What Software to Cancel When an Employee Leaves: The Complete Checklist
Last updated: June 2026
When an employee leaves, cancel: their Google Workspace seat, Slack, Zoom, LinkedIn Recruiter (if applicable), any SaaS tools visible on the company card, and run a Google OAuth audit to find tools they connected with their work email. Most companies miss the last category — it's where shadow software hides and keeps billing long after the person is gone.
The Problem
A recruiter resigns on a Friday. You spend the weekend figuring out coverage, redistributing their open roles, updating the team. By Tuesday, everything operationally is handled. Three months later, you're reviewing the card statement and see LinkedIn Recruiter Lite — ~$170/month — still billing for an email address that no longer exists. Then Zoom. Then the AI writing tool they signed up for on the company Amex last spring. Then a project management tool you didn't know they were using.
That one person's departure is now costing you $400-600/month in software nobody uses, and it's been quietly billing for 12 weeks.
This isn't a one-time problem. In companies with moderate turnover — staffing agencies, law firms, growing startups — it compounds. Every departure leaves behind a small software tail. Those tails add up.
The scale of this problem is well documented: according to Zylo's 2026 SaaS Management Index, the average organization only actively uses 54% of its SaaS licenses — leaving 46% wasted. For a staffing agency with 100 employees spending $40,000/year on software, that's roughly $18,000 in annual waste. Ghost seats from departed employees are consistently the largest single recoverable category.
Why This Happens
The offboarding process at most small and mid-size companies covers the obvious: return the laptop, revoke building access, cut off email. Software subscriptions are rarely on the checklist because nobody owns them. IT (if there is an IT person) knows about the tools they set up. Finance knows about the big annual renewals. Nobody knows about the 12 tools the employee signed up for themselves using their work email and the company card over two years.
The structural problem: SaaS is designed to be frictionless to start and slow to cancel. A tool that takes 30 seconds to activate takes three support tickets and a cancellation confirmation email to stop. Multiply that across a 10-person departure, and it becomes a half-day project nobody has time for — so it doesn't happen.
The Manual Fix: How to Find Everything
This is a four-step process. Do this within 48 hours of any departure.
Step 1 — Pull the card statement
Go back 90 days on whatever card the employee had access to — corporate Amex, company credit card, or reimbursement history. Filter by recurring charges. Every SaaS subscription billed to that card is a candidate for cancellation.
Flag everything under $500/month. These are the ones that fly under the radar during budget reviews because they're too small to scrutinize individually — but they add up to real money collectively.
Step 2 — Audit Google Workspace
If your company uses Google Workspace, the admin console shows you every tool the employee connected via "Sign in with Google."
Go to: Google Admin Console → Reporting → Audit and investigation → OAuth log events
Filter by the departed employee's email. You'll see every third-party application that was ever granted OAuth access to their Google account. Note: the date range defaults to the last 7 days — extend it to 90+ days to see the full picture for a departed employee.
Export to CSV. Cross-reference against your card statement.
Step 3 — Check seat-based tools individually
For tools that bill per seat, log in as an admin and remove the departed employee's account. Common ones to check:
- Slack — Settings → Members → find by email → Deactivate
- Zoom — Admin Portal → User Management → remove or downgrade
- LinkedIn Recruiter — Admin → Manage Users → remove seat
- Notion — Settings → Members → remove
- Figma — Admin → Members → remove and reclaim seat
- HubSpot / CRM — Admin → Users → deactivate
- Any AI tools — ChatGPT Teams, Claude for Work, Gemini, Copilot — check if there's a team subscription
Step 4 — Check tools owned under their email
Some tools are owned by the employee's email specifically — meaning the company doesn't have admin access and can't see the account at all. Common ones: Canva Pro, personal Notion accounts, some AI subscriptions billed directly to the employee's work email on a personal card.
For these, you need to either:
- Contact the vendor directly and request a transfer or cancellation
- Watch the card statement for the next billing cycle and dispute the charge if the account can't be cancelled
Where This Breaks Down
This process works for 5 employees and 8 known tools. It takes about 90 minutes.
