OneClickComply

    Employee Offboarding Checklist

    An employee offboarding checklist that keeps the evidence

    OneClickComply gives IT, security and compliance leads an employee offboarding checklist they can work through and prove. The Personnel page flags leavers found by directory sync, and each leaver has a checklist for disabling the account, revoking access, applying data retention, notifying the manager and returning equipment, with files attached as evidence.

    6
    offboarding checks per leaver
    2
    directories read, Google Workspace and Microsoft 365
    File upload
    evidence on each check
    THE PROBLEM

    Why leaver access is the audit finding that keeps coming back

    Leavers are where access control quietly fails. An account stays active, a laptop is never returned, a shared login is not changed, and nobody can show an auditor what was done or when. ISO 27001 and SOC 2 auditors sample leavers and ask for proof, so an offboarding process that lives in email threads and memory turns into a finding. A checklist with evidence attached to each person closes that gap.

    FEATURES

    How offboarding is tracked in OneClickComply

    Personnel page with four tabs

    The Personnel page separates people into Active, Pending, Inactive and Directory Sync tabs. Invitations stay pending until the person accepts, so you can see who has joined and who has not.

    Directory Sync with Offboarded and Review counts

    Directory Sync reads identities from Google Workspace and Microsoft 365. Suspended users are picked up as leavers. The Offboarded count shows people whose identities are all inactive, the Review count shows identities flagged for offboarding review, and an Offboarding column shows the date each person left.

    Offboarding evidence checklist

    Open a person and the detail panel lists the offboarding checks: account disabled, access revoked, data retention applied, manager notified, equipment returned and other. Each check can have a file uploaded as evidence.

    Employment Status and Review Status

    Each person has an Employment Status and a Review Status. Employment Status can be Active, Offboarded or Pending, and Review Status can be Pending Review, Reviewed or Exempted. A leaver flagged for review shows as pending review until someone changes it.

    Assets flagged for reassignment

    When a Directory Sync identity is offboarded, the assets owned by that person are flagged as pending reassignment and show as Unassigned in the Asset Register, so devices are not left against a former employee.

    Part of the wider audit trail

    Offboarding sits alongside the audit log, so you can show an auditor the evidence and the record of who changed what.

    See Employee Offboarding Checklist working on your own setup.

    Book a demo
    BENEFITS

    What a recorded offboarding process gives you

    A consistent set of offboarding checks for every leaver, not a different process each time

    Evidence files stored against each person, ready for an auditor who samples leavers

    Leavers spotted from your Google Workspace or Microsoft 365 directory, not only from HR emails

    Devices owned by a leaver flagged for reassignment instead of being left against a former employee

    One place to see who is pending review, who is inactive and who has been checked

    FAQ

    Employee Offboarding Checklist: common questions

    A good employee offboarding checklist covers disabling the account, revoking access to systems and shared credentials, retrieving equipment, applying your data retention rules, notifying the manager and keeping proof of each step. The checklist in OneClickComply covers account disabled, access revoked, data retention applied, manager notified, equipment returned and an other option, each with file upload.

    ISO 27001:2022 Annex A includes controls on termination or change of employment responsibilities (6.5), return of assets (5.11) and access rights (5.18). Auditors usually sample leavers and ask for evidence that access was removed and equipment returned, which the offboarding checklist records.

    SOC 2 logical access criteria expect that access is removed when it is no longer needed, and auditors commonly test a sample of terminated staff. An employee offboarding checklist with dated evidence for each leaver is the simplest way to answer that test.

    No. The checklist is a record, not an automation. It picks up leavers from your directory, gives you the checklist and keeps the evidence, and your team disables the account in Google Workspace or Microsoft 365.

    Not in the sense of a joiner workflow builder. Invitations to the platform stay pending until the person accepts them, and the Pending tab shows who has not yet joined.

    From Directory Sync, which reads identities from Google Workspace and Microsoft 365. Identities flagged for offboarding review are counted under Review, and people whose identities are all inactive are counted under Offboarded.

    See Employee Offboarding Checklist on your own stack

    Book a 30-minute demo and see how Employee Offboarding Checklist works with the tools and frameworks you already have.