Question 1

What is the Workflow Automation Engine and how does it work?

Accepted Answer

The Workflow Automation Engine lets you build no-code rules that trigger actions automatically as an offboarding progresses. You define a trigger - such as a status change (e.g., "entered IT Revocation"), a time condition (e.g., "7 days before exit date"), or an event (e.g., "all checklist items completed") - and pair it with an action: send an in-app notification, fire a templated email, auto-assign a checklist template, or advance the offboarding to the next stage. Rules run silently in the background, eliminating the manual follow-up that usually falls through the cracks. You can test any rule instantly from the Settings → Automations panel before activating it in production.

Question 2

What is SCIM provisioning and how does it work in PurpletGo?

Accepted Answer

SCIM (System for Cross-domain Identity Management) is an open standard that lets identity providers push user lifecycle events - provisioning, updates, and deprovisioning - directly to connected apps. In PurpletGo, Enterprise plans can generate a per-org SCIM 2.0 Bearer token in Settings → Integrations. You paste the PurpletGo SCIM endpoint URL and token into your IdP (Okta, Azure AD, JumpCloud, OneLogin, or any SCIM-compatible provider), and from that point on, whenever your IdP deprovisions a user, PurpletGo automatically creates a termination offboarding record for that employee. No polling, no manual triggers - the entire offboarding process is initiated the instant the IdP signals a user removal.

Question 3

Which identity providers does PurpletGo support for direct access revocation?

Accepted Answer

PurpletGo has live connectors for seven identity providers: Google Workspace (account suspend, session sign-out, token revoke), GitHub (org member removal), Okta (user deactivation + session clear), JumpCloud (account suspend), OneLogin (account suspend), Ping Identity (account disable), and Microsoft 365 / Azure AD (account disable, sign-in session revoke, license removal, mailbox OOO). When an employee is offboarded you simply tick the providers to revoke, and PurpletGo handles each one in parallel. Every action is timestamped in the audit log.

Question 4

How does PurpletGo deprovision Microsoft 365 and Azure AD accounts?

Accepted Answer

When 'Azure AD' is added to the access revocation list on an offboarding, PurpletGo executes four deprovisioning steps in parallel using the Microsoft Graph API: (1) Disable the Azure AD account - this immediately blocks access to every connected Microsoft app, including Teams, SharePoint, and OneDrive. (2) Revoke all active sign-in sessions - any existing browser or mobile session is invalidated within minutes. (3) Remove all assigned Microsoft 365 licenses - recovering the seat for reallocation the same day. (4) Set an out-of-office auto-reply on the departing employee's mailbox, redirecting senders to the manager. Each step is attempted independently so a partial failure doesn't block the others. Every action is logged in the audit trail.

Question 5

What integrations does PurpletGo support for access revocation?

Accepted Answer

PurpletGo has live integrations with Google Workspace, Slack, GitHub, Okta, JumpCloud, OneLogin, Ping Identity, and Microsoft 365 / Azure AD. HRIS sync is supported for BambooHR, Workday, Rippling, Gusto, and ADP Workforce Now - with automatic termination detection that creates offboarding records without any manual step. IT ticket auto-creation with two-way sync is supported for Jira, Freshdesk, ServiceNow, and Zendesk. Enterprise plans also include a SCIM 2.0 endpoint so any IdP can push deprovisioning events directly to PurpletGo.

Question 6

Does PurpletGo support e-signatures? Which providers?

Accepted Answer

Yes - PurpletGo supports three court-admissible e-signature providers:

• **DocuSign** - connect using your DocuSign account ID and access token. PurpletGo creates a DocuSign envelope, sends the signing email, and receives webhook callbacks via DocuSign Connect when the document is signed or declined.
• **Adobe Acrobat Sign** - connect with your OAuth access token. PurpletGo uploads the document as a transient asset, creates an agreement, and receives status updates via Adobe Sign webhooks.
• **Dropbox Sign** (formerly HelloSign) - available as a shared integration on Team and Enterprise plans without additional configuration.

Connect your preferred provider in Settings → Integrations → E-Signature Providers. Once connected, a 'Send for Signature' button appears on every uploaded compliance document (NDAs, severance agreements, exit letters, IP assignments, etc.). Signing status is tracked in real time - pending, signed, declined, or cancelled - and every signed event is written to the tamper-evident audit log.

Question 7

How does the employee self-service portal work?

Accepted Answer

HR sends a departing employee a secure magic link - no account creation required. The portal gives the employee a complete offboarding experience: My Tasks, Equipment Return, Benefits & COBRA, Reference Letters, and Alumni Network. Every interaction is timestamped in the audit log so HR has a complete record without any back-and-forth.

