codexier.

AI & Automation

Automating Employee Onboarding Paperwork

By CodexierPublished 6 min read

Most small companies onboard people from memory: someone remembers the laptop, someone else forgets the payroll form, and the new hire spends day one waiting for a login. Automation fixes this not by adding software but by making one event — the signed contract — start every task in the right order. This guide shows how to design that flow, what to be careful with under GDPR, and how the same logic closes everything down when someone leaves.

The steps that are forgotten most often

The steps that fall through are rarely the big ones. Nobody forgets that a new salesperson needs a phone. What gets forgotten is the payroll information reaching the bookkeeper before the first salary run, the access card being ordered in time, the tax table and bank details being registered, the manager booking the first week's meetings, and — months later — the probation review. Each of these belongs to a different person, and the failure happens in the gap between them.

  • Personal details, bank account and tax information collected before the first payroll run
  • User accounts: email, Microsoft 365 or Google Workspace, CRM, Fortnox or Visma, booking system
  • Hardware ordered with enough lead time, plus phone number and subscription
  • Keys, access card and alarm code

One trigger, many tasks

The design principle is simple: every task gets an owner, a due date calculated from the start date, and a trigger. The trigger is one event that the whole company agrees on. For most businesses that is a completed e-signature on the employment contract, or a status change to ”hired” in the recruitment tool. From that single event the automation creates the tasks, assigns them, and sends the new hire a form for their personal details.

WhenTaskOwnerAutomated how
Contract signedSend personal details formSystemForm link emailed to the new hire
Contract signedOrder laptop and phoneIT or office managerTask created with start date as deadline
Two weeks before startCreate accountsITAccounts created from a role template
One week before startPayroll data to bookkeepingHRForm answers passed to payroll, not emailed as attachments
End of probation minus 30 daysProbation reviewManagerReminder with a review template

Accounts and access provisioning

Accounts are where automation saves the most time and prevents the most mistakes. Instead of copying a colleague's permissions, you define role templates: what a salesperson, a technician or an accountant gets. When the trigger fires, the flow creates the account in Microsoft 365 or Google Workspace, adds it to the right groups, and those groups grant access to shared drives, the CRM and other systems.

Role templates

One list of systems and permission levels per role. Changes are made in the template, not person by person.

Groups, not individuals

Grant access to groups. Moving someone to a new role then means changing one group membership.

Two-factor from day one

The first login should require two-factor authentication. Send the setup instructions with the account, not a week later.

Personal data in onboarding

Onboarding collects sensitive information: personal identity number, bank account, address, next of kin, sometimes health information for adjustments. Under GDPR you need a legal basis for each item, you should collect no more than you need, and you must be able to say where it is stored and who can read it. The worst common practice is emailing a scanned form with a personal identity number and bank details to three people.

  • Collect personal data through one secure form, not by email
  • Store it in the payroll or HR system, not in the automation tool's logs
  • Check that the automation platform does not keep full copies of form answers in its run history
  • Give access only to those who need it for payroll or HR
  • Decide how long each item is kept after employment ends, and automate the deletion reminder

Offboarding with the same logic

Offboarding is the mirror image, and it matters more for security. A former employee who still has access to email, the CRM or the shared drive is a real risk, and small companies find these accounts months later. Build the reverse flow at the same time: when the end date is set, tasks are created to collect hardware, transfer files and mail, remove group memberships, close accounts on the last day, change shared passwords and settle the final salary.

When you do not need this: if you hire one or two people a year and the owner handles everything personally, a good checklist in your task manager does the job and automation would cost more than it saves. We would tell you that on a call. The case for a workflow automation system starts when several people are involved in each hire, when hiring happens every month, or when an access mistake has already happened once.

How to start this month

Write down your current onboarding as a list of tasks with owners, even if it only exists in your head. Mark the ones that were missed last time. Those are the first to automate. Then check the automation go-live checklist before switching the flow on, and run it in parallel with the manual routine for the first hire. If you want a second opinion on scope, book a short call.

Frequently asked questions

Do we need an HR system to automate onboarding?

No. A form tool, your task manager and an automation platform are enough for most small companies. An HR system becomes worth it when you have many employees and want leave, reviews and documents in one place as well.

Can we create Microsoft 365 accounts automatically?

Yes. Microsoft 365 and Google Workspace both have APIs for creating users and adding them to groups. The flow needs an admin account with limited rights, set up by someone who understands your tenant.

Is it allowed to collect personal identity numbers in a form?

Yes, when you need them for payroll and tax reporting, but the form and storage must be secure and access limited. Avoid sending the answers around by email or keeping them in automation logs.

Want onboarding that runs itself?

In fifteen minutes we go through how you hire today, which steps get missed, and whether automation is worth it at your hiring volume. If a checklist is enough, we will say so.

Book a free 15-minute call