Superpower AI
When the only person who could manage your company account on Get on Board has left the company, become unreachable, or no longer responds, you can request to recover access. This article explains what we will ask you for, why, and what to expect — so you know the rules before you ever need them.
This article is for recruiters, hiring managers, HR, finance, or IT staff who need to take over an existing Get on Board company account that no remaining team member can access.
Prevent the problem in two minutes
Most ownership emergencies are avoidable. If you still have access today, do this once:
- Keep at least two people with admin role on the account at all times. See how to reassign the admin role.
- Add team members from Members and groups using work email addresses at your company’s domain, not personal Gmail or Outlook accounts.
- When possible, invite an address that survives turnover (for example
hiring@yourcompany.comortalent@yourcompany.com). - Review the member list every quarter and remove people who have left.
- Enable two-factor authentication on every admin account.
If a second admin is still active, you do not need this article — that admin can change roles from Members and groups without contacting us.
Who owns the account
A company account on Get on Board belongs to the company as a legal entity, not to the individual who created it. The original creator is a custodian, not the owner.
We can transfer control to a different person when that person can show they represent the same company. We cannot transfer control based on a name match, a chat conversation, or urgency alone.
What we will ask you to prove
We verify recovery requests with proofs proportional to the sensitivity of the account. We do not publish the exact verification checklist or scoring, but the kinds of proof we typically combine are below.
Always required:
- A work email at the same corporate domain as the account on file (for example
@yourcompany.com). We send a confirmation link to that address — clicking it proves you control that mailbox. - Your full name, your role at the company, and the company’s name and website.
We will also ask you for one or more of the following, depending on the account:
- A short authorization message, signed and sent from a different person at the company — not you — who can vouch for you (HR lead, manager, finance, or a director), from their own corporate email at the same domain.
- Confirmation of billing information that only an authorized contact at your company would know. We will tell you which detail to confirm — never share full payment data, and never send a full card number, expiration, or CVV.
- A short letter on company letterhead, signed by a director, HR, or legal representative other than yourself, when the account warrants stronger verification.
We adapt these requirements to your situation. Send the request with what you already have; if anything else is needed, we will follow up.
What happens after you submit your request
- We confirm your identity by emailing your work address.
- We notify the existing admin(s) on file and give them a notice period to object before any change is made.
- If no one objects and your proof is in order, we promote your existing user on the account to admin role.
- If someone objects, we pause and ask both sides for clarification before deciding.
Most recoveries complete within a few business days once we have all the information we need; some take longer when additional verification is required.
What we will not do
To protect every customer from impersonation and social-engineering attempts, we follow strict limits:
- We will neither reveal nor confirm the name, email, or contact details of the original admin, even if you ask. Protecting that information protects every customer — including you — from impersonation attempts.
- We will not share or reset another person’s password to give it to you. Recovery means promoting your own user on the account, not handing over someone else’s login.
- We will not transfer access based on a chat, phone call, or DM alone, no matter how urgent. Every recovery goes through email with verifiable proof.
- We will not act on requests sent from personal email accounts (Gmail, Hotmail, Outlook.com, etc.). A personal address cannot prove a relationship with the company.
- We do not arbitrate disputes between current and former employees. When two people inside the same company disagree about who should have access, we rely on authorization from a third party — HR, legal, or a director.
Watch for impersonation attempts
Get on Board will never ask you to share your password, your two-factor codes, or your full payment data (full card number, expiration, or CVV) to verify a recovery request. We only contact you from @getonbrd.com addresses, and we only ask you to click links that lead to getonbrd.com. If you receive a message asking for any of the above — even one that claims to be from us — do not respond and forward it to info@getonbrd.com.
How to request recovery
Write to info@getonbrd.com from your work email, with the subject line “Account recovery — [your company name]”.
Include in the message:
- Company name and company website.
- Your full name and your role.
- The email of the original admin if you know it (it is fine to omit).
- Which proof items from the section above you can already provide.
- A short explanation of the situation (former employee, departure, restructure, etc.).
We will reply with the next step within one business day.
After you regain access
Once your user has admin role on the account:
- Promote a second admin immediately so this never happens again. See how to reassign the admin role.
- Remove the former admin’s user from Members and groups.
- Review pending invitations, active job postings, and the billing contact email.
- Enable two-factor authentication for every admin.
Common questions
Can I just create a new company account instead?
You can, but you will lose your hiring history, active subscription, candidate applications, reviews, and the company page reputation linked to the existing account. Recovery is usually faster than rebuilding.
My company was acquired or rebranded — the domain is different now.
Contact us and explain. We handle these cases with additional documentation (acquisition announcement, new corporate domain, signed authorization from a director).
The former admin is reachable but refuses to hand over access.
This is an internal company matter. We rely on authorization from a third party at the company — HR, legal, or a director — rather than picking sides between two individuals.
Two people are both claiming the account.
We pause until both have responded, and we ask the company itself to resolve the conflict through HR, legal, or a director.
How long does it take?
Most recoveries complete within a few business days once we have all documentation. The notice period we give the original admin to object is usually the slowest step.
More from Account access and security
