When an Employee Leaves: A Technology Offboarding Checklist for Your Business

An employee leaves the company.

HR handles the paperwork. Their manager collects the keys. Coworkers say goodbye. Someone gathers the laptop, and everyone gets back to work.

Then, a few weeks later, someone asks:

“Did we ever turn off their email?”

It happens more often than you might think.

Employee offboarding involves several people, multiple systems, and plenty of small details. When everyone assumes someone else handled the technology side, an old account, personal device, or shared password can easily be overlooked.

It does not necessarily mean anyone was careless. It usually means the organization did not have one clear process everyone could follow.

Whether an employee leaves on good terms, retires, changes roles, or departs unexpectedly, the technology side of the transition deserves attention.

Here are the items every organization should include in its employee offboarding process.

1. Tell IT Before the Employee Leaves

Whenever possible, your IT team or provider should know about an employee’s departure ahead of time.

They need to know:

• Who is leaving

• Their final working date and time

• Which devices they use

• Which systems they can access

• Who should receive their files or email

• Whether the departure is planned or immediate

Timing matters.

Disabling an account too early can interrupt someone’s final workday. Waiting too long can leave company information accessible after that person is no longer employed.

For a planned departure, IT can prepare everything in advance and make the necessary changes at the appropriate time. For an unexpected departure, access may need to be removed immediately.

Either way, IT should not find out that someone left when another employee calls two weeks later asking what to do with the laptop.

2. Disable Accounts and End Active Sessions

Company email is usually the first account people remember, but it is rarely the only one.

Depending on the employee’s role, they may have access to:

• Microsoft 365 or Google Workspace

• Computers and mobile devices

• Accounting or payroll systems

• Customer-management software

• Cloud storage

• Industry-specific applications

• Vendor websites

• Remote-access tools

• Social media accounts

• Internal communication platforms

Disabling an account may not automatically sign the employee out of every phone, tablet, browser, or application where they are already logged in.

Your IT team should also end active sessions, remove authorized devices, revoke remote access, and confirm that the former employee can no longer reach company information.

This is especially important when employees have used personal phones, tablets, or computers for work.

3. Recover Company Equipment

Most organizations remember the laptop, but employees may have other company property as well.

That could include:

• Desktop computers

• Monitors

• Docking stations

• Mobile phones

• Tablets

• Headsets

• Security keys

• Access cards

• Chargers and accessories

• Specialized equipment

Maintaining an equipment list for each employee makes this much easier.

Instead of relying on someone’s memory, the organization has a record of exactly what was assigned. This is helpful during offboarding, but it also makes everyday equipment management much simpler.

Once equipment is returned, it should be inspected and secured before it is given to someone else. Company information should be preserved when necessary, and the device should be properly prepared for its next user.

Simply handing the previous employee’s laptop to a new employee is not a complete offboarding—or onboarding—process.

4. Decide What Happens to Email and Files

Immediately deleting an employee’s account can create a different kind of problem.

Their mailbox may contain customer conversations, project details, vendor information, contracts, or other records the organization still needs.

Important documents may also be stored in the employee’s OneDrive, Google Drive, local computer folders, or another cloud service.

Before deleting anything, decide:

• Who should receive the employee’s files

• Whether email should be forwarded

• Who will monitor incoming messages

• How long the mailbox and data should be retained

• Whether an automatic reply should be created

• Which records must be preserved under company policy or legal requirements

The goal is to protect the organization’s information without leaving the former employee’s account active indefinitely.

This step also helps prevent customers and vendors from sending important messages to an inbox no one is watching.

5. Review Shared Passwords

Ideally, every employee should have an individual account.

In reality, many organizations still have at least a few shared logins.

An employee may know the password for a social media page, vendor portal, Wi-Fi network, alarm system, shared mailbox, or another business service.

If a departing employee had access to a shared password, that password may need to be changed.

This is also a good opportunity to look at why the password was being shared in the first place.

A password manager or properly configured user permissions can often give employees the access they need without requiring everyone to know the same login information.

Individual accounts are easier to manage, easier to remove, and much easier to track.

6. Transfer Ownership and Administrative Access

Sometimes an employee is more than a user.

They may be the administrator—or even the only administrator—of an important business account.

We have seen business services created using an individual employee’s email address, phone number, or multi-factor authentication method. Everything works normally until that person leaves and someone else needs to make a change.

Before the employee departs, confirm that the organization controls:

• Website and domain registrations

• Social media pages

• Cloud services

• Software subscriptions

• Vendor accounts

• Administrative portals

• Multi-factor authentication methods

• Billing and renewal information

An important company account should never depend entirely on one employee’s personal email address or phone number.

The organization should know which accounts it owns, who has administrative access, and how that access can be transferred when responsibilities change.

7. Do Not Forget Physical and Third-Party Access

Technology access extends beyond computers and email.

The employee may also have a door code, building badge, alarm code, VPN connection, company credit card, or access to a customer’s system.

Consider every place the employee could enter—physically or electronically.

For employees who worked directly with vendors, customers, or outside partners, someone may also need to notify those contacts and assign a new point of contact.

The goal is not to assume the worst about the person leaving.

It is simply responsible business practice to remove access that is no longer needed.

8. Use the Same Checklist Every Time

A good offboarding process should not depend on someone remembering what happened the last time an employee left.

Create a checklist shared by management, human resources, payroll, and IT. Clearly define who handles each step and when it must be completed.

The checklist might include:

• Notification to IT

• Account shutdown time

• Equipment collection

• File and email transfer

• Password changes

• Administrative account review

• Building-access removal

• Customer and vendor notifications

• Final confirmation that offboarding is complete

The same process may not fit every employee, but having a consistent starting point makes it much less likely that something important will fall through the cracks.

It also makes the process easier for everyone involved. Nobody has to wonder whether another department handled a particular step.

Offboarding Should Be a Team Process

Employee offboarding is not solely an IT responsibility.

Human resources knows when the employee is leaving. Management understands which information and relationships need to be transferred. IT knows which accounts, devices, and systems require attention.

The process works best when everyone communicates.

If you read through this list and thought, “I’m not sure who handles all of that here,” you are not alone.

That is exactly why a written offboarding process is so valuable. It gives everyone a shared plan and protects the organization without relying on one person to remember every detail during an already-busy transition.

CNR Technologies helps organizations manage employee access, secure returned devices, preserve important company information, and establish repeatable onboarding and offboarding processes.

Because when someone leaves, you should be able to wish them well and move forward, not discover months later that an important account was forgotten.

Let us worry about IT, so you don’t have to.