Getting started
What to do with former employees' mailboxes and drives
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
With a former employee's email account and drives, choose one of four paths: convert to a shared or inactive mailbox, archive under a retention policy, export to company storage, or delete. Decide by legal hold status first, then by business need and value. The rule: delete nothing until holds, ownership transfer and a value check are complete.
Key takeaways
- Check for legal holds before making any change to a departed user's mailbox or drive.
- Transfer ownership of shared files before deleting an account, or links and folders can break.
- Paying for a full license on every departed user is an expensive default, not a policy.
- Mailboxes hold more personal content than ticket or job systems, so any value review needs extra care.
- A written offboarding checklist makes each later decision consistent and defensible.
What are the options for a former employee's email account?#
The options for a former employee's email account are to convert it to a shared or inactive mailbox, archive it under a retention policy, export its contents to company storage, or delete it. Microsoft 365 and Google Workspace both support versions of these paths, but the mechanics and license requirements differ by plan and change over time.
Drives follow the same logic with one extra step. Files in a departed user's OneDrive or Google Drive may be shared with colleagues or customers, so ownership has to move to a manager or a shared location before anything is deleted.
Chat is the overlooked third store. Slack and Teams messages, including direct messages, may follow different retention settings from email, and a departure does not change them. Check how your workspace handles a deactivated user's messages and files, and align those settings with the email decision. In Microsoft 365, Microsoft states that deleting the mailbox of a user covered by an active Teams retention policy turns it into an inactive mailbox that keeps the Teams data. In Slack, exporting all conversations for a single user is listed only for the Enterprise plan.
Comparing convert, archive, export and delete#
Comparing the options side by side shows that the cheapest choice is rarely the safest and the safest is rarely the most useful. The table rates each path on ongoing cost, how well it handles a legal hold and what it means for the value of the content.
Costs here are relative. License names, storage allowances and retention features change, so check the platform's current documentation and your agreement before choosing a default.
| Option | Ongoing cost | Legal-hold fit | Value notes |
|---|---|---|---|
| Convert to a shared or inactive mailbox | Low to moderate, depending on plan and size | Good when retention policies or holds apply to it | Content stays searchable for successors |
| Archive under a retention policy | Storage and archive licensing | Good; built for holds and eDiscovery | Searchable by admins, awkward for teams |
| Export to company storage | Storage only, plus one-time effort | Weaker; exported files must be secured against change | Portable and usable for later review |
| Keep the full user license active | Highest; a paid seat per departed user | Works, at a high cost | No better than conversion for most needs |
| Delete | None after deletion | Never while a hold applies | Any value is lost permanently |
Why legal holds come first#
Legal holds come first because deleting or altering a departed employee's mailbox during litigation or an investigation can create serious problems for the company. Departures that involve a dispute, a complaint, a regulator or a customer claim should go to counsel before IT touches the account.
Use the platform's own hold features rather than an export when a hold applies. Built-in holds are designed to preserve content in place, while an exported file can be edited, misplaced or questioned later.
Holds also reach beyond the mailbox. The same matter may cover the person's drive files, chat messages and phone records, so apply the hold to each location the employee used and record which ones were covered.
A departed-user checklist for IT#
A departed-user checklist turns offboarding from a judgment call into a routine. Run the same steps for every departure, including contractors and temporary staff who held company accounts.
- Disable sign-in and revoke sessions, app passwords and tokens on the day of departure.
- Ask HR and counsel whether any hold or dispute applies.
- Set an auto-reply naming a successor, or a time-limited forward.
- Transfer ownership of drive files and shared folders to the manager or a team location.
- Reassign ownership of recurring meetings the user organized.
- Convert, archive or export the mailbox according to the written policy.
- Apply the same retention rules to the user's Slack or Teams history.
- Record what was done, when and who approved it.
- Schedule a review date before any deletion.
Do former employees' mailboxes have business value?#
Former employees' mailboxes have business value when they hold work that exists nowhere else: estimating discussions, customer escalations, engineering decisions or supplier negotiations. A senior estimator's or project manager's mailbox can be the only record of why certain jobs were priced or scoped the way they were.
