Employee Offboarding Checklist for Small Businesses
Complete offboarding checklist: 40+ items, state final pay table, voluntary vs. involuntary workflows, and responsibility matrix for small businesses.
Employee Offboarding Checklist
40+ items, state compliance table, and free template for small businesses
The first time I had to let someone go, I thought the hard part was the conversation. It was not. The hard part was everything that happened in the 72 hours after: figuring out when the final paycheck was legally due, realizing we had never sent a COBRA notification in any previous departure, spending two hours tracking down which accounts the person had access to, and discovering three weeks later that their email was still active and forwarding to their personal address.
None of that was malicious. It was the result of having no documented offboarding process. Every step was improvised. Every deadline was guessed. If you have a solid employee onboarding plan but nothing structured for departures, you are protecting the start of the employment relationship and leaving the end to chance. The good news is that all of it is fixable with a checklist and a clear process, built once and reused for every departure.
This guide gives you that checklist. Forty-plus items organized by timeline, two separate workflows for voluntary and involuntary departures, a state-by-state final pay table, and a responsibility matrix so nothing falls through the gaps at a small business where one person often plays HR, IT, and manager at the same time. FirstHR was built to handle this process systematically so it works the same way every time.
What Is Employee Offboarding
Employee offboarding is the structured process of managing an employee's departure from your company, from the moment departure is confirmed to the final archiving of their employment records. It covers administrative tasks (final paycheck, benefits termination, document collection), security steps (access revocation, equipment return), compliance requirements (COBRA notification, PTO payout), and the human side (exit interviews, team communication, knowledge transfer).
Offboarding is not the same as termination. Termination is a legal event. Offboarding is the process that surrounds it: the series of steps that protect your company legally, secure your data, preserve institutional knowledge, and treat departing employees with the professionalism that determines whether they recommend you as an employer or write a Glassdoor review about you. The full guide to employee offboarding covers the strategic picture. This guide focuses specifically on the checklist and process.
The Offboarding Timeline: From Notice to Post-Departure
A timeline-based structure is the most useful way to organize offboarding because the most common failure mode is not missing tasks, it is doing tasks in the wrong order or at the wrong time. COBRA notification has a hard deadline. Final pay has state-specific timing. Access revocation for involuntary terminations has to happen the same day, not the next day.
The timeline below maps the core checklist to five phases. Tasks that have legal deadlines are marked with the deadline. Tasks that have sequencing dependencies are ordered accordingly.
For small businesses where one person manages most of these steps, the timeline view also serves as a workload planner. A two-week notice period gives enough time to complete all phases without everything piling up on the final day. An involuntary termination compresses Days 0 through Last Day into a single afternoon, which is why having the process documented in advance matters so much.
The single change that improved our offboarding process most was separating "trigger tasks" from "scheduled tasks." Trigger tasks happen immediately when departure is confirmed: payroll notification, COBRA clock start, access revocation queue. Scheduled tasks happen during the notice period. When I stopped treating the departure announcement as a planning meeting and started treating it as a trigger point, things stopped falling through the cracks.
Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
See How It WorksVoluntary vs. Involuntary Offboarding: Two Different Workflows
Voluntary and involuntary departures require different processes because the timing, legal risk, and human dynamics are fundamentally different. Using a resignation checklist for a termination is one of the most common ways compliance steps get missed. The table below maps the key differences.
| Step | Voluntary resignation | Involuntary termination |
|---|---|---|
| Access revocation timing | End of last working day | Immediate: same hour as conversation |
| Notice period | Typically 2 weeks | None: effective same day |
| Knowledge transfer | Full handoff during notice period | Manager collects what they can, often limited |
| Communication to team | Scheduled, employee may participate | Manager announces, employee typically absent |
| Exit interview | Standard, employee is willing | Optional: many decline or it is inadvisable |
| Severance | Rarely offered | Often provided to reduce legal risk |
| References | Standard company policy applies | Limited to dates of employment and title only |
| COBRA notification timing | Within 14 days of coverage loss | Within 14 days of coverage loss (same) |
| Final paycheck | State law applies (see table below) | State law applies, often stricter deadlines |
| NDA/non-compete reminder | Standard reminder via email | Formal written notice recommended |
For voluntary resignations, the notice period is an asset. Use it. The best offboarding processes front-load knowledge transfer and documentation tasks into the first week of the notice period, not the last. This way, if the employee leaves early or becomes unavailable, the critical information is already captured.
