The Account Offboarding When an Employee Leaves SOP
Purpose
A standard operating procedure (SOP) is the written, repeatable process every person follows the same way, so nothing depends on someone remembering it under pressure. When an employee leaves, whether they quit, are let go, or retire, the shop has to close out their access, recover its property, and capture what they knew, cleanly and fast. Skip a step and you get a former employee who still logs into the scheduling system, keys that open your shop floating around, or a book of customer relationships that walked out the door with nothing written down. This SOP is the departure checklist that makes every exit consistent and closes the security gaps first.
Scope
Applies to every departure, voluntary or not, of any employee or long-term contractor with system access, company property, or customer relationships. Covers digital access, physical assets, knowledge transfer, and the final administrative close. The onboarding SOP is the mirror image; keep the two in sync so what you grant on the way in is what you reclaim on the way out.
Roles and responsibilities
| Role | Responsibility |
|---|---|
| Owner / Manager | Set the effective time, own the checklist, handle final pay and the exit conversation |
| Office / System admin | Revoke every login, recover assets, reassign records |
| Departing employee | Return property, hand off open work, share passwords they hold |
Procedure
1. Cut digital access first, at the agreed time
The most urgent step, and the one most often botched, is killing access. On the effective departure time, disable or reset the person's logins: the field-service system, email, phone and messaging apps, shared cloud drives, the payment or accounting tools, and any password vault. For a termination, this happens right as the exit conversation ends, not the next morning. Do not leave an active account behind "just in case", an open login is a standing risk to customer data and your books.
2. Change any shared credentials they knew
Individual logins are easy; the danger is shared passwords. Any account whose password the person knew, a shared social login, a supplier portal, an alarm code, a shared email, gets changed the same day. Rotating one person's own login means nothing if the shared password they had memorized still works.
3. Recover physical assets and log each one
Collect and check off every company asset: keys and access fobs, phone and tablet, laptop, tools and test equipment, the vehicle and its fuel card, uniforms, and any customer keys or gate codes the person held. Work from the list of what they were issued so you notice what did not come back. If keys to your building or a customer's property are unaccounted for, treat it as a security event and rekey where the risk warrants.
4. Hand off open work before the last day
Walk their active jobs, estimates, and callbacks and reassign each to a named person. A departing tech should brief their replacement on anything in flight: the customer who needs a specific follow-up, the part on order, the job halfway done. Open work with no owner is a dropped customer.
5. Capture what only they knew
Some knowledge lives only in one person's head: a quirky customer, an undocumented workaround, where the spare is stashed. Before the last day, sit down and pull that into writing or into the system. This is the step that gets skipped and hurts for months, because you cannot ask once they are gone.
6. Reassign records and customer contact
Point their customer relationships, their inbox, and their notifications at whoever inherits them so nothing goes to a dead account. Route incoming calls or messages for that person to a live human. A customer who emails their old contact and hears nothing back assumes you closed.
7. Close out pay and the exit properly
Finish the administrative side: final pay on the schedule your jurisdiction requires (some require it quickly, even on the last day, for an involuntary exit, so confirm your state's rule), benefits and any continuation notices, and the paperwork. Keep the exit conversation professional regardless of how the departure happened, the rest of the crew is watching how you treat people on the way out.
Watch out for
- Leaving a login active "for now." That is the account that leaks data. Cut access on time.
- Rotating personal logins but not shared passwords. The shared code they memorized is the real hole.
- No asset list to check against. Without it you never notice what did not come back.
- Letting knowledge walk out undocumented. Capture it before the last day; you cannot after.
References
- SBA guidance on employee separation and recordkeeping
- State final-pay and wage-payment requirements (varies by jurisdiction)
- See related: The New Hire First Week SOP
- Trade-standard practice for access control and offboarding