Settings & Billing

Access Settings from the sidebar to manage your organisation, team, billing, and configuration. What you see depends on your role, and the menu shows exactly the tabs you can use:

A link to a tab you can't open (for example ?tab=api-keys) takes you to General instead.

General

Superadmins can update the organisation name and copy the org ID (used for SCIM, SAML, and API integrations). Everyone has access to a Danger Zone with:

• Export My Data - a personal data export (GDPR Art. 15/20)
• Export organisation data - for Superadmins and Admins (see below)
• Transfer Ownership - hand superadmin access to another member without losing your own account
• Leave this organisation - removes you from the current organisation only. Your account and your other organisations stay as they are. An organisation always keeps at least one Superadmin, so the only Superadmin has to transfer ownership first
• Delete my account everywhere - closes your account and removes it from every organisation you belong to (the dialog lists them). It's refused while you are the only Superadmin of any organisation; from there a Superadmin can transfer ownership and delete, or delete the whole organisation

Leaving, being removed, or deleting your account revokes the API keys you created in that organisation. Being removed also signs you out of every session.

Export organisation data

Superadmins and Admins (or a custom role with both Manage organisation settings and Export audit log) can export everything the organisation holds from the Export organisation data card on the General tab. Select Start export: the export is built in the background, and you get an email when it is ready to download. You can start up to 5 a day, one at a time.

The download is a ZIP containing:

• one JSON file per record type: the organisation, members, the employee directory, offboardings, checklist items and templates, assets, documents and document templates, notes, exit interview templates, answers and schedules, shipments and return photos, alumni, custom fields, knowledge transfer, compliance frameworks, controls and evidence, legal holds, legal document rules, initiations, access revocations, vendor accesses, references, background checks, erasure requests, security incidents, and the complete audit log (no row limit)
• every stored document and file, under files/<offboarding id>/
• manifest.json, with the number of records in each file and the size and SHA-256 of every file, so you can check the copy is complete

Exit interview answers and other encrypted fields are decrypted in the export, and audit entries about an erased person read [erased], as they do on screen. A stored file that is no longer in storage is listed under file_errors in the manifest. Integration credentials, API key hashes and webhook secrets are not exported.

Each download link lasts 10 minutes and every download is recorded in the audit log. An export is deleted 7 days after it is ready. Exporting works in a read-only organisation and while records are under legal hold, since it changes nothing.

Scheduling org deletion gives you a 30-day grace period before anything is permanently removed; a banner shows the scheduled date and lets a Superadmin cancel it before then.

Team

Add and manage team members. Click Invite User, pick the employee and a role, and they'll get an email invite with a link to set their own password. Your plan sets how many team members you can have (3 on Starter, 15 on Team); an invitation not yet accepted holds a seat, so you can't send more invitations than you have free seats. Accepting an invitation, or signing in for the first time through SAML single sign-on, is refused while every seat is taken. Invite links expire after 72 hours; Resend issues a fresh one. Cancelling an invite for someone new to PurpletGo also cancels their set-password link and, if they never signed in, removes the account the invite created.

New invites can be assigned Admin, HR, Manager, or Developer - Superadmin isn't an option here, since ownership is transferred rather than granted at invite time. You can only invite, change, or remove members whose role is at or below your own, and only a Superadmin can change or remove a Superadmin. The last Superadmin of an organisation can't be demoted or removed.

The Users list shows everyone who belongs to the organisation, including members who are currently switched to another of their organisations. Removing a member takes away their access to this organisation only and revokes the API keys they created here.

The shield button next to a member sets their permission scope: a custom role (Enterprise), the departments they can see (picked from your Departments list), and direct-reports-only. Department scope and direct-reports-only don't apply to Admins and Superadmins, so they aren't offered for them.

Roles

See Custom Roles for the full permission breakdown and how to override individual permissions on the Enterprise plan.

Seats by plan

Billing

PurpletGo has three plans:

No plan limits the number of offboardings or assets.

Extra employees count active people, contractors and vendors included; someone stops counting once their offboarding is complete or their data is erased, and sub-organizations are never billed for them. On a monthly plan they are on your monthly invoice, prorated; on an annual plan each change is charged within a month for the rest of your billing year. See Employees: How extra employees are billed.