Question 8

What is knowledge transfer tracking?

Accepted Answer

Knowledge transfer items are structured tasks attached to an offboarding that track which documentation, credentials, and responsibilities have been handed off before the exit date. Each item has a title, description, assignee, and completion status - separate from the main checklist so they can be reviewed independently.

Question 9

Can managers initiate offboardings?

Accepted Answer

Yes. Users with the Manager role can submit a structured offboarding request directly from the Initiations page. The request enters an approval queue where HR or any configured approver can review, approve, or reject it - keeping managers in the loop without giving them full admin access. On Team and Enterprise plans you can attach a multi-step approval chain so the request passes through Manager → HR → Legal (or any sequence you define) before the offboarding record is created.

Question 10

How does exit interview scheduling work?

Accepted Answer

Exit interview scheduling (Team and Enterprise plans) lets HR book interview slots directly from the offboarding record - no spreadsheet juggling or email back-and-forth.

**Calendly:** Connect a Calendly personal access token in Settings → Integrations → Exit Interview Scheduling. On any offboarding, pick an event type (e.g. your '30-minute exit interview' meeting type) and PurpletGo generates a one-off Calendly booking link. The employee visits the link and self-selects a slot. When they book, Calendly fires a webhook to PurpletGo which automatically records the date, time, and video meeting link on the offboarding record. Cancellations are also synced in real time.

**Google Calendar:** Connect Google Calendar via OAuth (Settings → Integrations → Exit Interview Scheduling). On any offboarding, pick a date/time and duration. PurpletGo creates a Google Calendar event with a Google Meet conference link and sends calendar invites to both the HR interviewer and the departing employee - all in one click. The Meet link is stored on the offboarding record.

**Manual:** If no provider is connected, HR can still record a scheduled date, time, duration, meeting link, and interviewer name manually.

All three flows write the schedule to the audit log. The status tracks the full lifecycle: Pending → Scheduled → Completed → Cancelled.

Question 11

What is the Offboarding → Onboarding Bridge?

Accepted Answer

The Onboarding Bridge (Team and Enterprise plans) lets HR kick off a replacement hire's onboarding checklist directly from a completed offboarding record - closing the loop between someone leaving and their replacement arriving.

**How it works:**
1. Open any offboarding that has reached the Completed stage.
2. The "Replacement Onboarding" card appears at the bottom of the record. Click "Start Onboarding".
3. PurpletGo pre-fills the new hire's role and department from the departing employee. Enter the new hire's name, email, start date, and hiring manager email.
4. PurpletGo creates an onboarding record and seeds a **default checklist of 15+ tasks** automatically - categorised by Admin, IT, HR, Culture, and Role. Engineering, Sales, and HR roles get additional role-specific tasks.
5. All org admins and HR members receive an email notification with the hire details and task count.

**Managing onboardings:** The "Onboarding" page (sidebar → People & Workflow) shows all active replacement onboardings across the org, with progress bars, status filters (Pending / In Progress / Completed / Cancelled), and links back to the originating offboarding record.

**Task management:** Each task can be checked off directly from the employee detail page or the dashboard. The progress bar updates in real time.

Question 12

How does exit interview form builder work?

Accepted Answer

Admins create custom templates with text, rating scale, and multiple-choice fields (Settings → Exit Interviews) and assign them to offboarding cases. When an employee submits their responses, PurpletGo automatically runs AI sentiment analysis on all open-text answers. Each response receives a sentiment label, a score, a one-sentence AI summary, and up to 3 themes (compensation, management, career growth, work-life balance, culture, etc.). The Analytics page has a dedicated Exit Interviews tab showing sentiment trends, average scores by department, and a Retention Signals panel. On Team and Enterprise plans, the AI HR Copilot can also generate a full quarterly summary report across all exit interviews - see below.

Question 13

What is the AI HR Copilot and what can it do?

Accepted Answer

The AI HR Copilot (Team and Enterprise plans, Analytics → AI Copilot tab and Employee Detail page) extends the base AI assistant with three advanced capabilities:

1. Document Drafting - on any offboarding record, click Generate Draft to produce a complete, personalised Exit Letter or Separation Agreement. Choose the document type, add optional context (severance amount, specific clauses), and the AI fills in the employee's name, role, tenure, last working day, and company details. The draft is displayed inline with a one-click copy to clipboard. Always review with legal counsel before sending a separation agreement.

