Is your company’s outsourced AI technology leaving it vulnerable to unexpected risk? As enterprises increasingly embed third-party systems into their workflows, technological risk has led to new legal and operational responsibilities. Leaders may have little visibility into how a model was trained or how it changes, yet when it discriminates, mishandles data, or harms a customer, regulators and plaintiffs often look first to the company that deployed it.

Every successful business relies on policies and procedures. Policies and procedures create consistency, improve quality and allow organizations to move in a unified direction.

For this reason, most successful companies have policies and procedures manuals and other written policies. Without them, companies become chaotic and inconsistent as they grow. But there is an important distinction between systems that are intentionally designed and those that simply evolve over time.

The most damaging policies in a business are often the ones that were never actually created.

These can be called made-up rules — unwritten practices that slowly become accepted as official policy, even when no owner, executive, or person with authority ever approved them. They emerge quietly and gradually. An employee assumes something is required in every circumstance. Another employee observes that behavior and repeats it. Before long, an entire department believes a process is a mandatory policy when, in reality, it is not at all.

As organizations grow, these unofficial rules have a way of growing. Each one may seem insignificant on its own, but together they create a layer of legalism that slows decision-making, frustrates employees, delays customer service and quietly limits growth. It can also upset employees by creating an abundance of rigid rules that make the employees feel restricted. Unlike obvious problems such as declining sales or rising expenses, these self-made policies and procedures are rarely visible on a financial statement. Yet, their impact can be enormous.

Good intentions can create bad processes

One of the biggest challenges is that these rules often originate from good intentions. An employee wants to avoid making a mistake, so an extra rigid rule is added to prevent a situation from repeating itself. In other instances, someone encounters an unusual circumstance and begins treating that exception as the standard procedure. Over time, isolated events become permanent rules that harm, not help the company.

The problem is that businesses rarely struggle because of one unique situation. Instead, hundreds of small, unnecessary rules accumulate over months and years. Each additional email, approval, signature, or verification adds only a minute or two. Standing alone, that seems inconsequential. Collectively, however, those minutes become hours, days and eventually weeks of lost productivity, revenue or efficiency across an organization.

Imagine an employee who must wait for an internal confirmation before beginning work, even though all of the information needed to proceed is already available. Perhaps no owner, CEO or senior leader required this waiting period. It simply became “the way we’ve always done it.” If that delay happens dozens of times each week across multiple employees, the organization begins paying people to wait rather than to produce. Customers experience slower service, revenue decreases and management wonders why the business feels less efficient despite hiring more people.

Growth often brings more red tape

This scenario becomes even more pronounced in growing companies. Startups often move quickly because communication is simple and decisions are made by a small group of people. As headcount increases, however, there is a natural temptation for mid or lower level employees to add more approvals, more meetings, more documentation and more checkpoints. While some of these additions are necessary, many are simply reactions to isolated situations rather than thoughtful improvements to the business as a whole.

Over time, employees begin confusing caution with excellence. Instead of asking, “What is the best way to accomplish this?” they begin asking, “What is the safest way to avoid criticism?” Those are fundamentally different questions. The first encourages innovation and efficiency. The second often produces bureaucracy and red tape out of a desire for self-protection.

Perhaps the most dangerous aspect of made-up rules is that no one takes responsibility for them. Ask employees why they follow a particular procedure, and familiar responses usually emerge: “That’s just what we’ve always done,” or “I thought that was company policy.” Continue asking questions, and it frequently becomes clear that no one can identify when the rule started or who authorized it. The process has simply taken on a life of its own.

Challenge every unwritten process

Business owners should periodically examine their organizations with fresh eyes. Rather than asking employees whether they are following procedures, leaders should ask why those procedures exist in the first place and who authorized them. Every recurring process should have a clear purpose. If no one can explain why a particular step is necessary, it deserves careful scrutiny. In many cases, the unwritten rule should be disavowed and eliminated.

One effective exercise is asking managers to identify the biggest obstacles that slow their teams each day. Their answers are often revealing. Employees are rarely frustrated by hard work. They are frustrated by preventable delays — waiting for approvals, tracking down information, duplicating work or complying with procedures that no longer serve a meaningful purpose. These bottlenecks consume time without creating additional value for customers or employees.

It is also important to recognize that removing unnecessary rules does not mean lowering standards. High-performing organizations absolutely need accountability, quality control and thoughtful procedures. The goal is not to eliminate structure. The goal is to eliminate red tape that adds complexity without improving outcomes. Every policy should either reduce risk, improve quality, enhance the customer experience or increase efficiency. If it accomplishes none of those objectives, or it creates more problems than it helps, it is reasonable to question whether it should continue to exist.

Speed is a competitive advantage

Business leaders often focus tremendous energy on generating more revenue. They invest in advertising, marketing, recruiting and technology to accelerate growth. Yet, they sometimes overlook the operational drag occurring inside their own organizations. A company can spend millions of dollars attracting new customers while simultaneously slowing those customers’ experience through unnecessary internal processes. Removing friction is often one of the least expensive — and most profitable — ways to improve performance.

In today’s competitive environment, speed has become a meaningful differentiator. Customers have more choices than ever before, and they increasingly expect prompt responses, efficient service and straightforward interactions. Organizations that eliminate unnecessary delays position themselves to deliver a better experience without spending additional money on customer acquisition.

The best leaders understand that their role is not simply to create new policies. It is also to challenge existing assumptions. They recognize that every process should earn the right to continue existing—and should not be professed as policy without the company specifically authorizing it. As businesses evolve, procedures that once made perfect sense may become outdated. Failing to revisit them allows yesterday’s solutions to become tomorrow’s obstacles.

Eliminate the unnecessary rules

Every organization accumulates unwritten rules over time. Meetings become longer, approvals become more numerous and workflows become increasingly complicated. Left unchecked, these changes gradually reduce the agility that once fueled growth. Successful companies recognize that maintaining operational excellence requires periodic auditing and removal of these unwritten rules. Just as businesses routinely evaluate expenses, marketing efforts and financial performance, they should also evaluate the rules employees create or follow every day.

Sustainable growth is not achieved simply by working harder or hiring more people. It is achieved by creating an organization where talented employees can perform meaningful work without being slowed by unnecessary red tape. The companies that consistently outperform their competitors are often not those with the most elaborate systems. They are the ones disciplined enough to remove the systems that no longer serve a purpose.

Sometimes the greatest improvement a leader can make is not introducing another policy. It is eliminating unwritten rules that were never approved in the first place.

Every successful business relies on policies and procedures. Policies and procedures create consistency, improve quality and allow organizations to move in a unified direction.

For this reason, most successful companies have policies and procedures manuals and other written policies. Without them, companies become chaotic and inconsistent as they grow. But there is an important distinction between systems that are intentionally designed and those that simply evolve over time.

The most damaging policies in a business are often the ones that were never actually created.