When a person leaves the company — an employee, a departing director, or an outside adviser whose engagement has ended — their access should end at the same time. Doing it promptly protects your company’s financial data and keeps your user list honest.
Same-day checklist
- Sign in and go to Account > Users & roles, find the person and select Remove access. Their login is revoked immediately.
- If they were the main administrator or an authorised signatory, promote a replacement first so you are never left without one.
- Check for anything only they could do — for example, if they were the sole approver in a dual-approval rule — and reassign it.
- If they had linked their own device for sign-in, that link is removed with their account.
If a director has left the company
A departing director’s access is a special case, because it can also affect who is authorised to act for the company. Removing their login is step one; you should also update your registered details and confirm the current authorised signatory.
Whenever a change touches money, access or your company’s data, we verify the request is genuinely from an authorised person before we act. We will never ask you to confirm full security details by email or phone to release information or push through a change — if a message pressures you to do that, treat it as suspicious and contact us to check.
See also: Account access after a director leaves, Updating the authorised signatory, How to give your bookkeeper read-only access.