Employee Tech Onboarding & Offboarding Checklist for Small Business
Hiring someone new? Someone moving on? The tech side of both is where small businesses quietly get burned—a new hire twiddling their thumbs for days waiting on accounts, or (far worse) a departed employee who still has access to your email, files, and tools weeks later. A simple, repeatable checklist fixes both. Here’s exactly what to do when someone joins and what to do the moment they leave.
Why this matters more than it looks
Two reasons. First, onboarding speed: a new hire who’s set up and productive on day one is worth a lot more than one stuck waiting on logins. Second — and bigger — offboarding security: former employees with lingering access are one of the most common and overlooked risks a small business faces. If you can’t quickly answer, “Does anyone who left still have access to our systems?” this checklist is for you.
Onboarding checklist: when someone joins
Aim to have all of this ready before their first day:
- Create their accounts — a business email address and their Microsoft 365 or Google Workspace login, plus accounts for the specific tools they’ll use.
- Grant only the access they need. Give access to the files, folders, and tools for their role — not everything. This “least privilege” habit limits the damage if an account is ever compromised.
- Set up their device (or apply your BYOD rules if they’re using their own—see using a personal phone for business).
- Require MFA and a password manager from day one. Walk them through turning on multi-factor authentication and adding their logins to your password manager.
- Share the essentials—Wi-Fi, which tools you use for what, where files live, and any simple “how we do things” notes.
- Add them to shared resources — team chat, shared drives, calendars, and any group inboxes.
Do this consistently, and every new hire starts secure, productive, and with exactly the access they should have—nothing more.
Offboarding checklist: when someone leaves
This is the critical one, and timing matters — ideally complete it on their last day (or immediately, if the departure isn’t amicable):
- Disable their accounts. Suspend their email and Microsoft 365 / Google Workspace account rather than deleting it straight away so you keep the data but they lose access.
- Revoke access to every tool and shared file. Go through each app and shared drive and remove them—it’s easy to forget the smaller tools.
- Change shared passwords they knew. Any shared logins (social media or shared accounts) should be changed. A password manager makes this painless and shows you what they had access to.
- Remove business data from personal devices. If they used their own phone/laptop (BYOD), use your work suite’s remote wipe to remove just the business data.
- Recover company devices, and check that nothing important lives only on them.
- Transfer their files and email. Reassign ownership of their documents, and set up forwarding or a shared mailbox for their email so nothing (and no customer) falls through the cracks.
The golden rule: access ends when employment ends. A former employee should not be able to log into a single one of your systems the day after they leave.
Make it a repeatable process
The trick is to not reinvent this every time. Write your onboarding and offboarding steps down as a simple checklist (even a shared doc), keep a running list of the tools and accounts a typical role touches, and follow it every single time. It takes ten minutes to create and saves you from the “Wait—did we ever remove their access?” panic later.
This slots right into the wider basics—see our small business cybersecurity checklist and essential IT setup guide.
Frequently asked questions
What’s the most important offboarding step?
Immediately disabling the person’s accounts and revoking their access to every tool and shared file — on their last day. Lingering access for former employees is one of the most common security risks small businesses face.
Should I delete a former employee’s email account right away?
Suspend it rather than delete it immediately — that removes their access while keeping the data. Then transfer or forward their email and reassign their files before you eventually delete the account.
How do I remove business data from an employee’s personal phone?
Microsoft 365 and Google Workspace let you remotely wipe only the business data from a personal device, leaving their personal content untouched. Set this up as part of your BYOD approach so it’s ready when someone leaves.
What should I set up for a new hire before day one?
Their email and core accounts, access to the specific tools and files their role needs (and only those), their device or BYOD setup, MFA and a password manager, and access to shared resources like team chat and drives.
Has somebody else struggled to resolve such Suno imperfections in their machine-generated tracks? ai music audio cleaner I discovered that that Suno AI flaws can really impact the general sound output, notably with voices seeming artificial. To overcome this, I have started working with a removal tool to restore such AI tracks and successfully strip out audio flaws from these Suno outputs, which works to elevate both the sound quality and detail.
For individuals looking for a quick way to correct Suno audio problems problems, there are numerous cost-free AI music cleaners and Suno artifact cleaners accessible online that can be used as a advanced audio cleaner or voice processor. These resources function as an smart artifact remover and can help get these vocals sound authentic. Should you want to test them, listed here is a great tool which offers an AI music cleaner online free and can support audio mastering and refining audio quality with ease.