The Complete HR Offboarding Checklist (40+ Items)
The checklist below covers every category of offboarding work. For small businesses where one person handles multiple roles, this is the master list. For companies with separate HR, IT, and payroll functions, the responsibility matrix in a later section maps which items belong to each role.
Administrative and HR tasks
| Task | When | Owner |
|---|---|---|
| Accept and document resignation or process termination paperwork | Day 0 | HR |
| Record departure type (voluntary / involuntary / layoff / retirement) | Day 0 | HR |
| Trigger offboarding workflow and notify all relevant parties | Day 0 | HR |
| Schedule exit interview (voluntary) or determine if appropriate (involuntary) | Days 1–3 | HR |
| Send COBRA election notice to departing employee and covered dependents | Within 14 days of qualifying event | HR |
| Process PTO payout per company policy and state law | With final paycheck | Payroll |
| Prepare and deliver separation agreement or severance letter if applicable | Days 1–3 | HR / Legal |
| Collect signed NDA reaffirmation and non-solicitation reminder | During notice period or last day | HR |
| Conduct or send exit interview (or post-departure survey) | Last week or after departure | HR |
| Update benefits records and notify benefits administrator | Within 30 days of qualifying event | HR |
| Process 401(k) rollover information and provide plan documents | Within 30 days | HR / Payroll |
| Update employee record with departure date, reason, and eligibility for rehire | Last day | HR |
| Archive complete employee file per retention requirements | Post-departure | HR |
| Update org chart and internal team directory | Post-departure | HR / Manager |
| Remove employee from internal systems: payroll, HRIS, benefits platforms | Last day | HR |
For the exit interview, prepare structured questions in advance. A list of exit interview questions tailored to small businesses gives you consistent data across every departure.
Communications and handoffs
| Task | When | Owner |
|---|---|---|
| Notify immediate team of departure (timing and message to be agreed) | Days 1–3 | Manager |
| Notify external clients or key partners of transition and new contact | During notice period | Manager |
| Send farewell announcement to broader company (voluntary, employee consent) | Last day | Manager / HR |
| Transfer ownership of shared files, folders, and project documents | During notice period | Manager |
| Update email signature and auto-reply for forwarding period | Last day | IT / Manager |
| Remove employee from company website, team page, and social media profiles | Post-departure | HR / Marketing |
| Reassign or close any professional profiles linked to company email | Post-departure | HR |
Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
See It in ActionIT and Access Revocation Checklist
IT access revocation is where most small business offboarding processes fail. The problem is not that people forget about it. It is that they treat it as one item ("revoke IT access") when it is actually 15 to 30 individual steps across every tool the employee used. The average employee at a small business has access to 30 or more SaaS accounts. Each one needs to be individually addressed.
For small businesses without an IT department, the practical approach is a written inventory of every tool in your company, maintained as a running list and updated whenever you add a new subscription. When a departure is recorded, print the list and work through it systematically, checking off each item as it is confirmed revoked. This takes 30 to 60 minutes and is significantly more reliable than trying to remember every tool from scratch under the pressure of a departure. For teams ready to automate this step, the offboarding automation guide covers how to set up triggered access revocation checklists.
The access item that consistently got skipped at companies I worked with was shared passwords. Everyone remembered to revoke individual logins. Nobody remembered to rotate the password for the Twitter account, the Zoom account, or the vendor portal that three people used with the same credentials. Build a dedicated "shared credentials" section into your offboarding checklist. List every shared account explicitly. When someone leaves, every one of those passwords gets changed.
Compliance: Final Pay, COBRA, and PTO Payout
The compliance layer of offboarding is where small businesses face the most legal and financial risk, and where most offboarding guides provide the least specific guidance. These are not optional steps or best practices. They are legal requirements with hard deadlines and financial penalties for non-compliance.
