Employee offboarding and digital access: the checklist that should exist before the departure

Every access a departing person holds is a door the company owns but the employee can still open, and offboarding is the moment those doors are deliberately closed.

The farewell message is sent, the desk is cleared, the card is returned, and the departure feels finished. What nobody has thought about is the person's mailbox, the files they own on the shared drive, the social logins on their personal phone, the registrar account paid with their card, the two factor token bound to their device. The farewell closed the visible part of the relationship. The digital part stays open.

The mechanism is simple and unforgiving: every access a person holds is a door the company owns but the person can still open. While they are employed, that door is a tool. After they leave, an unclosed door is an exposure, and exposures do not announce themselves. The departure process is the moment those doors are deliberately closed or transferred, and a deliberate moment needs a list that exists before the day it is needed.

The inventory that matters is concrete. The mailbox: forward or delegate it, then close it on a schedule, so nothing arriving is lost and nothing lingers forever. Shared drives and the files the person owns: transfer ownership so nothing becomes orphaned the day their account is disabled. Social media logins, which often live on the person's phone rather than the company's. The registrar or hosting accounts bought under a personal card. Two factor tokens bound to a device that is walking out the door. Vendor and bank access held in the person's name alone.

The failure versions all trace back to access that outlived its holder. The marketing inbox that died with the employee's departure while customers kept writing to it, and every message after the last day went nowhere. The business social account only the departed employee could log into, now reachable by nobody at the company. The domain sitting in an account under a personal card nobody can now charge, discovered in the month the renewal failed.

The honest version of offboarding is a list that exists before the departure, not a scramble after it. Keep, for each role, the list of what that role can reach while it holds it: mail, drives, accounts, tokens, registrations. The list turns a departure from an investigation into a checklist, and it also shows, while everyone is still employed, where the company depends on exactly one pair of hands.

Run the checklist on the known date, and transfer rather than delete. Transfer ownerships instead of deleting blindly, because deletion hides history: the files, the threads, the record of who decided what. Close what must be closed in writing, with a date and a name against each line, so the closure itself leaves a record. What remains afterwards is a clean boundary: the person keeps their personal accounts, the company keeps its doors.

Guidance, not guarantees: we run our own operations this way, and the rule we hold to is that ownership is settled while the relationship is alive, so the departure is administration instead of archaeology. The employment law aspects of access, monitoring, and personal devices belong to practitioners in your jurisdiction, and provider specifics belong to provider documentation. The structure above holds anywhere: list the doors, transfer the ownerships, close what must be closed, in writing.