Offboarding: removing access without losing records

1. Deactivate. People › Staff › Deactivate. Their sessions end that second on every device; their email and PIN stop working; View as no longer lists them. Not deleted — the row stays, greyed, with every record they touched still bearing their name.
2. PINs and devices. Their personal kiosk PIN is revoked by deactivation. If they knew a device's kiosk PIN, reset that kiosk and sign the device in again. If they had the WhatsApp business phone, move the number.
3. Open items. The platform lists what was theirs: tickets assigned, rota days, Inbox items, tenants they were the contact for. Reassign in one screen; nothing is left owned by a deactivated account.
4. Employment record. End employment: the date, the reason (resignation, end of contract, termination after process, redundancy), the notice served. The record closes; it stays readable to admins indefinitely or until the retention period you set.
5. Final pay and clearance. Payroll computes the last period, unused leave if you track it, and deductions; the clearance form (keys, uniform, advances) is signed on their phone or on paper; the certificate of employment generates from the record. Philippine rules on release of final pay and the COE apply — the platform dates everything so you can show you met them.

What stays visible

Every tick, every payment recorded, every ticket closed, every gate entry — with their name, forever. Reports for past months do not change. Their employment record, documents and payslips — to admins, for the retention period. Their own access to their payslips — for ninety days by a link, then on request.

Rehiring

Reactivate the same account; the history is continuous and the new employment record links to the old one. Do not create a second person.