2. Quarterly Exit Interview Summary - select any year and quarter, then click Generate Report. The AI synthesises all exit interview responses for that period into an executive report: a 2–3 sentence overview, key themes ranked by frequency and sentiment, per-department insights with trend direction (improving/stable/declining), prioritised recommendations, and action items with owner and urgency.

3. Resignation Risk Predictions - click Run Analysis to identify which departments are at elevated risk of voluntary resignations in the next 30 days. The AI analyses the last 90 days of offboarding data - resignation count per department, SLA breach rates (a disengagement proxy), and average checklist completion speed - then returns at-risk departments with risk level, supporting signals, early warning signs, and recommended retention actions. Results are cached per day to avoid repeated AI calls.

Question 14

Can PurpletGo draft exit letters and separation agreements automatically?

Accepted Answer

Yes - on Team and Enterprise plans. On any employee offboarding record, scroll to the AI Document Drafter card. Select Exit Letter (warm, professional tone acknowledging contributions and final-day logistics) or Separation Agreement (formal legal structure with sections for severance, confidentiality, non-disparagement, and release of claims). Add any optional context - such as a specific severance amount, a non-compete clause reference, or notable contributions to mention. The AI fills in the employee's name, role, department, company name, last working day, separation type, and tenure automatically from the offboarding record. The draft appears inline and can be copied to clipboard in one click. For separation agreements, always have legal counsel review before sending.

Question 15

How does the quarterly exit interview summary work?

Accepted Answer

In Analytics → AI Copilot tab, select a year and quarter and click Generate Report. PurpletGo pulls all exit interview responses submitted during that period, aggregates sentiment scores, groups by department, and collects the top recurring themes. The AI then produces an executive-level quarterly report covering: a concise overview paragraph, key themes with frequency (high/medium/low) and sentiment direction (positive/neutral/negative), per-department insights with a trend signal (improving/stable/declining), a prioritised list of HR recommendations, and specific action items with suggested owner (HR/Leadership/Management) and priority. Results are cached per unique data snapshot so repeated views don't incur additional AI costs.

Question 16

How does PurpletGo predict which departments are at resignation risk?

Accepted Answer

The Resignation Risk Predictions panel (Analytics → AI Copilot tab, visible to HR, admin, and superadmin roles) analyses the last 90 days of offboarding data to surface departments at elevated risk of voluntary resignations in the next 30 days. Signals used: voluntary resignation count per department, SLA breach rate per department (high breach rates indicate disengagement - tasks being ignored), and average checklist completion speed (slower completion = lower engagement). The AI cross-references these signals to rank departments by risk level (high/medium/low), identify specific warning signs, and recommend concrete retention actions with urgency (immediate/short-term/ongoing). Predictions are cached for 24 hours so the report refreshes once per day with the latest data.

Question 17

How do reference letters and background check verification work?

Accepted Answer

The Reference & Background Check Portal (Team plan and above) covers two workflows. Reference letters: managers or HR admins write structured references for departing employees, choosing the type (general, technical, character, or performance). Background check requests: when a new employer requests verification, HR logs the request in PurpletGo, records contact details, and fills out a structured verification response covering employment dates, job title, department, rehire eligibility, salary disclosure decision, and reason for leaving. Every action is captured in the audit log.

Question 18

How does the Compliance Policy Engine work?

Accepted Answer

Available on Team and Enterprise plans. Enable any combination of SOC 2 Type II, HIPAA Security Rule, GDPR, ISO 27001:2022, and PCI DSS v4.0 frameworks from the Compliance → Policy Engine tab. PurpletGo seeds each framework with a pre-built checklist of offboarding-relevant controls. For each control you set a status, add internal notes, and attach evidence items manually. The Auto-Collect button scans your existing audit log for matching access revocation and deprovisioning events and attaches them to the relevant controls automatically. Export Report generates a structured JSON file formatted for hand-off to external auditors.

Question 19

How does GDPR / CCPA data retention and erasure work?

Accepted Answer

PurpletGo's Data Retention & Privacy module (Team plan and above) covers three workflows. Retention policy: set a period and choose whether completed offboarding records should be anonymized or hard-deleted. Right-to-erasure requests: when a former employee exercises their GDPR Art. 17 or CCPA right to erasure, HR logs the request, an admin approves, then executes the anonymization in a single database transaction. Data export: any individual's complete data package can be exported as a structured JSON file on demand, fulfilling GDPR Article 20 right-to-portability requests.

Question 20

How does equipment return tracking work for remote employees?

