diff --git a/TODO.md b/TODO.md
new file mode 100644
index 0000000000000000000000000000000000000000..2b13e690b8e85bb5e609fd9ee17b3dc6499acba0
--- /dev/null
+++ b/TODO.md
@@ -0,0 +1,17 @@
+# To-do
+
+* switch `ParameterValidator` to use `SECRET_KEY` if possible to minimize
+  non-standard settings
+* replace `internalNavigate` with inline flexbox layout
+* migrate to Django 4.2
+* add deployment script that runs migrations and collects static files
+* add tests for main pages returning 200
+* switch to `path` in URLconfs
+* review `apache2` directory - may be unused
+* standardise settings to replace `settings.py` and `djangocommonsettings.py`
+  with `settings/prod.py` and move `SECRET_KEY` to an environment variable
+
+
+# Done
+
+* install staticfiles app