Every box tracked to a serial
The asset list sits in a table on the first phase and travels with the run. Tracking references, condition photos and the courier receipt attach to the task that produced them, so a missing dock is visible on day one.
Remote Employee Offboarding Checklist Template
When a remote employee leaves, the laptop is in their spare room, the access cut-off is in a different time zone, and the only route back for your hardware is a parcel you hope they will pack.
This free remote employee offboarding checklist covers the parts of a departure that distance changes. It is for IT, HR and managers of remote and hybrid staff, and runs beside your main leaver process. It plans the courier return, including cross-border returns, times the access cut-off to the leaver’s own working day, removes company data from personal devices, and decides when to lock, wipe or preserve a device. It ends with every serial accounted for and a named approver behind any wipe or write-off.
What Changes When the Leaver Works Remotely
In an office, the last day ends with a laptop handed over a desk. Remotely, the same moment is spread across a week: a box goes out, a courier tries twice, an account is blocked on someone else’s clock, and work email stays on a personal phone nobody asked about. Three things need a different plan.
Equipment
The kit comes back by parcel
Office: handed in on the last day and checked on the spot.
Remote: packaging, a booked collection, tracking and, abroad, customs.
Risk: a device that never arrives, still holding data.
Timing
The cut-off has a time zone
Office: access goes when the person walks out.
Remote: a set local time, converted for whoever presses the button.
Risk: a leaver locked out at lunchtime, or still signed in a day later.
Data
Company data sits in a home
Office: mostly on company devices on company premises.
Remote: on personal phones, home printers and downloads folders.
Risk: data you can neither see nor wipe.
Final pay, the exit interview and team communication stay in the Employee Offboarding Checklist, and closing accounts app by app belongs to the SaaS Access Offboarding Checklist. Devices that will not be reissued continue to the IT Asset Disposal Checklist. This page is the remote layer between them.
What the Remote Employee Offboarding Checklist Covers
Seven phases run once per leaver, with due dates counted from the last working day. Scope answers show the urgent cut-off, customs, personal-device and legal-hold tasks only when they apply, and a missing device opens the lock and wipe tasks, each wipe or write-off behind a named approver.
Phase 1
Phase 1: Leaver, Location & Cut-off Time
The people picked on the first task are assigned the later tasks. The answers on the second task decide which conditional tasks appear.
- Record the leaver, exit type and owners — planned with notice or immediate, plus the manager, IT contact, HR contact and wipe approver
- Answer the scope questions — the leaver’s country, personal devices used for work, any legal hold, and stipend-funded items
- Fix the access cut-off as a date, local time and time zone — for example 17:30 in the leaver’s zone, converted for the person doing it
- Link the main offboarding record for the same leaver — pay, exit interview and team communication run there, not here
- Pull the leaver’s assets from the register — laptop, phone, security keys, monitor, dock and anything shipped to their home
Phase 2
Phase 2: Equipment Return Logistics
The customs task appears only when the leaver is in another country. Send the packaging early enough that collection happens on or just after the last day.
- Confirm the collection address and a day the leaver will be in — people move, and the address from onboarding may be years old
- Send prepaid packaging with a packing list by serial number — padded boxes sized for each device, and the carrier’s rules for lithium batteries followed
- Book a courier with tracked, insured collection from the door — insured for replacement value, so the leaver never pays postage or queues at a counter
- Ask the leaver to sign out but not reset or wipe anything — a home reset can destroy data you need and leave an activation lock you cannot clear
- Prepare customs paperwork for a cross-border return — a pro forma invoice describing returning company equipment, plus the original export evidence
- Log the tracking reference and expected delivery date — so anyone can see where each box is without asking the leaver
Phase 3
Phase 3: Access Cut-off Across Time Zones
The urgent cut-off task appears only when the exit type is Immediate. It runs during the conversation, not after it.