Final paycheck requirements by state
Final paycheck timing is regulated by state law and varies significantly. California and Colorado require same-day payment for involuntary terminations. Getting this wrong in California can result in waiting time penalties of one day's wages for every day the check is late, up to 30 days. The table below covers the most common states. Always verify current requirements with your state's Department of Labor wage payment regulations.
| State | Involuntary termination | Voluntary resignation | PTO payout required |
|---|---|---|---|
| California | Same business day | Within 72 hours (at resignation if 72+ hrs notice given) | Yes: mandatory |
| Colorado | Same business day | Next regular payday | Yes: mandatory |
| Massachusetts | Day of discharge | Next regular payday | Yes: mandatory |
| Oregon | End of next business day | Last day if 48+ hrs notice; within 5 days otherwise | Only if policy states so |
| Utah | Within 24 hours | Next regular payday | Only if policy states so |
| Connecticut | Next business day | Next regular payday | Only if policy states so |
| Texas | Within 6 calendar days | Next regular payday | Only if policy states so |
| New York | Next regular payday | Next regular payday | Only if policy states so |
| Florida | Next regular payday | Next regular payday | No requirement |
| Illinois | Next scheduled payday | Next scheduled payday | Yes: mandatory (if accrued) |
| Washington | End of pay period | End of pay period | Only if policy states so |
| Most other states | Next scheduled payday | Next scheduled payday | Varies: check state law |
COBRA notification
Employee records must be retained according to federal requirements: FLSA payroll records for 3 years, EEOC records for 1 year post-termination, and I-9 forms for 3 years after hire or 1 year after termination, whichever is later. ERISA benefit records require 6 years. The practical rule for small businesses: retain all employment records for 7 years after termination.
Federal COBRA requires employers with 20 or more employees to notify departing employees of their right to continue health insurance coverage. The notification must go out within 14 days of the qualifying event (the date benefits are lost). The penalty for missing this deadline is $110 per day per qualified beneficiary, imposed by the Department of Labor.
For small businesses with fewer than 20 employees, federal COBRA does not apply, but state mini-COBRA laws may. California's Cal-COBRA covers employers with 2 to 19 employees. New York covers all group plans regardless of employer size. Check your state's specific requirements before assuming COBRA does not apply to your business.
PTO payout
PTO payout requirements depend on two things: your state's law and your company policy. California, Colorado, Illinois, and Massachusetts treat accrued, unused PTO as earned wages that must be paid out upon termination regardless of company policy. Other states defer entirely to company policy. This means a "use it or lose it" policy is enforceable in Texas but not in California. The final paycheck table above indicates which states require mandatory PTO payout. For all others, your written policy at the time of departure determines the obligation.
Knowledge Transfer Checklist
Knowledge transfer is the offboarding step with the longest-lasting impact and the least structured implementation. When a key employee leaves without documenting their work, the cost shows up over the following months: projects stalled, client relationships damaged, processes that only they knew how to run. The structured approach that works best mirrors how good onboarding is designed: clear phases, assigned owners, and explicit deadlines. The 30-60-90 day framework used in onboarding adapts directly to knowledge transfer planning. Research from IDC estimates companies lose $31.5 billion annually due to poor knowledge sharing, and 42% of institutional knowledge exists only in individual employees' heads (Panopto).
| Knowledge transfer task | Deadline | Format |
|---|---|---|
| Current project status and next steps for each project | 3+ days before last day | Written doc or shared notes |
| Key client or stakeholder contacts with relationship context | During notice period | Contact list with notes |
| Recurring tasks: what they are and how they are done | During notice period | Process document |
| Tool configurations or system settings only they managed | During notice period | Written or screen recording |
| Vendor or supplier contacts and account details | During notice period | Contact list |
| Pending decisions or open issues requiring follow-up | Last week | Written handoff notes |
| Files and document locations (where things live) | During notice period | Folder guide or notes |
| 90-minute walkthrough session with manager or successor | At least 1 week before last day | Live session |
| Introduction calls with key external contacts | During notice period | Scheduled calls |
For involuntary terminations where no notice period exists, the knowledge transfer process becomes the manager's responsibility after the departure. The manager should immediately document everything they know about the departing employee's work, identify the most critical gaps, and schedule an optional debrief call with the former employee if the relationship makes that possible and appropriate.