Accepted Answer

PurpletGo's Equipment Return Tracking module (Team plan and above) generates pre-paid FedEx Ground or UPS Ground return labels in two clicks. PurpletGo polls the carrier API for real-time status updates and surfaces the full tracking event timeline inside the offboarding record. Equipment condition photos can be uploaded and permanently linked to the shipment for an auditable before/after record.

Question 21

Can managers initiate offboardings without HR access?

Accepted Answer

Yes - on Team and Enterprise plans. The Manager Self-Service Offboarding Initiation feature lets any manager submit a structured offboarding request. By default the request enters a configurable multi-step approval chain before an offboarding record is created. HR and admin users can also disable the approval requirement org-wide from the Settings tab on the Initiations page. Every approval, rejection, and delegation is recorded in the audit log.

Question 22

How do multi-step approval workflows work?

Accepted Answer

On Team and Enterprise plans, HR admins can create named approval chains from Initiations → Settings → Multi-Step Approval Chains. Each chain is a sequence of steps - for example: Manager (24h SLA) → HR (48h SLA) → Legal (72h SLA). When a new offboarding initiation is submitted, the configured chain attaches automatically and the first-step approver is notified by email and in-app. Each step can target a role (any user holding that role can approve) or a specific person. If an approver is out of office they can delegate their step to a colleague - the delegation is recorded in the audit trail. SLA timers run per step; if the deadline passes without action, the system auto-escalates with an email alert to all admins and marks the step as breached. Once every step is approved, the offboarding record is created automatically. Every action - approve, reject, delegate, or escalate - is stored in an immutable per-step audit trail visible in the initiation detail view.

Question 23

Does PurpletGo have a shared calendar for offboarding milestones?

Accepted Answer

Yes - the Org-Wide Offboarding Calendar (Team plan and above) shows all upcoming offboarding events in a month-view grid: Last Working Day, IT Revocation Deadline, and Asset Return Deadline. Filter by department. Export the entire visible month as a standards-compliant .ics file to import into Google Calendar, Outlook, or Apple Calendar.

Question 24

Does PurpletGo offer a public API for custom integrations?

Accepted Answer

Yes - on Team and Enterprise plans. The Developer Portal lets admins generate API keys with fine-grained scopes. The REST API follows standard conventions - JSON responses, page-based pagination, consistent error shapes. Rate limiting is enforced at 120 requests per 60 seconds per key. An OpenAPI 3.0 specification is served at /api/v1/openapi.json.

Question 25

Does PurpletGo support SAML SSO?

Accepted Answer

Yes - on Enterprise plans. SAML 2.0 Single Sign-On lets your team log in via Okta, Azure AD, or Google Workspace without a separate password. Setup takes under five minutes. You can optionally enforce SSO org-wide to block all password-based logins entirely. Group-to-role mapping automatically assigns PurpletGo roles based on your IdP group attributes, keeping roles in sync on every login. Just-in-Time provisioning creates accounts on first SSO login, and an emergency bypass code gives superadmins a way back in if the IdP is ever unreachable.

Question 26

Does PurpletGo automatically create IT tickets?

Accepted Answer

Yes - on Team and Enterprise plans. PurpletGo auto-creates tickets in Jira, Freshdesk, ServiceNow, or Zendesk across three ticket types: access revocation, equipment return, and account deprovisioning. Two-way sync is built in - configure the generated webhook URL in your ticketing system and PurpletGo will automatically close the matching checklist items the moment a ticket is resolved.

Question 27

What are outbound webhooks used for?

Accepted Answer

You can register signed webhook endpoints to receive real-time event payloads for every offboarding status change, task completion, or document upload. Webhooks are HMAC-SHA256 signed so your system can verify authenticity. Enterprise plans include the full SIEM Export feature - stream security events to Splunk, Datadog, or any generic webhook target.

Question 28

Which SIEM platforms does PurpletGo support?

Accepted Answer

PurpletGo supports three target types: Splunk (HTTP Event Collector), Datadog (Log Intake API), and Generic webhook (any HTTP endpoint - Elastic, Microsoft Sentinel, or a custom SIEM). You can configure multiple targets, filter which event types each one receives, and test delivery with a single click.

Question 29

Can I bulk-advance or delete offboarding records?

Accepted Answer

Yes. On the Kanban board you can select multiple cards using checkboxes, then advance them to the next stage, revert them, or delete them in one action. This is especially useful during large-scale restructuring or layoffs where dozens of cases need to move simultaneously.

Question 30

How does bulk offboarding initiation work for layoffs and RIFs?