If you have 80 employees, 40 SaaS subscriptions, and a turnover rate above 15% — which is the norm in staffing, recruiting, and professional services — you're looking at doing this multiple times a month, across tools you may not have visibility into, for accounts you may not have admin access to.
The Google OAuth audit in Step 2 shows you what's connected, but not what's actively billing. The card statement shows you what's billing, but not who's using it or whether they've left. Cross-referencing the two manually, across every departure, every month, is a full-time job nobody has.
The other gap: tools signed up on a personal card — the employee's own credit card, expensed monthly — never show up in your company statement at all. Those tools keep billing the employee's card, get reimbursed, and disappear into expense reports. Nobody catches them until the expense report keeps coming in for someone who left three months ago.
How Terrier Handles This
Terrier automates the entire process above. It connects to your Google Workspace directory and reads your corporate card transactions, then cross-references them to find:
- Seats billing for email addresses that no longer appear as active employees
- OAuth-connected tools that were granted access by people who have since been offboarded
- Recurring charges on the card with no active Google Workspace user attached
It surfaces all of this in minutes, in a single report, without reading email content, calendar data, or any client files. Just the metadata — who connected what, what's billing, and whether the person is still there.
For staffing agencies, law firms, and accounting firms specifically: Terrier never sees client data, employee performance data, or anything covered by attorney-client privilege or financial confidentiality rules. It reads directory metadata and transaction amounts only.
terrierops.com — free to scan your first month.
One Thing You Can Do Right Now
Open your corporate card statement from 90 days ago. Highlight every recurring charge under $300/month. Pull your current employee list. Check each charge against the list — is the person who signed up for this tool still working here?
That gap between "what's billing" and "who's still here" is your immediate savings. No tool required. That's your starting point.
Frequently Asked Questions
Q: How do I find software an employee signed up for that I don't know about?
The most reliable method is the Google OAuth audit log in Google Admin Console: go to Reporting → Audit and investigation → OAuth log events, extend the date range to 90+ days, and filter by the employee's email. You'll see every third-party tool they ever authorized with their work Google account — including tools that never went through procurement and never appeared on a PO.
Q: What happens to SaaS accounts after an employee leaves if I don't cancel them?
They keep billing. Most SaaS subscriptions are tied to a payment method, not to an active employee account. Unless you explicitly cancel the subscription or remove the seat, the charge continues indefinitely. In annual contracts, you may be locked in until the renewal date regardless.
Q: How long do companies typically keep paying for ghost seats before catching them?
Most companies only review software spend during quarterly or annual budget cycles. In practice, that means a departed employee's subscriptions often keep billing for 1-3 months before anyone identifies and cancels them — and longer for small recurring charges that fall below the threshold of a typical budget conversation. Annual contracts compound this further: even if you catch the ghost seat, you may be locked in until the renewal date.
Q: Do I need IT to do a software offboarding audit?
No. The Google Admin Console audit is accessible to any Google Workspace Super Admin — often the managing partner, office manager, or operations director at smaller firms. The card statement review requires finance access, not technical access. Neither step requires an IT department.
Q: What's the most commonly missed category of software when someone leaves?
AI tools. Employees sign up for ChatGPT Teams, Claude for Work, or AI writing tools individually, often on the company card, without going through a procurement process. These subscriptions are rarely in any IT inventory, don't show up in SSO systems, and keep billing indefinitely. The Google OAuth audit is the only reliable way to find them.
Q: Is there a standard SaaS offboarding checklist I can use?
See our companion guide: The SaaS Offboarding Checklist: Every Subscription to Cancel When Someone Leaves — a downloadable, categorized checklist covering identity, communication, recruiting, finance, design, and AI tools.
Q: How is Terrier different from asking employees to self-report their tools before they leave?
Self-reporting catches the tools employees remember and choose to disclose. It misses tools they forgot about, tools they'd prefer not to disclose, and tools connected via OAuth that they may not even realize are still active. Terrier reads the actual OAuth grant history and transaction data, independent of what the employee reports.
Terrier is a SaaS spend optimization platform for Google Workspace companies. It finds ghost seats, shadow AI, and duplicate tools in minutes without accessing email content or client data. terrierops.com