Offboarding Rules

Termination checklists generated automatically from the third party's type and current risk tier.

Show inactive

Task	Vendor types	Risk tiers	Requirement	Evidence	Origin	Actions
Contract termination notice issued	All types	LowMediumHighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
Access revocation (SSO, VPN, consoles)	All types	LowMediumHighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
API / SDK credential revocation	SaaS ProviderCloud Service ProviderAnalytics Provider	MediumHighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
Data deletion executed	Data ProcessorSaaS ProviderCloud Service ProviderHR / Payroll Provider	LowMediumHighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
Data deletion certificate obtained	Data ProcessorHR / Payroll ProviderPayment Processor	HighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
Data return to organization	Data ProcessorCloud Service Provider	MediumHighCritical	Optional	Required	System	Updated 2026-08-01 · System
Backup and DR copy deletion	Cloud Service Provider	HighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
Sub-processor cleanup confirmation	Data ProcessorSaaS Provider	MediumHighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
Storage location decommission	Cloud Service Provider	HighCritical	Optional	—	System	Updated 2026-08-01 · System
Consent policy / CMP link disabled	Marketing AgencyAnalytics Provider	LowMediumHighCritical	Mandatory	—	System	Updated 2026-08-01 · System
Final compliance review sign-off	All types	HighCritical	Mandatory	Required	System	Updated 2026-08-01 · System
Risk closure and audit trail archive	All types	LowMediumHighCritical	Mandatory	Required	System	Updated 2026-08-01 · System