Accepted Answer

PurpletGo supports two bulk offboarding workflows:

**CSV Import (recommended for RIFs):** Upload a spreadsheet with one employee per row. Required columns are email, full name, and exit date (YYYY-MM-DD). Optional columns: resignation date, separation type, role, department, and notes. The four-step wizard auto-detects column headers, lets you remap them, and shows a per-row validation preview before anything is created. Each row can have its own exit date and separation type - ideal when a reduction-in-force affects different teams on different dates. Invalid rows are skipped with an inline error message; valid rows are submitted as a single named batch.

**Directory selection:** Select up to 200 employees from the Employee Directory, set a shared exit date and separation type, and click Bulk Offboard.

In both cases, PurpletGo creates each offboarding in its own database transaction - a failure on one row never blocks the others - and groups all created records under a shared batch ID visible on the Bulk Batches dashboard. Employees who already have an active offboarding are automatically skipped.

Question 31

Can I import my employee directory from a CSV file?

Accepted Answer

Yes - on all plans. The CSV Import wizard walks you through four steps: Upload, Map columns, Preview (with per-cell validation errors), and Done. The server enforces a hard cap of 500 employees per import batch and full field-level validation on every row.

Question 32

Does PurpletGo support Microsoft Teams notifications?

Accepted Answer

Yes - on Starter and above plans. Connect a Microsoft Teams incoming webhook from Settings → Integrations → Microsoft Teams to receive rich Adaptive Card notifications for every offboarding lifecycle event: stage transitions, new initiation requests, overdue tasks, SLA breaches, and document signatures. On Team and Enterprise plans you can also register a Teams Outgoing Webhook to unlock interactive bot commands directly in any channel: • @PurpletGo status - look up the latest offboarding status for any employee • @PurpletGo approve - approve a pending initiation request and create the offboarding record • @PurpletGo reject - reject a pending initiation request • @PurpletGo help - list all available commands Both the incoming webhook notifications and the outgoing webhook commands are verified with HMAC-SHA256 so requests cannot be spoofed. All approve/reject actions performed via Teams are recorded in the tamper-evident audit log.

Question 33

What separation types does PurpletGo handle?

Accepted Answer

Every offboarding case is classified by separation type: resignation, termination, layoff, retirement, or contract end. This classification flows through to analytics, audit exports, and checklist template selection - so you can have different workflows for a voluntary resignation vs. a layoff.

Question 34

How does HRIS sync work?

Accepted Answer

Connect BambooHR, Workday, Rippling, Gusto, or ADP Workforce Now from Settings → Integrations. PurpletGo syncs your full employee directory and detects terminations automatically - when an employee's status changes to terminated or inactive in your HRIS, PurpletGo automatically creates a new offboarding record and notifies all org admins. Syncs run on a nightly schedule and can also be triggered on demand. A sync history log is available directly on the integrations card so you can see past sync results, employee counts, and any auto-created offboardings.

Question 35

What compliance standards does the audit log support?

Accepted Answer

The PurpletGo audit log is designed to support SOC 2 Type II, ISO 27001, and GDPR employee data lifecycle requirements. Every entry is HMAC-SHA256 signed and cryptographically chained - making any modification, deletion, or reordering of rows instantly detectable via the one-click chain integrity check. Exports include per-row hashes for WORM (Write Once Read Many) compliance verification. On Enterprise plans, logs are automatically archived nightly to Google Cloud Storage for legal hold, with configurable retention from 3 months to 10 years. All exports (CSV, PDF, JSON) are signed with a content digest so recipients can verify the file was not tampered with after download. SIEM streaming to Splunk, Datadog, or a generic webhook target is also available on Enterprise.

Question 36

What analytics and reports does PurpletGo provide?

Accepted Answer

The Advanced Analytics Dashboard provides offboarding velocity trend charts, average completion time broken down by department and separation type, and automated bottleneck detection - a ranked list of the checklist tasks most frequently left incomplete. Every view supports custom date ranges. Team and Enterprise plans include the SLA Compliance Dashboard with historical compliance rates, breach trend charts, and worst-performing task rankings, plus Scheduled Reports v2 - a custom report builder that delivers tailored offboarding data directly to your stakeholders' inboxes with an optional board-ready PDF attachment.

Question 37

How does Scheduled Reports v2 work?