Every plan includes access revocation in Google Workspace, Microsoft 365 / Entra ID, Okta, Slack, GitHub, and AWS (plus the integrations labelled Beta), per-system results, stage gates, the audit log with CSV export, a PDF case report per departure, checklists and templates, asset and return tracking, e-signatures, exit interviews, Slack and Microsoft Teams notifications, and bulk offboarding. Team adds compliance controls with auto-collected evidence, the tamper-evident audit log, HR system sync (beta), SAML SSO and SCIM, multi-step approvals, the SLA dashboard, IT ticket creation (beta), the REST API and webhooks, the self-service portal, AI features, and scheduled reports. Enterprise adds SIEM export, custom roles, white-label branding, multi-org hierarchy, JumpCloud / OneLogin / Ping Identity (beta), IP allowlisting and other enterprise security controls, and invoice billing.

Free trial

Every new organisation starts with a 30-day free trial of Team features - no credit card required. Enterprise trials are arranged through sales. If you subscribe during the trial, billing starts when the trial ends.

If the trial ends without a plan, the organisation becomes read-only: you can still sign in, view your records, and export them, but you can't make changes. Data in a read-only organisation is deleted after 12 months, and we send warning emails before that happens. Choosing a plan restores full access.

Clicking Upgrade on any plan card sends you to Stripe Checkout, and your plan activates as soon as payment goes through. Enterprise is set up by sales at the agreed price, paid by card through a Checkout link or by invoice: Stripe emails the invoice to your billing contact, with a page to pay it by card or bank transfer, due 30 days later unless agreed otherwise. Your plan is active from the day the invoice is sent; the billing page shows "Invoiced, due" and the due date, with a link to the invoice, and only an invoice left unpaid past its due date puts the organisation into the same past-due state as a failed card payment. Manage Billing opens the Stripe Customer Portal, where you can update your payment method, download invoices, or cancel. Cancelling from the app ends the subscription immediately, with no refund for the rest of the period. After that, the organisation is read-only in the same way as an expired trial - your data isn't touched, but it's deleted after 12 months without a plan, with warning emails first.

Sub-organisations in a multi-org hierarchy inherit their plan from the parent and don't manage billing separately.

Departments

Custom departments (Settings → Departments) require the Team or Enterprise plan. Everyone can see the list; adding, renaming, and deleting departments needs Manage organisation settings (Superadmins and Admins by default). Deleting asks for confirmation; existing employees and offboardings keep their department text.

Custom fields

Extend offboarding records with organisation-specific fields (Settings → Custom Fields → Add Field). Supported types: Text, Number, Date, Dropdown, and Checkbox. Requires the Team or Enterprise plan.

Roles & Permissions

This tab is shown to people who can manage the team. It lists every permission for each built-in role. Creating and editing custom roles is an Enterprise feature; you can only grant permissions you have yourself - see Custom Roles for the full walkthrough.

Notifications

Each person controls their own notification preferences (Settings → Notifications), with separate email and in-app toggles for: offboarding created, offboarding completed, stage changed, task overdue, task completed, document signed, interview scheduled, and onboarding created. Every toggle is honoured for both email and in-app:

Slack, Microsoft Teams and webhooks are set per organisation, not per person, so these toggles don't affect them.

There's also an optional Daily Digest email, sent once a day at an hour you choose (shown in both UTC and your local time), summarising active offboardings, overdue tasks, and initiations awaiting approval. You can send yourself a test digest before relying on it.

API Keys and Webhooks

Superadmins can generate API keys for integrations (Settings → API Keys). An expiry date means the key works until the end of that day in your timezone. The Active count leaves out revoked and expired keys. Rotate gives a key a new secret without changing anything else about it; the old secret keeps working for the grace period you pick (none, 1 hour, 24 hours or 7 days) so you can update your integration first. Superadmins and Admins can configure outbound webhook endpoints (Settings → Webhooks), see each endpoint's delivery log and health, and send a failed delivery again with Redeliver. An endpoint that keeps failing is paused automatically after 25 deliveries in a row are given up on; resume it once it's fixed (see Integrations: Webhooks). See the API reference and Webhooks docs for scopes and event payloads.

Reports

Super Admins and Admins can set up recurring scheduled report delivery from Settings → Reports. See Reports for report types, scheduling, and delivery options.