Client offboarding checklist for freelancers

Offboarding a client well is the last piece of work they see from you, and the one most likely to decide whether they call you again. This checklist is for freelancers and consultants ending an engagement with a client they met on Google Meet and Microsoft Teams: what to hand over, which access to give back and in what order, where client data hides, what to delete and what to keep, and how to confirm it. It ends with how TrackHeros removes a client's meetings in one step. It is not legal advice; contracts and record-keeping rules differ by country and by client.

What goes on a client offboarding checklist?

Five parts, in this order: hand over, give back access, delete data, invoice, confirm. The order matters because each step closes a door the previous one needed.

The short version:

1. Handover document written and handover meeting held.
2. Open action items and decisions sent to the client.
3. Copies the client asked for sent.
4. Credentials you created rotated or handed back.
5. Your access to their accounts and systems removed.
6. Their data deleted from every tool and device you used.
7. Final invoice sent.
8. Deletion confirmed in writing and noted next to the contract.

What should you hand over before you leave?

Everything the next person needs to carry on without calling you. Write it down; a handover call alone is forgotten by Friday.

• Where things are: repositories, environments, documents, the accounts that own them.
• What is unfinished: open action items with owners and dates, known bugs, half-made decisions.
• What was decided: the decisions that shaped the work, with dates, so nobody reopens them by accident.
• Credentials: anything you created on their behalf, handed to a named person and rotated if you knew the secret.
• Copies they want: recordings, notes or exports the client has asked to keep. Send them now, before deletion makes it impossible.

Hold one handover meeting to walk through the document, and send the document afterwards so it is the record, not your memory of the call.

Which access should you remove, and in what order?

Theirs first, then yours. Give back the access the client gave you, then remove the client from your own tools.

1. Client-issued accounts. Sign out of the Google Workspace or Microsoft 365 account they gave you on every browser profile and phone, and tell the client's administrator you are done so they can disable it. The guides to client-issued Google Workspace accounts and client-issued Microsoft 365 accounts cover the setup you are now undoing.
2. Their systems. Code hosting, cloud consoles, project trackers, shared drives, VPNs.
3. Your authenticator. Remove the two-factor entries for their accounts once those accounts are closed.
4. Third-party apps on their accounts. Any app you connected to a client account, such as a notetaker or a scheduling tool, keeps its permission until it is removed. Check the account's list of connected apps before you lose access to it.
5. Your password manager. Delete their entries, or move them to a shared vault the client controls.
6. Your calendar. Decline or remove the recurring meetings that outlive the contract, so a weekly call does not keep appearing, and nothing that joins meetings for you turns up to it.

Leave the client's chat workspace last. It is where they will look for you if the handover missed something, and a goodbye message there is the polite way to close it.

Where does client data hide?

In more places than the project folder. Go through this list on each device you used:

Place	What tends to be there
Meeting notetaker	Recordings, transcripts, summaries, action items
Your cloud drive and laptop	Exported minutes, specs, spreadsheets, screenshots
Downloads folder	Database dumps, log files, attachments opened once
Email	Attachments, forwarded threads, minutes you pasted in
Chat apps	Files and snippets sent in direct messages
Local code and databases	Clones, test databases seeded with real data, .env files
Phone	Photos of whiteboards, voice notes, downloaded files

What client data should you delete, and what should you keep?

Delete the client's working data; keep your business records.

Keep	Delete
The contract and amendments	Meeting recordings and transcripts
Invoices and payment records	Notes and summaries of their meetings, once handed over
Final deliverables, if the contract allows	Copies of their data: dumps, exports, test data
The handover document	Credentials and secrets
A record of what you deleted, and when	Local clones, unless the contract lets you keep them

Check the contract or NDA before you start. A return-or-destroy clause may say what to delete, whether to return it first, and whether you must certify it; AI notetakers and client NDAs shows what those clauses look like. How long you must keep invoices depends on the tax rules where you work.

When should you send the final invoice?

With the handover, not after it. Send it once the work is delivered and the handover document has gone, while your timesheets and delivery evidence are still easy to find. Keep the proof of delivery with the invoice. Deleting the client's data does not mean deleting your own records of the work.

How do you confirm the deletion to the client?

A short email, kept with the contract.

Subject: End of engagement: data deleted

Hi Tom,

As agreed, I've deleted the recordings, transcripts and notes from our meetings, and the copies of your data I held for the project. This covers my notetaker, my laptop and my cloud storage, and was done on 22 October.

I've kept the contract, invoices and the final deliverables, as usual. Thanks for the work together.

Priya

If a tool keeps backups that expire later, say so in one sentence. It is more credible than a claim of instant, total erasure.

How do you offboard a client in TrackHeros?

Collect what you want to keep, then delete the client. Each client is a sealed workspace, so this removes exactly one client's material and nothing else.

Before deleting:

• Export the minutes the client wants. "Export minutes" offers "Copy for email" and "Download PDF" on each meeting; the formal PDF minutes are on paid plans, listed on pricing.
• Write the handover list. Ask the assistant inside that client for the open action items and decisions, and export the answer as Markdown, PDF or email-ready HTML.

Then open the client and use "Delete this client". It "erases every meeting, transcript, summary and recording" for that client from the database, file storage and the meeting-bot service, and other clients are untouched. Type the client's name to confirm, then press "Delete client". It is removed from live systems at once and from backups within 30 days, and nothing is ever restored into a live account. The detail is in what happens to recordings when you delete a client.

Two things deletion cannot reach. PDFs you downloaded and minutes you emailed are outside TrackHeros, so delete those yourself. And on a Microsoft account, remove TrackHeros from the account's app permissions yourself, because Microsoft offers no way for an app to revoke its own permission. Archiving a client is not the same thing: it hides the client from cross-client views and keeps the data. The promises behind deletion are at /#privacy.