Accepted Answer

Available on Team and Enterprise plans, Scheduled Reports v2 (Settings → Reports) gives HR and operations admins a full custom report builder:

• Report types: Weekly Summary, Monthly Summary, Offboarding Stats, Overdue Tasks, or fully Custom.
• Column selector: choose from 14 data columns - employee name, email, role, department, separation type, exit date, status, resignation date, completion days, pending/completed/overdue task counts, legal hold flag, and created date.
• Filters: narrow data by status, department, or separation type using multi-value filters stored per report.
• Group by: optionally group report rows by department, separation type, status, or assignee - both in the email and PDF.
• Date range presets: Last 7 days, 30 days, 90 days, last month, last quarter, last year, or all time.
• Schedule: daily (every day), weekly (every Monday), or monthly (1st of month).

Delivery options:
• Distribution lists: create named groups of email addresses (e.g. 'Board', 'HR Leadership') and select one per report - recipients are merged with any direct addresses.
• Direct recipients: add individual emails alongside or instead of a list.
• Board-ready PDF attachment: when enabled, each delivery includes a branded PDF - org logo in the header, an executive summary KPI panel (total, completed, active, overdue, avg days, legal hold), data tables with optional grouping, page numbers, and a PurpletGo-branded footer.
• Webhook delivery: optionally POST a JSON summary payload (report ID, org name, date range, KPI totals, row count) to a public HTTPS endpoint on each delivery - for dashboards, Slack bots, or data pipelines.

Question 38

What are distribution lists in PurpletGo?

Accepted Answer

Distribution lists (Settings → Reports → Distribution Lists) are reusable named groups of email addresses - for example 'Board of Directors', 'HR Leadership', or 'Compliance Team'. You create a list once and select it when configuring any scheduled report. When a report fires, PurpletGo merges the list's addresses with any direct recipients and deduplicates before sending. On the Enterprise plan you can create as many lists as needed, each with up to 100 email addresses.

Question 39

What is the SLA Compliance Dashboard?

Accepted Answer

Available on Team and Enterprise plans, the SLA Compliance Dashboard lives under Analytics → SLA and gives HR and operations managers a historical view of how well the team is meeting checklist task deadlines.

Key metrics:
• Overall compliance rate - % of SLA-tracked tasks completed on time across the org
• Compliance by department - colour-coded rate bars (green ≥80%, amber ≥50%, red <50%) so you can spot problem areas at a glance
• Breach trend - a weekly or monthly chart overlaying breach count (bar) and compliance rate % (line), covering the last 90 days
• Worst-performing tasks - a ranked table of checklist task names by breach rate, filtered to tasks with at least 2 SLA instances

The Export CSV button downloads a full row-level report - task name, employee, department, assignee, SLA hours, SLA deadline, completed status, breached flag, completed timestamp, and overdue-by hours - ready to share in manager performance reviews.

Question 40

Can one account manage multiple organisations?

Accepted Answer

Yes. A single PurpletGo account can be a member of multiple organisations. An organisation switcher in the top navigation lets you move between workspaces instantly. Each organisation's data is fully isolated at the database level.

Question 41

What roles are available and what can each role do?

Accepted Answer

PurpletGo has five built-in roles: Super Admin (full control, including billing and org settings), Admin (manage employees, offboardings, team members, and integrations), Manager (initiate offboardings and advance stages for their direct reports), HR (upload compliance documents and view exit interviews), and Developer (read-only access to offboarding records). Enterprise plans unlock Custom Roles with hand-picked permissions across every module and optional department scoping.

Question 42

How do custom roles work on the Enterprise plan?

Accepted Answer

Enterprise organisations can create unlimited custom roles from Settings → Roles & Permissions. Each role gets a name, a description, and a fine-grained permission set covering every module: offboardings, employees, assets, compliance documents, exit interviews, analytics, billing, team members, integrations, API keys, automations, and audit log. Roles can also be restricted to specific departments.

Question 43

Is my data isolated from other organisations?

Accepted Answer

Completely. PurpletGo enforces tenant isolation at the database level using PostgreSQL Row-Level Security - not just application code. It's architecturally impossible for one organisation's data to be visible to another, even in the event of an application bug.

Question 44

What are the offboarding limits on each plan?

Accepted Answer

Free: 5 active employees, 1 seat, 25 tracked assets, 2 offboarding records per month. Starter ($39/mo, $31/mo billed annually): 20 employees, 5 seats, 100 assets, 5 offboardings per month. Growth ($129/mo, $103/mo billed annually): 50 employees, 10 seats, 250 assets, 10 offboardings per month. Team ($249/mo, $199/mo billed annually): 100 employees, 20 seats, 500 assets, 20 offboardings per month. Enterprise (custom pricing): unlimited employees, seats, assets, and offboardings. All plans can be upgraded or downgraded at any time from Settings → Billing. No credit card is required for the Free plan.

