The ITRE Review / Brokerage operations
When an Agent Leaves: An Offboarding Checklist for Brokerages
A step-by-step approach to ending access, recovering files and protecting client information when a licensee departs.
Agents move between brokerages, and sometimes the departure is amicable and sometimes it is not. In either case, the technology consequences are the same: mailboxes, files, listing accounts and devices that hold client information. A brokerage that has no checklist often discovers months later that a former agent still has access. This article provides a simple, defensible offboarding sequence.
Start with the licensing change
The offboarding clock starts when the managing broker records the change of status. At that moment, a task should be generated for the administrator and for IT, listing everything that must happen and by when. A same-day timetable for access removal is reasonable, with scheduled follow-up for files and equipment.
Tying offboarding to the licensing change avoids the common gap in which no one tells IT that an agent has gone, because the departure was discussed only between the managing broker and the agent.
Ending access in the right order
First disable sign-in on the agent's account and revoke active sessions. Then reset multi-factor authentication methods, remove access to the CRM, listing systems, e-signature accounts and shared drives, and check for forwarding rules or delegated access to other mailboxes. Remove the person from distribution lists and Teams or chat channels.
Resist the temptation to delete the account. Convert the mailbox to a shared one, or retain it under your retention policy, so that client messages can still be handled and files located.
Dealing with client files and listings
Active files must be reassigned or handed over according to the brokerage's policy and the clients' wishes. Archive closed files in the central repository, not in the departing agent's folders. Make sure that listings, websites and social media accounts used for brokerage marketing remain under the brokerage's control.
Maintain a log of what was transferred, to whom and when. If a dispute arises, a record created at the time is far more persuasive than a recollection.
Devices and personal phones
Brokerage-owned equipment should be returned and wiped. For personal phones, selective removal of brokerage data through app protection is appropriate, and it leaves personal content untouched. Confirm completion and record it.
If the agent used personal email or cloud storage for client files, send a polite written reminder of the obligation to return or delete them, and confirm the response. Where relationships are strained, involve the managing broker and legal counsel.
Learn from each departure
Every departure reveals something about the brokerage's systems. If an agent had access to more than they needed, tighten roles. If files were scattered, improve the repository. If the checklist missed something, update it.
Run a quarterly access review as well, comparing the list of active licensees against active accounts. It typically finds a few forgotten entries, and it provides evidence of supervision if the regulator asks.
Common mistakes we see
Offboarding often fails because the process depends on one person remembering. The managing broker records the departure, the administrator hears about it a week later and IT hears about it at the next quarterly review. The cure is a single trigger that notifies everyone at once.
Another mistake is deleting the mailbox immediately, which destroys evidence and loses client messages. A third is neglecting marketing accounts, social profiles and domains that were set up in the agent's name for brokerage purposes. Check who is the registered owner of each. Finally, tone matters: courteous written reminders are more effective than threats, and they create a record.
Checklist to take to your next meeting
- Offboarding triggered by the licensing status change
- Same-day sign-in disablement and session revocation
- Check for forwarding rules and delegated mailbox access
- Mailbox converted to shared or retained, not deleted
- Logged hand-over of active files and marketing accounts
- Quarterly comparison of licensees to active accounts
Where this fits in your technology plan
Guidance works best as part of a coordinated programme rather than a one-off fix. These ITRE services address the subject directly.
- 01Cloud for Brokerages
Cloud for Brokerages moves the office out of the back-room server and the personal Dropbox into a governed environment on Microsoft Azure, Microsoft 365 or Google Workspace, with clear ownership of every account and document store.
- 02Data & Reporting Dashboards
Data and Reporting Dashboards pull information from your CRM, accounting, property-management and transaction systems into a single model, so owners and managing brokers can see the state of the business without waiting for a month-end spreadsheet.
- 03Microsoft 365 for Real Estate
Microsoft 365 for Real Estate is a tenant design and support service. We configure Exchange, SharePoint, OneDrive, Teams and the security stack so that deal rooms, listing teams and development projects each have a tidy, secure home.
Further reading
- 01PropTech Founders: Preparing for Enterprise Security Questionnaires
How early-stage PropTech companies can build a credible security posture before a brokerage, REIT or landlord procurement review.
- 02Protecting Borrower Data: Security for Mortgage Brokers
How mortgage brokers can safeguard income, identity and credit information while keeping applications moving quickly.
- 03Strata Data Governance in BC: Records, Owners and Privacy
A practical guide for strata councils and managers on keeping records safe, accessible and handled in line with BC privacy law.
Take it to your next leadership meeting
Guidance is only useful when someone acts on it. If this article raised questions about your own office, development or portfolio, bring the checklist above to your next leadership meeting and assign an owner to each item. ITRE offers a free thirty-minute consultation to help you decide what to do first and what can wait.
Speak with an advisor
To discuss any of this in the context of your business, call (604) 632-4959 or write to info@SAZ.ca. You will speak with a senior advisor, and the guidance on this site is reviewed by Ali Sedighi, MBA. There is no obligation, no lock-in and no sales script.
Questions and answers
- Should we delete a departed agent's mailbox?
- Generally not immediately. Retain it under policy, or convert it to a shared mailbox, so that client messages are not lost and evidence is preserved.
- Can we wipe an agent's personal phone?
- Only the brokerage data, through app protection or a work profile. Wiping personal content is inappropriate and often unlawful without consent.
- Who owns the leads in the CRM?
- That depends on your agent agreement and brokerage policy. Technically, we ensure the data is held in a brokerage-controlled system and can be reassigned.
- How fast should access be removed?
- On the same day as the status change is recorded. Delays create unnecessary risk, so automate the process wherever you can.
- Can ITRE implement this workflow?
- Yes. Brokerage Managed IT includes joiner, mover and leaver workflows tied to the licensing change, with a log for the managing broker.