Citizen Development: DIY Applications Without Writing Code

A buzzword I’ve recently come across is “Citizen Development”. It’s a modern way of describing how individuals without formal software development training can build applications — often with little or no involvement from IT. In simpler terms, it’s “do-it-yourself” IT for the workplace.

What is Citizen Development?

At its core, citizen development empowers individuals — often called citizen developers — to create applications using low-code (LC) or no-code (NC) platforms. These platforms typically offer user-friendly visual interfaces, drag-and-drop components, and pre-built templates. The idea is to let people quickly solve their own problems, rather than wait for IT to prioritize and deliver a solution. It’s like LEGO for application development.

This approach helps bridge the technology skills gap, where the demand for digital tools exceeds the supply of professional developers. When people with business knowledge (and some elbow grease) can build their own solutions, organizations become more agile and reduce the burden on IT teams.

Unlike traditional software development, which often requires coding expertise and lengthy timelines, LC/NC platforms allow users to create tools for data entry, workflow automation, and reporting. Most applications can be customized through settings rather than writing code. This flexibility enables users to iterate faster and take ownership of their solutions, improving productivity and engagement.

Some popular LC/NC tools include Microsoft Power Platform and Airtable. I’ve used both Microsoft Power Apps and Power Automate in several projects as well as Airtable to build a static site contact form for this website.

New Term, Old Concept

While the term “citizen development” may be new (add it to your buzzword bingo card), the concept isn’t. As someone who has worked in IT for years, I’ve seen many of these ideas return in new forms. They often come with a fresh label but carry the same underlying goal: enabling business users to build their own tools without relying on developers. I’ll note a few examples here, though this is simply my perspective — not an exhaustive list or accurate timeline.

Even before LC/NC tools existed, platforms like Microsoft Excel offered automation through macros. A user could record a series of steps and automate repetitive tasks using Excel Macro Language (XLM) and later Visual Basic for Applications (VBA). This empowered non-programmers to process data or format reports, although modifying the macro often required some coding knowledge and the macros weren’t easily scalable.

The trend continued with fourth-generation programming languages (4GLs) and tools like Visual Basic, which introduced drag-and-drop design for desktop applications. While users could build interfaces visually, adding functionality to components still required programming skills.

Then came WYSIWYG HTML editors like Microsoft FrontPage and Adobe Dreamweaver, which allowed users to build web pages through visual interfaces. These tools made web development more accessible, but they still had limitations on what could be created without writing code. Additionally, the underlying code they generated was often bloated and non-standard, making it difficult to maintain.

Business Process Management (BPM) platforms followed, with visual workflow builders designed to let business users automate approval processes and other operations. In practice, simple flows were easy to configure, but anything beyond basic tasks often required IT support.

Later, Web Content Management Systems (WCMS) like WordPress, Wix, and Squarespace made it possible for anyone to launch a website without coding. Users could select a theme, enter content, and publish. However, as I’ve experienced firsthand with WordPress, deeper customization often required coding — and sometimes more effort than coding from scratch.

Today’s LC/NC platforms are simply the next step in this long evolution, offering more power and flexibility than ever before.

Challenges of Citizen Development

While citizen development offers major benefits — faster delivery, increased agility, and reduced IT workload — it also introduces risks that must be managed. Without oversight, user-built applications can create security vulnerabilities, compliance issues, and integration problems.

Anybody Can Do IT, but Can They Do IT Well?

Because computers are everywhere, there’s this common misconception that “anybody can do computers” (yes, someone actually said that to me). But owning a laptop and knowing your way around a browser and Microsoft Office doesn’t mean you’re ready to build business systems. I mean, I own a hammer — but nobody’s hiring me to build a house.

By definition, citizen developers are not trained software engineers. While their business expertise is valuable, they may lack the technical knowledge to build applications that are secure, scalable, and maintainable. As applications grow, performance can degrade if scalability wasn’t contemplated as part of the design. Long-term maintenance also becomes difficult if the original creator leaves and the application lacks documentation or standard design practices.

Without development standards, applications may vary widely in appearance, usability, and functionality, leading to confusion and redundancy. This inconsistency reduces overall efficiency and makes system integration harder.

From a security perspective, non-technical users may overlook critical practices such as access controls, data encryption, system patching, and secure authentication. These gaps can expose the organization to data breaches and unauthorized access.

From a compliance standpoint, user-created applications may fail to meet internal policies or external regulations such as GDPR, HIPAA, or industry-specific standards. For example, collecting customer data without consent mechanisms or proper audit trails could result in legal penalties or reputational damage.

Another growing concern is shadow IT — applications created and used outside of IT’s knowledge or control as well as the labor needed to support them. While often well-intentioned, shadow IT solutions can bypass security policies, create data silos, and complicate enterprise architecture. They may also duplicate existing systems, leading to unnecessary overhead and confusion.

Replacement for IT?

Will citizen development replace traditional IT? No — but the relationship may evolve as business users adopt a more digital mindset. LC/NC platforms are typically used to build simple applications and basic automated workflows, making them well-suited for creating small, task-specific tools. IT remains essential for developing and maintaining complex systems, managing infrastructure, enforcing security and compliance, and ensuring scalability and integration. IT will also continue to establish and govern the foundational platforms that citizen developers build upon.

Summary

Citizen development is reshaping how organizations build and deliver digital tools. With thoughtful implementation, it empowers employees, accelerates innovation, and reduces dependency on IT. But success requires strong governance, proper training, and ongoing collaboration between business users and IT teams.