Question 45

How long does it take to set up PurpletGo?

Accepted Answer

Most teams start their first offboarding within minutes of signing up. Connect your integrations, build a checklist template, invite your team, and you're live. No complex configuration or IT project required - the setup wizard walks you through every step.

Question 46

Can PurpletGo be white-labeled with our own branding?

Accepted Answer

Yes - on Enterprise plans. Upload your company logo, choose brand colors, and configure a custom portal domain (offboarding.acme.com via CNAME). Magic links sent to departing employees will use your domain, and the self-service portal displays your full branding instead of PurpletGo's.

Question 47

Can offboarding emails be sent from our own email domain?

Accepted Answer

Yes - on Enterprise plans. Set a custom sender name and address (e.g. no-reply@acme.com) in Settings → Branding. Add the required SPF TXT record to your DNS, then hit Verify - PurpletGo confirms the record is live before activating the custom sender. All portal invitation and checklist emails are then delivered from your domain rather than noreply@purpletgo.com.

Question 48

Can we add a legal footer and privacy policy link to outbound emails?

Accepted Answer

Yes. Enterprise plan admins can set a custom legal disclaimer (up to 500 characters) and a link to their own Privacy Policy URL in Settings → Branding → Email Footer. These are automatically appended to every offboarding email sent to departing employees, keeping your communications compliant with internal legal and GDPR requirements.

Question 49

Does PurpletGo have an AI assistant for offboarding?

Accepted Answer

Yes - on Team and Enterprise plans. The AI Offboarding Assistant adds intelligence to three areas: checklist suggestions (role-based, up to 10 missing tasks with priority ratings), risk scoring (0–100 risk score with specific remediation recommendations), and knowledge transfer summarization (AI-drafted structured handoff document from KT notes and exit interview responses).

Question 50

What are Predictive Offboarding Alerts?

Accepted Answer

Predictive Offboarding Alerts (Team and Enterprise plans) give HR teams a proactive heads-up before an employee decides to leave. A nightly scoring engine assigns every active employee a 0–100 flight risk score based on tenure, department attrition rate, peer departures, and exit interview sentiment. Employees are banded as Low, Medium, High, or Critical. HR can filter by risk band and drill into per-employee risk factors.

Question 51

Does PurpletGo support IP allowlisting and network-level security controls?

Accepted Answer

Yes - on Enterprise plans. The Access Controls panel (Settings → Security → Access Controls) gives admins four layers of network and session security. IP allowlisting: restrict logins to one or more approved IPv4/IPv6 addresses or CIDR ranges - for example, your corporate VPN subnet (10.0.0.0/8). Any request from an IP outside the list is rejected before it reaches the application. Geo-blocking: deny logins originating from specific countries using IP geolocation (Cloudflare header when behind Cloudflare, offline MaxMind GeoLite2 database as fallback). Session timeout: force all members to re-authenticate after their token exceeds a configured age (1 hour up to 7 days). Terminate all sessions: a panic button that instantly invalidates every active session across the entire organisation - useful if credentials are suspected to be compromised. All changes are recorded in the audit log with actor and timestamp.

Question 52

Does PurpletGo handle contractor and vendor offboarding differently from full-time employees?

Accepted Answer

Yes. PurpletGo has a dedicated Contractor / Vendor Offboarding workflow designed for contingent workers. When you add someone to the employee directory you can tag them as Contractor or Vendor, optionally recording their contract end date and the agency or company they work through. When that contract end date arrives, PurpletGo automatically creates the offboarding record and applies a shorter checklist - focused entirely on access revocation, asset return, contract closure, and NDA acknowledgement - with no payroll, COBRA, or benefits steps. For contractors with access to external third-party systems, the Vendor Access panel lets IT and HR track every system the contractor had access to (Salesforce portals, vendor APIs, VPNs, databases), record the contact email for each vendor, and log a per-system revocation note and timestamp when access is confirmed removed. Every revocation event is written to the audit log.

Question 53

How does the contract expiry auto-offboarding work?

Accepted Answer

Once a contractor's contract end date is set in PurpletGo, a nightly job checks for contractors and vendors whose contract ends that day. If no active offboarding already exists for that person, PurpletGo automatically creates an offboarding record with separation_type = contract_end, applies the contractor checklist (no payroll or benefits steps), and emails all org admins and HR members to let them know the workflow has started. This means you never need to manually remember to kick off a contractor offboarding - the system handles it the moment the contract expires.

Question 54

How does third-party vendor access revocation tracking work?

