Offboardly
Nobody leaves with the keys.
When someone joins, Offboardly generates their app checklist. When someone leaves, one click generates the deprovisioning runbook — every account, every shared doc, every key — tracked to revoked. Built for companies without an IT department.
The problem
Offboarding is a Slack message and a prayer
The 25-person agency deprovisions people manually. Two years later, 30 active accounts belong to people who left.
License waste burns silently
One forgotten Salesforce seat is $1,800/yr. Unused licenses across 15 apps add up to real money nobody sees.
Auditors ask for proof you don't have
SOC 2 and customer security reviews require timely-deprovisioning evidence. Scrambling to prove access was revoked is a special kind of pain.
Why Offboardly
Offboarding in one click
Enter the last day; get a risk-ordered runbook — identity apps first, ownership transfer last. 10 minutes, not 2 hours.
The 15 apps you actually use
Deep runbooks for Google Workspace, M365, Slack, GitHub, AWS, 1Password — the SMB stack, not 100 integrations you'll never touch.
SOC 2 evidence without the IT team
Quarterly access reviews with reviewer, decision, and timestamp per app per person — formatted for auditors.
Honest limits, up front
- v1 is runbook-guided, not API-automated: it never provisions or revokes app access itself.
- Every deprovision step requires human confirmation. We never auto-revoke silently.
- Waste math uses approximate published list prices — labeled on every row, verified before quoting to a customer.
- Offboardly is not an identity provider or an HRIS — it starts where the HRIS stops: the apps.