Who Does What: HR/Manager/IT/Payroll Responsibility Matrix
One of the most common offboarding failures is not missing a task entirely, it is two people each assuming the other person handled it. A clear responsibility matrix eliminates this. At a small business where one person may fill multiple roles, the matrix also clarifies which hat they are wearing for each task.
| Task | HR | Manager | IT | Payroll |
|---|---|---|---|---|
| Trigger offboarding workflow | - | - | ||
| Conduct exit interview | - | - | - | |
| Process final paycheck | - | - | - | |
| Send COBRA notification | - | - | - | |
| Revoke system access | - | - | - | |
| Rotate shared passwords | - | - | ||
| Collect company equipment | - | - | - | |
| Collect separation documents | - | - | - | |
| Update org chart | - | - | - | |
| Knowledge transfer sessions | - | - | - | |
| Notify clients/external partners | - | - | - | |
| Archive employee record | - | - | - |
For solo operators or very small teams where one person handles HR, IT, and management simultaneously, use the matrix as a checklist organized by category rather than by owner. HR tasks first, then manager tasks, then IT tasks, then payroll tasks. The order matters because some tasks create dependencies: IT cannot revoke access until they know which accounts to revoke, which requires the HR trigger. Payroll cannot process final pay until they know the departure date and state, which requires HR confirmation.
Remote Employee Offboarding: What Changes
Remote employee offboarding follows the same checklist as in-person offboarding with three areas that require specific attention. The compliance steps, access revocation requirements, and knowledge transfer process are identical. What changes is the logistics and the intentionality required.
Equipment return
For remote employees, equipment return requires a prepaid shipping label sent before the last day, not after. Do not wait until the last day to figure out shipping. The shipping kit should arrive at the employee's location with enough time for them to pack and schedule a pickup. Set a specific deadline (10 business days after last day is common) and send a follow-up if equipment has not shipped by day 5.
Access revocation
Access revocation is more urgent for remote employees because there is no physical IT presence to observe the handover. There is no moment where someone hands back a key fob and you watch their access card get deactivated. Schedule a video call to walk through the access revocation checklist together if the departure is amicable, or proceed through it systematically from your admin console immediately upon departure confirmation.
Knowledge transfer and final conversations
Every knowledge transfer session and exit conversation must be explicitly scheduled as a video call. In-person offices have informal moments for this. Remote work does not. Schedule the manager walkthrough session, the exit interview, and any client introduction calls as calendar invites with video links during the first week of the notice period, when the employee is still fully engaged and the dates are still flexible.
Offboarding Metrics to Track
Most offboarding guides end at the checklist. The companies with the best offboarding processes measure them. Metrics convert offboarding from a one-time effort into a system that improves over time. Only a small percentage of organizations track offboarding KPIs at all, which means even basic measurement creates a significant advantage.
| Metric | Target | Why it matters |
|---|---|---|
| Access revocation rate | 100% within 24 hours | Security baseline: any gap is a risk |
| Equipment recovery rate | 100% within 30 days | Asset protection and data security |
| Exit interview completion | 70%+ of voluntary exits | Retention and culture data |
| Compliance deadline adherence | 100% on-time | COBRA, final pay: no exceptions |
| Knowledge transfer completion | 100% before last day | Business continuity protection |
| Offboarding checklist completion | 100% before record closed | Audit trail and process integrity |
Start with access revocation rate and compliance deadline adherence. These are binary: either you hit 100% or you have an open risk. Once those are consistently hitting target, add equipment recovery rate and exit interview completion. The goal is not perfect scores immediately. It is visibility into where the process is working and where it is not.
Common Offboarding Mistakes (and How to Fix Them)
- Build separate checklists for voluntary resignation and involuntary termination. The timing, legal requirements, and human dynamics are different enough that one checklist cannot serve both.
- IT access revocation is 15 to 30 individual steps, not one checkbox. Maintain a running inventory of every tool in your company and work through it systematically for every departure.
- COBRA notification is due within 14 days of the qualifying event. Final paycheck timing is regulated by state law and varies from same-day (California) to next regular payday. Both have financial penalties for non-compliance.