Accepted Answer

The Vendor Access panel (visible on the offboarding detail page for contractors and vendors) lets IT admins and managers log every external system a contractor had access to - for example, a Salesforce org, an AWS contractor account, a client VPN, or a vendor billing portal. For each entry you record the vendor name, system name, access type (Account, API Key, VPN, Portal, Database, Other), and optionally a contact email at the vendor. When access is confirmed removed, you click Revoke, add an optional revocation note (e.g. 'Account deactivated via Salesforce Admin on 2026-05-01'), and the entry is timestamped with who revoked it. All create, revoke, and delete actions are written to the tamper-evident audit log, giving you a permanent record for security reviews and contract completion audits.

Question 55

Does PurpletGo have a public REST API?

Accepted Answer

Yes - on Team and Enterprise plans. The PurpletGo public REST API (/api/v1) lets you automate offboardings, read employee data, and receive real-time events via webhooks from your own HRIS, scripts, or internal tooling.

**Authentication:** API keys use the format `fnl_live_<32hex>` and are passed as a Bearer token. Each key is scoped to one or more permissions: `offboardings:read`, `offboardings:write`, `employees:read`, `webhooks:read`, `webhooks:write`.

**Endpoints available:**
- `GET /api/v1/offboardings` - List offboardings (filter by status, department, pagination)
- `GET /api/v1/offboardings/:id` - Get a single offboarding record
- `POST /api/v1/offboardings` - Create a new offboarding programmatically
- `PATCH /api/v1/offboardings/:id` - Update offboarding status
- `GET /api/v1/employees` - List employee profiles
- `GET/POST/DELETE /api/v1/webhooks` - Manage outbound webhook endpoints

**Webhooks:** Register an HTTPS endpoint to receive real-time events (offboarding.created, offboarding.completed, asset.returned, document.signed, checklist.completed, audit.created). Events are delivered with an HMAC-SHA256 signature in the `X-PurpletGo-Signature` header so you can verify they came from PurpletGo.

**Rate limit:** 120 requests / 60 seconds per API key.

**OpenAPI spec:** A machine-readable OpenAPI 3.0.3 specification is available at `/api/v1/openapi.json` for import into Postman, Insomnia, or any code generator.

Full documentation: [purpletgo.com/docs](https://purpletgo.com/docs)

Question 56

Does PurpletGo support multi-org hierarchies for group companies and subsidiaries?

Accepted Answer

Yes - on Enterprise plans. The Org Hierarchy feature lets a parent organisation create and manage sub-organisations (divisions, subsidiaries, regional entities) under a single account. Sub-orgs automatically inherit the parent's Enterprise plan, so you don't need to purchase separate plans for each entity. From the hierarchy dashboard a superadmin can view consolidated offboarding stats and a unified audit log across the entire group, making it easy to get a real-time picture of active offboardings, SLA breaches, and completed offboardings across all entities. You can also push checklist templates from the parent down to all sub-orgs in one click, ensuring every subsidiary follows the same offboarding standards. Sub-orgs can be detached at any time to operate as independent organisations, with all their data preserved.

Question 57

Can different divisions of my company manage their own offboarding independently?

Accepted Answer

Yes. Each sub-org in PurpletGo's hierarchy has its own isolated employee directory, offboarding requests, checklists, and settings. Users in one sub-org cannot see data from another unless they have been explicitly added as a member. A superadmin of the parent org can switch into any child org to assist or review, but day-to-day HR staff in each division only ever see their own data. The parent superadmin can share approved checklist templates across all divisions but cannot otherwise interfere with a sub-org's workflow unless they switch into it.

One click. Zero doors left open.

Offboarding breaks in three places. PurpletGo closes all three.

Revoke access in one click

Track and recover assets

Stay audit-ready

From notice to closed, in four steps

Create the offboarding

Work the checklist

Revoke access & recover assets

Close with a full audit trail

Connected to the tools your team already uses

Google Workspace

Slack

BambooHR

GitHub

Zendesk

DocuSign

Calendly

SIEM Export

Your data is in safe hands

Your credentials are never at risk

Your data is completely isolated

Compliance documents stay private

Every integration credential is encrypted at rest

Complete paper trail for every action

Two-factor authentication for every account

No more offboarding blind spots

One-Click Access Revocation

No manual follow-ups

Checklist Templates

Offboard 200 people as easily as one

Bring your whole team in, in one upload

Track whatever your org actually needs

Simple, transparent pricing

Free

Starter

Growth

Team

Enterprise

Questions we get a lot

Close every departure with confidence

One click.
Zero doors left open.