somewhere down the line, the business is on the hook for a system it forgot it was still paying for.

A quick check worth running

For every recurring charge on the company card, ask three questions: What is this? Who actually uses it? When did someone last log in? If the answer to any of those is "I don't know" more than twice, there's a ghost system somewhere in the business. The fix isn't complicated, it's an inventory problem, not a technical one. Someone just has to actually go look.

This is exactly the kind of thing that turns up in a proper IT audit: not dramatic vulnerabilities, just quiet accumulation nobody assigned anyone to track.