- Knowledge transfer tasks should be assigned with deadlines at least 3 days before the final day, not on the final day. For involuntary terminations, the manager must collect what they can immediately after the departure.
- The responsibility matrix prevents the most common failure: two people each assuming the other handled a step. Assign ownership for every task before the departure happens.
- Track six metrics: access revocation rate, equipment recovery rate, exit interview completion, compliance deadline adherence, knowledge transfer completion, and checklist completion rate.
Frequently Asked Questions
What should be included in an employee offboarding checklist?
A complete offboarding checklist covers five areas: HR administration (exit interview, separation documents, record archiving), IT access revocation (email, SaaS accounts, shared passwords, devices), compliance (COBRA within 14 days, state final pay, PTO payout), knowledge transfer (project handoffs, process documentation, manager walkthrough), and communications (team announcement, client notifications, org chart updates). A thorough checklist for a small business should have 35 to 50 items. The most commonly missed items are shared password rotation, mini-COBRA notification for businesses under 20 employees, and structured knowledge transfer documentation.
How long does the employee offboarding process take?
For a standard two-week resignation, most tasks complete within the notice period plus one to two weeks post-departure. For involuntary terminations, the critical steps (access revocation, final pay, initial compliance notifications) happen within the first 24 to 48 hours. Post-departure tasks like COBRA election follow-up and record archiving continue for four to six weeks. With a documented process and clear ownership, no departure should require active attention beyond 30 days post-departure.
What is the difference between voluntary and involuntary offboarding?
Voluntary offboarding (resignation) allows a standard notice period for knowledge transfer, a scheduled exit interview, and gradual access revocation at the end of the last day. Involuntary offboarding (termination) requires immediate access revocation at the time of the conversation, no knowledge transfer period, careful legal documentation, and often involves severance discussion. Compliance steps are the same in both cases but have tighter timelines for involuntary terminations in most states.
When is the final paycheck due after an employee leaves?
Final paycheck timing depends on your state and whether the departure is voluntary or involuntary. California and Colorado require same-day payment for involuntary terminations. Massachusetts requires same-day payment for all terminations. Most other states require the final paycheck by the next regular payday. Multi-state employers must comply with the state where each employee works, not the state where the company is based. See the state-by-state table above for specifics.
Does COBRA apply to small businesses?
Federal COBRA requires employers with 20 or more employees to offer continuation health coverage. Employers with fewer than 20 employees are not covered by federal COBRA but may be covered by state mini-COBRA laws. California, New York, and many other states have mini-COBRA laws that apply to smaller employers. Small businesses should check their state's requirements before assuming COBRA does not apply. The penalties for missing COBRA notification ($110 per day per beneficiary under federal law) are significant enough that verifying applicability is worth the effort.
How do you handle offboarding for remote employees?
Remote offboarding follows the same checklist as in-person offboarding with three additions: send a prepaid equipment return shipping kit before the last day, schedule all knowledge transfer and exit conversations as explicit video calls (they will not happen informally), and confirm company data removal from personal devices via remote wipe through Google Workspace or Microsoft 365 admin tools. Access revocation is more urgent for remote employees because there is no physical handover moment to anchor the process.
What are the biggest mistakes in employee offboarding?
The six most costly offboarding mistakes are starting the process on the last day instead of when departure is confirmed, using the same checklist for voluntary and involuntary departures, treating IT access as one checkbox instead of 15 to 30 individual steps, missing COBRA and final pay compliance deadlines, skipping knowledge transfer documentation, and conducting no exit interview for difficult departures. The most expensive of these (in terms of direct financial cost) is missing compliance deadlines. The most expensive in terms of long-term business impact: poor knowledge transfer.
Who is responsible for the employee offboarding process?
Offboarding involves four stakeholders: HR owns the overall process and handles compliance notifications, exit interviews, separation documents, and record archiving. The manager handles knowledge transfer, team communication, client notifications, and equipment collection. IT or the admin contact handles access revocation, shared password rotation, and device management. Payroll handles the final paycheck, PTO payout, and 401(k) documentation. For small businesses where one person fills multiple roles, a clear checklist organized by owner ensures each task has someone explicitly responsible for it.