Mekovault

Digital offboarding: the checklist of accounts and access to close when someone leaves

Digital offboarding is the part of an employee's exit that nobody sees: closing their email, their access to every platform, the apps they authorized with their account, the shared passwords they knew and the subscriptions they paid for. This list covers the 18 things to close, who does each one and when, and which ones can run on their own.

Updated on October 11, 2026 · 10 min read · Mekovault

The full list

Check what applies to your company. “Automatic” means a tool can do it without anyone opening a console; “guided” means someone has to do it, but they can receive the task with a due date and a record of completion.

The last day, at the end of the shift

  1. Suspend the email account (Google Workspace): sign out sessions, invalidate the password. Automatic.
  2. Auto-reply and email forwarding to whoever the manager picks. Automatic.
  3. Revoke the apps authorized with that account (Slack, Canva, Apps Script, the phone). Automatic.
  4. Deactivate in Slack, Zoom, Teams and every other platform with a seat. Automatic where the platform allows it; guided elsewhere.
  5. Remove from groups, lists and shared calendars. Automatic.
  6. Change the shared passwords the person knew (generic accounts, social media, vendors). Guided.
  7. Recover or wipe the device (laptop, phone): sign out remotely. Guided.

The first week

  1. Transfer Drive ownership and calendar events to the person the manager picks. Automatic.
  2. Delegate the mailbox to the manager if there are ongoing conversations, instead of sharing the password. Automatic.
  3. Reassign the generic accounts the person managed (sales@, support@) to a new owner. Guided.
  4. Reassign the subscriptions paid with their card or in their name (domains, tools, SaaS). Guided.
  5. Release or reassign the license on each platform; on an annual plan, note it for renewal. Automatic in Google; guided elsewhere.

At 30 days

  1. Delete or archive the email account, with the files already transferred. Automatic, with advance notice.
  2. Confirm that no seat is still assigned in Slack, Zoom, Figma, Adobe, Canva. Automatic where there is read access; guided elsewhere.
  3. Check that the authorized apps did not come back (the person can link them again from another account). Automatic.

Always

  1. Keep a record: who requested, who approved, what was done and when, for every item. Automatic.
  2. Notify the right people: the manager, People, finance, and the person if there is a temporary reactivation. Automatic.
  3. Review the policy once a year: forwarding, archiving and deletion periods. Guided.

What goes wrong most often

  • Closing the email and assuming everything is closed. The other platforms never find out.
  • Letting whoever runs the steps decide about the files, instead of the manager.
  • Suspending “just in case” and paying for that license for six months.
  • Not revoking the apps the person authorized with their account: they keep reading Drive or Gmail after the exit.
  • Having nowhere to look up what was done. When the auditor or the owner asks, it has to be pieced together from emails.

How Mekovault does it

Of the 18 items, Mekovault runs the “automatic” ones on its own in Google Workspace and the connected platforms, and turns the “guided” ones into tasks with an owner, a due date and a record. The offboarding is requested by People or arrives from payroll (ADP, Gusto, Rippling, BambooHR), is scheduled for the last day and runs by itself; the manager decides by email what happens to files and mail; authorized apps are revoked; deletion is scheduled 30 days out with the option to undo; and everything stays in the audit log for 365 days. If you want the printable list, it is at the end of the 21 questions to ask before you buy.

Frequently asked questions

What is the difference between offboarding and termination?

Termination is the HR and legal side: the notice, the final paycheck, returning equipment. Offboarding is the whole exit process, and digital offboarding is the part about accounts, access and subscriptions. In most companies the HR side gets done right and the digital side gets done halfway.

Who should own digital offboarding?

Whoever knows the person is leaving: People or HR. IT runs it if there is an IT team; the direct manager decides what happens to the files and email. The mistake is spreading the responsibility around so that nobody closes the loop.

How long after leaving do former employees still have access?

Published studies report that about a third of former employees still have access to files from a previous employer, and that access lasts weeks or months. The number that matters is your company's: check your suspended accounts and authorized apps this month.

Keep reading