Skip to content

Onboarding and offboarding at a fixed price

Onboarding starts with the signature, not on day one.

Before someone can start working, the new hire, HR, their manager and IT all have a lot to do, often over several weeks. I connect it into one flow that forgets nobody. And when someone leaves, their access ends on their last day.

4 to 5 weeks
That is how long a MacBook with a US keyboard usually took to arrive in Berlin when I was at Doodle, up to two months when supply was tight. Order shortly before the start date and you are too late.

What has to happen before someone can work

Four parties, several weeks, lots of handovers. Things can get stuck at every one of them.

  1. As soon as the contract is in

    Signature

    • New hire Name, address, phone and date of birth, plus tax ID, social security number, health insurance and bank details.
    • New hire Sign the contract, data protection terms, IT policy, NDA and further documents.
    • HR Create the profile in the HR software: role, position, salary, department, manager, start date.
    • IT Check whether a suitable laptop is in stock, and order one right away if not.
  2. Weeks before the start

    Preparation

    • New hire Agree on the email address. Changing it later means a lot of work for IT.
    • Manager Decide on access beyond the standard set and approve expensive licences.
    • Manager Pick a buddy, plan meetings for the first weeks, set up a checklist.
    • IT Set up accounts, licences, groups and channels, assign the laptop in device management, ship it with accessories for remote hires.
  3. Day 1

    First working day

    • IT Hand over laptop and office key.
    • New hire Log in with the temporary password sent to their private address, then set their own password and 2FA.
    • IT Enrol them in security training.
  4. After three months

    Review

    • Manager Look back on the first three months.
    • IT Check whether access still matches the role.

And when someone leaves

The last day is what counts. Every login left open is a risk and costs licence fees.

  1. As soon as the leaving date is set

    Planning

    • HR Enter the leaving date in the HR software.
    • Manager Decide who takes over mailbox, files and ongoing work.
    • IT Plan the return of laptop, accessories and key, by courier for remote staff.
  2. Last day

    Last working day

    • IT Lock every login: all at once with SSO, otherwise tool by tool. Anything that can't be locked automatically becomes a task in the ticket.
    • IT Take back laptop, accessories and key.
  3. Afterwards

    Clean-up

    • IT Transfer mailbox and files, release the licences.
    • IT Reset the laptop. It becomes the device for the next hire, without weeks of delivery time.

What the flow takes over

Decisions stay with people. Everything else runs by itself.

Starts at the signature

The entry in your HR software kicks everything off, including the laptop order. Weeks before day one instead of just before.

Asks for decisions

Email address, extra access, expensive licences: a person decides, but with one click in Slack or Teams instead of in passing.

Handles the standard steps

Accounts, licences, groups, channels, device assignment and security training happen without manual work.

Follows up on what is missing

If a signature, an approval or a laptop return is missing, the flow reminds the person responsible.

Documents everything

One ticket per person: who got what, when, and who approved it. That is your evidence in an audit.

Works with your tools

For example Personio, Google Workspace or Microsoft 365, Slack or Teams, Okta or Entra ID, Jamf or Intune, Jira. Built in n8n, so you can adjust it yourselves.

How I solved it at Doodle

Zero-touch

Laptops were bought only from resellers who had our Apple Business Manager ID on file. They showed up in Jamf Pro by themselves and set themselves up on first start.

One ticket per person

Hardware, access, permissions, role and office key were all in one place in Jira.

Secure from day one

Okta sent a temporary password to the private address. The first login required a new password and 2FA.

SOC2 Type II

Onboarding and offboarding built this way and proven in the audit.

What it costs

We settle which systems are included in the first call. After that the price is fixed.

One flow
€3,600

Onboarding or offboarding.

Both flows
€6,000

Onboarding and offboarding built as one.

Included: mapping the process, building, testing, handover with docs and 30 days of aftercare. Fixed prices plus VAT.

No Okta or Entra ID? No problem. The flow works with what you have. Introducing SSO is a project of its own.

How does it work for you today?

In 30 minutes we walk through how people join and leave at your company. Free and non-binding.

Want to automate more than onboarding and offboarding? That is my main offer →

Free 30-minute call

No commitment, no preparation needed: we look together at where your IT is costing you money and time.

Book a slot directly

Open times in my calendar – you see straight away what fits.

or just drop me a line

Your data is used solely to handle your request. Details in the privacy policy.