Virtual Assistant Termination: How to Revoke Access Safely
When a virtual assistant relationship ends, how you handle the offboarding determines whether sensitive data and systems remain secure. A hasty or incomplete offboarding creates significant security risk.
Why Offboarding Matters
A departing VA retains the knowledge of every system they accessed, every password they knew, and every document they handled. Without proper offboarding, they retain the ability to access your accounts — whether intentionally or through shared credentials that weren't changed.
Offboarding Checklist: Day of Termination
Complete these steps immediately when terminating a VA relationship:
- Revoke access to all email accounts
- Remove from all software user accounts (CRM, project management, etc.)
- Change all shared passwords immediately
- Remove from password manager vault
- Revoke social media access via management tools
- Disable any VPN credentials
- Remove from shared cloud storage folders
- Rotate API keys or tokens they had access to
Recovering Work Products
Before or during offboarding:
- Request delivery of any work in progress
- Confirm transfer of files and documents from VA's storage
- Recover credentials for any accounts the VA managed on your behalf
- Document what was received
Communication and Legal Obligations
Depending on your contractor agreement:
- Confirm final payment obligations
- Reiterate confidentiality and NDA obligations that survive termination
- Obtain written confirmation that the VA has deleted all copies of your business data from their personal devices
Immediate vs. Planned Departures
For planned offboarding (e.g., end of contract), you have time to transition work properly. For immediate terminations, prioritize access revocation above all else, then work on knowledge transfer afterward.
Ready to Hire?
Virtual Assistant VA connects you with trained VAs.