On this page5 sections
Published October 22, 2026.
Inventory the access before the contract ends
List every system the vendor can reach: ad accounts, analytics properties, tag managers, CMS, social profiles, email platform, and file storage. Record the role, the authentication method, and whether the vendor owns the account or the business does.
Access that the vendor created may disappear when the vendor leaves. Identify those accounts early and transfer ownership before the last day.
Remove access in the right order
Revoke personal access first, then rotate shared credentials, then review integrations and API tokens. A shared password that survives the offboarding is a latent risk. Check connected apps and scheduled exports.
Record the date and the person who completed each step. A checklist without evidence is a hope.
Preserve the work and the evidence
Export campaign history, creative files, audience definitions, and any documentation the contract requires. Confirm the business retains ownership of the accounts and the data.
Do not delete the vendor’s work simply because the relationship ended. Historical performance is needed for the next agency or hire.
Review the change after 30 days
Check for failed integrations, missing scheduled reports, and unexpected admin changes. A late-discovered dependency is common when a vendor managed a tag or a data connection.
Update the access register and the vendor file with the closure date.
Related reading
For the supporting routine, see this guide and this guide. To discuss the workflow, contact us.