- Schedule the account block for the agreed local cut-off — not the end of the IT team’s day, which may be the leaver’s morning
- Block sign-in, revoke sessions and lock the device during the conversation — for an immediate exit, IT acts while HR is still on the video call
- Revoke VPN profiles, remote access certificates and device trust — a remote worker’s laptop can hold access that the directory account does not show
- Remove the leaver’s MFA methods and passkeys — so a personal phone no longer approves sign-ins to company accounts
- Hand app-by-app accounts to the SaaS offboarding checklist — tokens, shared logins and licences are closed there
- Check the sign-in logs the next working day — no successful sign-ins after the cut-off, from any country
Phase 4
Phase 4: Personal Devices & Data at Home
The first four tasks appear only when personal devices were used for work. The written confirmation applies to every leaver.
- List the personal devices that held company data — phones with work email, home computers, tablets and personal cloud storage
- Ask the leaver to move work files back to company storage before the last day — downloads folders and personal drives first
- Run a retire or selective wipe, never a full wipe — it removes managed apps and the work profile and leaves personal photos and messages alone
- Remove the personal device from management and the directory — so it no longer counts as trusted or appears in the inventory
- Get written confirmation that no company data or paper remains at home — including USB drives, personal email and printed documents
Phase 5
Phase 5: Unreturned Kit, Lock & Wipe
Answering No on the first task shows the rest. The wipe approver and the HR contact each record Approved or Not approved, and the checklist halts at each decision.
- Check every asset has arrived by the return deadline — ten working days after the last day is a sensible default to tune
- Chase twice, then escalate to the manager — a reminder at the deadline and a second a week later, each recorded
- Lock the device or put it in lost mode where the platform allows — Windows laptops rely on the blocked account and disk encryption instead; unlike a wipe, a lock keeps the data
- Approve or refuse the remote wipe — the wipe approver checks with HR or legal that no hold or investigation needs the data first
- Send the wipe and record when the device confirms it — the command waits until the device next connects, so record queued and completed separately
- Approve recovery, write-off or a deduction for kit that never returns — HR contact decides; a deduction needs a contract term or the leaver’s prior written consent
Phase 6
Phase 6: Returned Devices & Data Retention
The preserve task appears only under a legal hold, and the wipe-and-reissue task only when there is none. The stipend task appears when stipend-funded items exist.
- Check the returned items against the asset list by serial — with photos of the condition on arrival and a note of missing chargers or keys
- Preserve the device and its data under the legal hold — label it do not wipe, keep it locked away and log every handover
- Export the mailbox and files the business must keep — under your retention schedule, before any account or device is erased
- Wipe and reissue, or send to disposal — a sanitised device goes back into stock, an old one goes to IT asset disposal
- Recover or write off stipend-funded items — follow the stipend policy; many organisations let leavers keep chairs and desks
- Clear activation locks and confirm the device can be re-enrolled — Apple Business can turn off Activation Lock on devices the organisation owns
Phase 7
Phase 7: Handover, Exit Call & Close
- Collect handover notes and recorded walkthroughs — remote knowledge lives in direct messages and personal drives, so ask for short screen recordings of recurring work
- Hold the exit conversation by video before the last afternoon — inside the leaver’s working hours, while they still have access to show anything
- Pay final expenses, including any return postage the leaver paid — and any agreed home internet or stipend balance
- Confirm final pay and any approved deduction with payroll — nothing is deducted without the approval recorded in Phase 5
- Update the asset register and close the record — status, date and next step for every device on the Phase 1 list
Lock, Retire, Wipe or Preserve: Choosing the Action
Wiping feels like the safe default, and often it is not. A wipe destroys evidence you may be obliged to keep, and on a personal device it destroys the leaver’s own data. Pick the action from the situation.
