Free Resources

HR Checklists

Step-by-step checklists for the parts of the employee lifecycle where a missed task costs real money — built for US HR and IT teams.

Employee Onboarding Checklist

From a signed offer to the ninety-day review, with the I-9, W-4 and new-hire reporting deadlines separated from the good practice.

Nothing statutory missed in week one, and a hire who is actually working by day three.

52 steps

Employee Offboarding Checklist

From the day notice is given to closing the file — final pay, COBRA notices, access revocation, asset recovery and record retention.

The final paycheck on time and no access left live after the last day.

41 steps

Vendor Offboarding Checklist

How to exit a supplier without losing your data, your deposit or your notice deadline — contract close-out, data return, access teardown, asset recovery and final settlement.

Notice served before the auto-renewal fires, your data back and verified, and every access path closed.

47 steps

Manager Offboarding Checklist

What changes when the leaver managed people — succession and interim cover, reassigning direct reports, delegated authority and approvals, and stabilising the team afterwards.

Every report reassigned and told, every approval re-owned, and a named interim leader with real authority.

38 steps

Vendor Onboarding Checklist

How to take on a supplier without inheriting their risk — sourcing and risk tiering, entity and tax verification, security diligence, contract terms, payment setup and go-live.

The right entity verified, the exit negotiated before signature, and no access granted that nobody wrote down.

50 steps

HR Offboarding Checklist

What HR alone owns in an exit and has to be able to prove: separation coding, the notices and their proof, records retention with disposal dates, and the clocks that run after the last day.

Every notice served with proof held, every record split and dated, and an unemployment claim you can answer from the file.

36 steps

The access cutover, in the order it has to run: identity teardown, session and token revocation, secret rotation, device wipe and licence reclaim — with the residual-access audit that proves it worked.

Zero active grants at LD+3, every secret the leaver could read rotated, and a timestamp against each step.

39 steps