← All resources
People · Checklist · 4 min read
Staff and contractor offboarding checklist
The access revocation register most small businesses don't keep — every login, key, card and device, removed and signed off the day someone leaves.
01Why it matters
When someone leaves a small business, their access usually stays on — the shared email password, the job app login, the fuel card. Offboarding isn't finished until every line below is ticked, dated and initialled.
02Before the last day
- Confirm the last working day in writing.
- List every system, key, card and device they hold (use your access register).
- Hand over open jobs, customers and passwords they manage.
- Calculate final pay, leave and super correctly.
03On the last day
- Email and workspace account suspended; mail forwarded to a manager.
- Job management and scheduling app login removed.
- Accounting, payroll and banking access removed.
- CRM, lead platforms and messaging (WhatsApp Business, phone system) removed.
- Shared passwords they knew are rotated.
- Keys, access cards, uniforms, tools and devices returned.
- Fuel cards and company credit cards cancelled.
- Removed from group chats and rosters.
04After
- Register signed off by the person who did each revocation.
- Final pay processed and payslip issued.
- Any required separation certificate issued.
- Thirty-day check: no logins from the old account anywhere.