Reduction in force IT checklist: preserve mailboxes and files before deprovisioning

A reduction in force IT checklist should add a preserve step before accounts, licenses and mailboxes are removed. Confirm holds with counsel, keep restorable copies of departing teams' mailboxes, drives and tickets, then screen the records for rights and licensing value. SourceX can assess qualifying companies after an MSP introduces them.

Why a reduction in force needs a preserve-then-assess step

A reduction in force (RIF) turns into an IT ticket queue within days: disable accounts, convert or remove licenses, reassign mailboxes, wipe laptops. The risk is that the same cleanup deletes the work records of the departing teams before anyone has decided what the company wants to keep. This checklist adds one step to the usual offboarding run: preserve first, then assess whether the records have licensing value.

For a managed service provider (MSP), the step costs little. You are already the person who knows which mailboxes, shared drives and ticket systems exist, and the owner or CFO is already asking you for a deprovisioning plan. If the company turns out to have years of connected records across many systems, SourceX can screen it for a data licensing deal, and you can make the introduction as a partner without touching a single record.

A RIF is confidential and often legally sensitive. Everything below assumes you act only on instructions from the authorized executive and the company's counsel, and that you do not discuss the event with anyone outside that circle.

Before the first account is touched

Settle these items in a short call with the sponsor (CEO, CFO, COO or head of HR). Nothing here requires opening a mailbox.

Authority and holds

  • A named executive has authorized the offboarding list in writing.
  • Counsel has confirmed whether any legal hold, audit, investigation or pending claim covers the affected people or teams.
  • You know which retention schedules in contracts and internal policy apply to the affected mailboxes and drives.
  • Nobody is deleting anything until the preserve step below is complete.

Scope of the departing teams

  • A list of affected teams and roles, kept by HR and shared with IT on a need-to-know basis.
  • A list of the systems each team used: email, chat, ticketing, CRM, shared drives, project tools, code repositories, finance and support platforms.
  • A note on which systems stay and which would lose their only owners.

Which accounts and files to preserve

Preserve means keeping a complete, restorable copy under the company's control. It does not mean reading, copying out or describing contents.

ItemDefault RIF actionPreserve-then-assess action
User mailboxesConvert to shared or delete after a short windowPlace on hold or export to company-owned storage before any license is removed
Personal and team drivesTransfer to a manager, purge the restSnapshot the drive tree and sharing permissions first
Chat channels and direct messagesLeft to the platform retention defaultConfirm the platform retention setting and extend it for affected channels
Ticketing and support queuesReassign open ticketsKeep closed-ticket history and resolution notes intact
CRM and sales activityReassign accountsKeep activity, notes and stage histories; avoid bulk owner overwrites that erase history
Code and project toolsRemove seatsKeep repositories, pull request history and issue trackers readable
Laptops and phonesWipe and redeployImage or inventory local data only if the company decides it is needed

If a license cut would delete data when the seat is removed, that is the line to flag to the sponsor. Many platforms keep deleted users' content for a limited window; confirm the actual behavior in your own vendor's admin documentation rather than assuming.

The 3-pass triage for departing teams' records

Run these passes in order. They take minutes of discussion, not days of work.

  1. Value pass. Ask the sponsor whether the departing teams produced multi-step work with outcomes: support cases resolved, quotes won or lost, projects delivered, code reviewed, approvals granted or refused.
  2. Rights pass. Ask whether the records are the company's own, or mainly belong to customers, partners or an outsourcer's clients. Records containing mostly consumer personal data or protected health information are weak candidates without a clear basis to license them.
  3. Reach pass. Confirm the sponsor is an owner, CEO, CFO or other authorized representative, and that the company would consider a one-time payment for an exclusive AI-training license for an agreed term.

If all three passes are positive, the company fit checker gives a preliminary, non-binding screen with no contact details required. The who qualifies page lists the baseline: 50+ full-time employees at peak (contractors excluded), several years of documented operations, rights to license the data and an authorized sponsor. A company that is shrinking through a RIF can still qualify if the history exists and the data is still there.

How to read the results

ResultWhat it meansNext action
Strong on value, rights and reachThe records are worth a proper lookKeep the preserve step in place and offer the sponsor an introduction
Value unclearThe sponsor does not know what the teams producedBuild a one-page system list with the data inventory builder before decisions are final
Rights unclearCustomer contracts or policies may restrict useLeave the data preserved and let counsel review; do not proceed to an introduction yet
Weak on reachNo authorized sponsor is availableKeep records preserved and revisit when an executive can engage
Records already deletedArchives or mailboxes are goneDocument what remains and move on; no inventory is possible for deleted data

What to say to the sponsor

Keep it factual and short. Your job is to protect options, not to sell.

The introduction email builder helps draft an owner-approved introduction. Related trigger moments follow the same pattern: see the office relocation IT checklist and the guide to canceling an email archiving service. If the RIF is part of a larger shutdown, read how to wind down a company without losing its records.

How the introduction and reward work for an MSP

You introduce the company through the referral form or your referral link. SourceX then qualifies it, the company completes a data inventory, price and terms are agreed, buyers review, and a deal closes only if the company signs. You never export, upload or describe confidential records.

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company. The reward is paid only after the buyer pays and SourceX receives its fee; an introduction, meeting or signed agreement alone does not trigger payment, and no reward is guaranteed. The reward is a share of SourceX's fee and is never deducted from what the company receives. Read the program terms before you register, and check your own client contracts for conflict-of-interest or disclosure requirements.

When to skip this step

  • The company is under 50 full-time employees at peak.
  • The departing teams worked mostly in a client's systems under that client's contract.
  • The sponsor has asked you not to raise anything beyond the offboarding task.
  • Counsel has not cleared the records for any use beyond the hold.

Next step

Add a preserve-then-assess line to your RIF runbook today. When a client's records pass the three passes, register as a partner and make the introduction, or have the sponsor apply directly at sourcex.si/apply with your referral link.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
  4. Step 4You get your rewardYour share of SourceX fees becomes payable.

Common questions

Should an MSP raise data licensing during a layoff?

Only after the authorized executive has approved the offboarding plan, and only as an option to preserve records, not as a pitch. Keep the conversation limited to the sponsor and counsel. Frame it as protecting a possible asset before licenses are cut, and drop it if the sponsor prefers to focus on the RIF.

What happens to a mailbox when its license is removed?

It depends on the platform and the admin settings. Some vendors keep a removed user's content for a limited window, others delete it sooner or on the next retention cycle. Read your vendor's admin documentation and set holds or exports before removing seats, rather than assuming a grace period exists.

Can a company license records created by employees who were laid off?

Often yes, because business records created in the course of employment are usually the company's, but rights depend on contracts, notices and policies. SourceX runs a rights review with the company before any deal, and counsel should confirm. Records that mainly belong to customers or contain consumer or health data need extra care.

Does the MSP have to export or look at the data?

No. Partners make introductions and give basic fit information only. The MSP may do its normal preservation work for the client, but it never exports, uploads or describes confidential records for SourceX. The company works with SourceX directly on inventory, redaction rules and delivery.

Does a legal hold change this checklist?

Yes. If counsel says a hold covers certain people or systems, those records must be preserved as instructed and cannot be used for anything else without counsel's approval. The checklist keeps preservation first for exactly that reason. Follow counsel's instructions, not this page.

Free resources

By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09

Know a US company with valuable proprietary data?

Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.

Refer a company →

I own a business

Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.

Start an assessment