Mailboxes are also among the most personal stores a company holds. They mix work with personal messages, HR matters, health notes and third-party details. Any reuse beyond the original purpose needs a rights and privacy review, and structured systems such as tickets, CRM or project records are usually cleaner sources of the same knowledge.
| Account type | What it often holds | Value review priority |
|---|---|---|
| Senior estimator or project manager | Scope debates, pricing rationale, change negotiations | High, after a privacy review |
| Engineer or architect | Design discussions, review comments, vendor questions | High where not duplicated in Jira or project files |
| Support or account lead | Escalations, renewals, customer complaints | Medium; ticket systems usually hold the cleaner copy |
| Executive | Strategy, board matters, HR and legal threads | Low for reuse; high for retention and holds |
| Short-tenure or junior role | Routine coordination | Low |
Illustrative: a software company clears a backlog of departed accounts#
Illustrative: a fictional B2B software company on Google Workspace finds it has been paying for licenses on many departed users after a reorganization. Some accounts belong to engineers whose drives hold design docs; others belong to support leads with years of customer escalations.
The CTO sets a policy. HR and counsel clear each account for holds, and two accounts tied to an open contract dispute go into a Vault hold. Drive files move to shared drives owned by each team. Remaining mailboxes are exported through Vault, which delivers mail as PST or mbox files and converts Docs, Sheets and Slides to Office formats. Because Vault export files are deleted 15 days after the export starts, IT downloads each one to company storage with an index the same week, then releases the licenses.
The design docs and escalation threads are flagged for a later value review. The CTO notes that much of the same knowledge exists in cleaner form in Jira, GitHub and Zendesk, which become the first candidates for any outside use.
How SourceX treats mailboxes and drives#
SourceX usually starts with structured systems such as help desks, issue trackers, CRMs and job platforms, because they carry less personal content than mailboxes. Where email or drive content is in scope, the Rights and Preparation steps of the SourceX five-step transaction review employee notices and contracts and remove personal and confidential details, and the company approves exactly what is included.
Frequently asked questions
How long should we keep a former employee's mailbox?
Keep it as long as your retention schedule, any legal hold and business needs require, then follow the documented disposal step. Set the period with counsel based on litigation exposure, employment rules and the person's role. Senior leaders and people involved in disputes often warrant longer retention than routine roles.
Can a manager read a former employee's email?
Often yes for business purposes, but it depends on company policy, employee notices, applicable law and the content involved. Personal messages, privileged communications and HR matters need care. Keep a written access policy, limit access to a named person and log what was reviewed. Ask counsel where the rules are unclear.
Should we forward a departed employee's email to a colleague?
A time-limited forward catches customer and supplier messages, but it can expose personal messages and third-party information to the successor. An auto-reply naming the new contact, or a shared mailbox with controlled access, is often cleaner. Whichever you use, set an end date.
What happens to shared files when the account is deleted?
On many platforms, files owned by a deleted user go with the account unless ownership is transferred first, which can break links and folders used by colleagues and customers. Transfer drive content to a manager or shared location before deletion, and confirm the transfer completed.
Do contractors' accounts need the same process?
Yes. Contractors and temporary staff often have company mailboxes and drives, and their offboarding is easier to miss because HR may not process it. Include them in the same checklist, tie account end dates to contract end dates and record who approved each step.
What about outside services tied to the departed user's email?
Many SaaS tools, vendor portals, domain registrations and cloud accounts are registered to an individual's work address. Before deleting or converting the mailbox, list services that send password resets or billing notices to it, move ownership to a role-based address, and keep the mailbox reachable until every transfer is done.
Sources
- Microsoft states that deleting the mailbox of a user covered by an active Teams retention policy converts it into an inactive mailbox that keeps the Teams data. Source
- In Slack's export table, exports by member, including all conversations for a single user, are listed only for Enterprise. Source
- Google Vault exports Gmail, Groups and Chat messages as PST or mbox files, and converts Drive files such as Docs, Sheets and Slides to DOCX, XLSX and PPTX. Source
- Google Vault export files are available for 15 days after the export starts and are then deleted. Source
Related resources
- InsightCan a distributor license its pricing and quote history?
- InsightHow to design a data retention policy that keeps records licensable
- InsightLegacy data after system consolidation: keep, archive, license or delete?
- QuestionShould companies sell or license their data?
- QuestionDo AI labs buy legal documents?
- SolutionEnterprise data: the records of how organizations actually work
See if your company qualifies
A short company assessment. No data uploads are needed.