One of the growing trends in large organizations, including the universities and colleges I have worked with, is more centralized control of software and formal approvals for use of software. This is driven by increasing awareness of privacy and data issues around software. This article is a discussion of potential pressures that an approval process puts on the type of software that can be approved at all and potential weaknesses in a software approval process.