Onboarding gets all the attention. Offboarding — the process of exiting an employee cleanly — is where most companies quietly leak security, compliance, institutional knowledge, and goodwill. A forgotten SSO account, an unreturned laptop, a full-and-final settlement that’s three weeks late: each is a small failure, and together they’re the difference between a departing colleague who recommends you and one who warns others away.
This is the offboarding checklist we run inside VeloHR, distilled to the parts that matter for a company of 50–1,000 employees. Use it whether the exit is a resignation, an end of contract, or a termination — the steps are the same; only the tone and timeline change.
Why offboarding deserves a real process
- Security. The single biggest data-breach vector for mid-size companies is not hackers — it’s active accounts belonging to people who no longer work there.
- Compliance. Final settlements, tax forms, and statutory filings have legal deadlines. Missing them creates liability that long outlives the employee.
- Knowledge. Every departure is a knowledge-transfer deadline. Miss it and the work quietly becomes someone’s archaeology project six months later.
- Reputation & boomerang hires. A respectful exit keeps alumni as referrers, customers, and — increasingly — returning hires. The last week shapes the whole memory.
Phase 1 — The moment notice is given
The clock starts the instant a resignation is accepted (or a termination decided). Kick off a single checklist workflow so nothing depends on one person remembering.
- Confirm the last working day, notice-period obligations, and any garden leave.
- Notify the stakeholders who need to know — the manager, payroll, IT, and facilities — and no one who doesn’t.
- Start the knowledge-transfer plan: what this person owns, who inherits it, and the documents that must exist before they leave.
- Schedule the exit interview for the final week, while impressions are fresh but the emotion has settled.
Phase 2 — Access revocation (do not skip, do not delay)
Access revocation is the step most often done late and incompletely. The rule is simple: access ends when employment ends, to the hour — not “sometime next week when IT gets to it.”
- Revoke SSO / identity-provider access first — it cascades to most connected apps in one action.
- Kill active sessions and refresh tokens, not just the password. A logged-in session survives a password change.
- Rotate any shared credentials, API keys, or service accounts the person could have known.
- Remove them from privileged groups: payroll approver, admin, on-call, code owner, banking portal.
- Set an email auto-reply and forwarding policy so customers aren’t left in silence.
Tie the revocation to the offboarding workflow itself so it fires automatically at completion, with an audit record of exactly what was revoked and when. Manual checklists get forgotten; a workflow doesn’t.
Phase 3 — Asset return, tracked to completion
Asset return only works if you know what was issued. “Please return your equipment” is not a process; a per-item inventory is. For each asset — laptop, phone, monitor, access card, SIM, security token — track its status to a definite end state: returned, or written off as lost.
- Maintain an asset register per employee from day one, not reconstructed at exit.
- Record the condition on return and flag anything damaged or missing before the final settlement closes.
- Reconcile outstanding assets against the full-and-final settlement so recoveries are handled once, transparently.
Phase 4 — Full-and-final settlement (FnF)
The full-and-final settlement is where offboarding most often frustrates the departing employee — and where compliance risk concentrates. Compute it properly and communicate the breakdown.
- Unpaid salary for the final partial period.
- Leave encashment of the eligible unused balance.
- Gratuity where the tenure threshold is met (in India, five years of continuous service).
- Pending reimbursements and variable pay owed.
- Deductions: notice-period shortfall, recovered advances, and unreturned-asset recoveries.
- Statutory forms: the final tax computation, PF/EPFO transfer or withdrawal support, and Form 16 / P45 / W-2 as applicable.
Publish a clear deadline for the FnF payout and hit it. In many jurisdictions it is a legal obligation, not a courtesy — and for a detailed take on the India-specific rules, see our guide to India payroll compliance.
Phase 5 — The exit interview (and what to do with it)
An exit interview is only worth the time if the answers change something. Ask about the real drivers — manager, compensation, growth, workload — and, crucially, aggregate the themes across departures rather than reading them one at a time.
- Keep individual responses confidential; report only patterns.
- Cluster themes across a quarter of exits — that’s where the signal is. One person leaving for pay is noise; a third of your leavers citing the same manager is a decision.
- Cross-check exit themes against your attrition-risk signals to see whether you spotted the risk while you could still act on it.
Phase 6 — Documentation and the alumni relationship
- Issue the relieving and experience letters promptly — delays here are the most common source of a bad final impression.
- Archive the personnel file per your data-retention policy, and honour deletion requests on the correct schedule.
- Update headcount, org chart, and any segregation-of-duties approvals the person was part of.
- Add them to your alumni network. Today’s leaver is tomorrow’s referral, customer, or boomerang hire.
Voluntary vs. involuntary exits
The checklist is identical; the sequencing differs. For a termination, access revocation and asset recovery move to the front and happen simultaneously with the conversation, and legal/HR review the documentation first. For a resignation, knowledge transfer and a graceful handover lead. In both cases, the work is the same — the difference is order and empathy.
Turn the checklist into a workflow
A checklist in a spreadsheet is better than nothing, but it still relies on someone driving it. The version that actually protects you is a workflow: initiating an exit kicks off the whole sequence, each task routes to its owner (IT for deprovisioning, facilities for assets, payroll for FnF), SLAs escalate what stalls, and every step leaves an audit trail.
That is exactly how offboarding works in VeloHR — a single event starts the checklist, the full-and-final settlement is computed for you, and access-revocation plus asset-return are tracked to completion. It sits on the same platform as the rest of the employee lifecycle, with no separate module and headcount-only pricing. If you want to see the whole picture, our overview of AI workflows that save HR teams time is a good next read.