01 / HR
Employee offboarding that removes every access, every time
When someone leaves, their access to every connected tool is removed on time, their files and accounts are handed over, equipment is collected and the paperwork is done, with a record that proves it.
- Same day
- access removed across all connected tools
- 100%
- of steps recorded with timestamps
- Licences
- freed immediately instead of at renewal
02 / The problem
A typical company uses dozens of tools, and each leaver has an account in many of them. Offboarding depends on someone remembering every system, on the right day, without being told.
Something is always missed: a SaaS seat that keeps billing, a shared drive still accessible weeks later, a GitHub token that never expires. Auditors ask for proof, and the proof is a spreadsheet filled in after the fact.
03 / How it runs
How it runs
Leaving date is set
RulesThe exit date in your HR system starts the run. Nothing depends on someone remembering to file a ticket.
Plan the handover
Your decisionThe manager confirms who takes over files, mailbox, calendar and open tasks, in one short form sent a week before the last day.
Revoke access on the day
RulesAt the end of the last day, accounts are suspended in the identity provider and every connected app, sessions and tokens are revoked, and licences are freed.
Transfer and recover
RulesDrive files and mailbox are transferred to the successor, a return label for equipment is sent, and the IT asset list is updated.
Prove it
RulesA checklist with timestamps for every system is filed, ready for your next ISO 27001 or SOC 2 audit.
Rules first, AI only where it helps
Offboarding is a checklist that must never vary, which is exactly what deterministic automation is for. Every step is an API call with a recorded result; nothing is inferred or guessed. The only human step is the handover decision, because only the manager knows who should inherit what.
04 / What we need from you
What we need from you
- Admin access to your HR system and identity provider
- The list of tools that hold accounts (we help you find the ones nobody remembers)
- Who signs off on handovers
Timeline
Core systems live in about a week; each additional tool takes hours.
Works with
- Personio
- BambooHR
- Google Workspace
- Microsoft 365
- Entra ID
- Slack
- GitHub
- Jira
For
05 / Questions
Questions
What about tools without single sign-on?
We connect to their admin API directly. Where a tool has no API, the run creates a task for the owner and waits for it to be confirmed, so the record stays complete.
Can access be removed immediately for a sudden departure?
Yes. A single action triggers the revoke step at once, independent of the planned date.
Does this help with onboarding too?
The same connections run onboarding in reverse: accounts, groups and licences created from the start date. See the employee onboarding use case.
06 / Related automations
Related automations
Finance
Supplier invoice matching, automated end to end
Every supplier invoice is read, checked against its purchase order and delivery note, and booked for payment without anyone retyping it. Your team only sees the invoices that do not match.
Read the breakdownCustomer support
Support ticket triage that gets the urgent ones answered first
Every ticket is categorised, prioritised by customer and issue, routed to the right queue and, when it is a known question, answered from an approved template. Urgent issues reach a person in seconds.
Read the breakdownMore use cases in HR
Want this running for you?
Book a demo and we will walk through how this would work with your tools.