| Situation | Action | Why | Evidence to keep |
|---|---|---|---|
| Company device returned, no hold | Wipe and reissue, or dispose | Data has no further use on that device | Wipe or sanitisation record by serial |
| Company device returned, legal hold | Preserve; do not wipe | The data may be needed as evidence | Custody log and storage location |
| Company device not returned, no hold | Lock now, wipe once approved | Locking buys time without losing data | Lock and wipe status, approval |
| Company device not returned, legal hold | Lock only and escalate to legal | A wipe would destroy what the hold protects | Escalation record |
| Personal phone with a work profile or protected apps | Retire or selective wipe | Removes work data only | Retire status |
| Company files on a personal computer | Ask, then confirm in writing | Unmanaged devices cannot be wiped remotely | Leaver’s written confirmation |
Article 5(1)(f) of the UK and EU GDPR requires security against loss and unauthorised access, and Article 32 names encryption among the measures. If a device never comes back, decide whether that is a personal data breach: one that risks people’s rights must be reported to the regulator within 72 hours, now the Information Commission in the UK, and encryption is the best evidence that the risk is low. In Microsoft Intune, Retire keeps personal data, and the action runs only when the device next checks in.
Two points for the money. In the UK, section 13 of the Employment Rights Act 1996 allows a deduction from wages only under a contract term or the worker’s written consent given beforehand, so settle the equipment clause at onboarding. And for kit returned to the UK from abroad, HMRC’s Returned Goods Relief can remove import duty and VAT for goods coming back unaltered within three years, if you can show they were exported.
Why Run Remote Offboarding in CheckFlow?
No wipe without a decision
The wipe approver and the HR contact are picked in Phase 1, and the checklist halts at each approval. A wipe cannot be sent before someone has checked for a legal hold, and no deduction reaches payroll unapproved.
Timed to the leaver’s last day
Dynamic due dates count from the last working day, so packaging goes out before it and the chase follows it. Conditional logic adds customs, personal-device and urgent cut-off tasks only when they apply, and the activity trail shows who did each step.
Identity, devices and HR coordination for every leaver run through CheckFlow’s IT offboarding checklist software, and the IT offboarding security guide sets the order for voluntary and involuntary exits. A webhook or Zapier trigger from your HR system can start this checklist when a remote leaver is confirmed.
A clean exit starts at the beginning. Remote employee onboarding software records what was shipped and to which address, the Remote Employee Onboarding Checklist covers the first ninety days, and the Remote Work Security Checklist sets up the controls this page later removes.
Frequently Asked Questions
How do you get equipment back from a remote employee?
Confirm the address, send prepaid padded packaging with a packing list by serial number, and book a tracked, insured collection from the door so the leaver does not have to pay or queue. Ask them not to reset anything. Log the tracking reference, check each serial on arrival, and chase on a fixed timetable if a box does not appear.
Should you remotely wipe a leaver’s laptop?
Not as a first step. Lock it first where the platform allows: a lock protects the data and keeps it intact. Wipe only once someone has confirmed there is no legal hold, investigation or business data still needed, and record that approval. A wipe command also waits until the device next connects, so record when it was sent and when it completed.
Can you deduct unreturned equipment from final pay?
In the UK, only if the employment contract allows it or the employee agreed in writing before the event, under section 13 of the Employment Rights Act 1996. Consent given after the laptop goes missing does not count. Other countries and US states have their own rules, so take advice before deducting anything.
When should a remote leaver’s access be removed?
For a planned exit, at an agreed local time on the last working day, set in the leaver’s time zone and converted for the person doing it. For a dismissal or other urgent exit, during the conversation itself. Check the sign-in logs the next working day.
How do you remove company data from a leaver’s personal phone?
Use a retire or selective wipe from your device management tool. On an Android work profile it removes the whole profile; with protected apps it removes work data from those apps the next time they open. Personal photos and messages are untouched. Where work data sat outside managed apps, ask the leaver to delete it and confirm in writing.
Is CheckFlow free for this template?
14-day free trial, no card required. The Business plan is $10 per user per month after the trial. Full details at checkflow.io/pricing.