Employee Onboarding Tasks
Admins should prioritize Employee Onboarding so they can invite personnel and track completion of required compliance tasks, including policy acknowledgments, background checks, training, and Secureframe Agent setup.
Configure settings first, then invite users so your team can work through tasks while you continue other compliance work.
Accept Security Policies - Read, accept and acknowledge your company's policies.
Background Check - Complete a standard background check if you are based in the United States. If you are based outside of the U.S., you'll need to upload your resume and any applicable references.
Training - Go through virtual training to learn best practices and stay compliant for your company's security framework. Below you will find a list of all the available training modules that Secureframe offers.
Security Training - Learn best practices around cybersecurity awareness and be quizzed to test your knowledge.
HIPAA Training - Learn best practices for securing PHI and maintaining HIPAA compliance.
PCI Training - Learn best practices for employees with access to credit card data.
GDPR Training - Learn best practices for companies who collect the personal data of European Union (EU) residents and ensure they uphold various privacy and security requirements.
CCPA Training - Learn best practices for how California residents have enhanced rights and transparency around the collection, use, and sharing of personal data.
Secure Code Training - Learn best practices for how to write code that is resistant to security vulnerabilities.
Secureframe Agent - Install the Secureframe Agent to your device to track specific compliance requirements like Password Policy, Hard Drive encryption and more.
Note: Users may need to click the message "If you have downloaded the agent or your operating system is not listed, click here to pass the onboarding installation step" to complete the Secureframe Agent setup.
Employee Onboarding Settings
Before inviting personnel, configure which onboarding tasks apply and which groups must complete them.
Go to Personnel → gear icon → Onboarding tab.
Review each section below and enable only what your organization needs. Assign tasks by personnel group (for example Employee, Contractor, or a custom group).
Policy & Background Settings
Turn on policy acknowledgment and background checks, then choose which groups must complete them.
Compliance Training Settings
Enable the training modules you require and assign them to the right groups.
Secureframe Agent Settings
Enable Secureframe Agent setup for groups that need endpoint checks such as password policy and hard drive encryption.
Interactive Walkthrough
Interactive Walkthrough: Launch the interactive walkthrough to practice configuring Employee Onboarding settings, including policies, training, background checks, and the Secureframe Agent. Click the highlighted areas on each screen to move to the next step. This is not a play/pause video.
Inviting Personnel to Employee Onboarding
After your Onboarding settings are configured, invite personnel to start completing tasks.
Edit the invite email template and send invites
Follow these steps to review the invite email and send invitations:
Go to the Personnel page
Click the Personnel Settings button (gear icon)
Open the Invite Personnel tab
Select one or more employees, then click Edit Email Template and Invite
Edit the email template as needed to personalize the message
Click Send Email to invite the selected personnel
After someone is invited to Employee Onboarding, a green checkmark appears in the Invited column on the Personnel page.
Manual vs automatic invites
You can invite users manually by selecting checkboxes on the Personnel page, or use Automatic Personnel Invites to invite by group.
For a manual invite, select the checkbox next to each person. You can customize, preview, and save the template before sending.
Interactive Walkthrough
Interactive Walkthrough: Launch the interactive walkthrough to practice inviting personnel to Employee Onboarding. Click the highlighted areas on each screen to move to the next step. This is not a play/pause video.
Admin Security Training & Policy requirements
Admins and Super Admins are directed to the Monitoring section by default, as it’s where they spend most of their time managing compliance.
However, they’re also responsible for completing Policy, Training, Background tasks as part of the organization’s compliance program.
To access these tasks:
Click your avatar in the top-right corner and select Employee Onboarding.
To return to Monitoring, click the avatar again and select Monitoring.
Multilingual Employee Onboarding
Employee onboarding is available in French, German, and Spanish. Users can update their language preference from the language selector in the top right to complete onboarding tasks in their preferred language.
Frequently Asked Questions (FAQ)
If I re-invite a user to Secureframe that has already been invited, will they get another email?
Yes. Resending an invite sends another email right away.
To resend, click the three-dot menu next to the user, then select Resend Invite.
How can I edit or customize the onboarding email that employees/personnel receive for Policy Acknowledgement and other tasks?
You can edit the email template by going to the Personnel page and opening the Settings (gear in the top right), then click the Invite Personnel tab.
From here, to access the onboarding email template, you will need to select one or more users from the list, then you will see an option to edit the email template at the bottom.
How can I mark an employee as being completed in the background check and Security Awareness Training as they were done through other programs?
If users have completed their background check and/or security training outside of Secureframe, evidence can be uploaded to the Data Room and tagged as the appropriate evidence and also linked to the respective user.
My employees have downloaded the agent, but claim onboarding hasn't updated?
Once you have downloaded and installed the Agent, you will need to click on the "If you have downloaded the agent or your operating system is not listed, click here to pass the onboarding installation step" link in the Employee Onboarding section. (ex, screenshot below)
How often does Secureframe automatically remind users to complete certain tasks?
Depending on your Onboard settings, there are a set of Policy Acknowledgement tests and Training Tests (ex, Security Awareness) that will be required to complete on an annual basis.
Each employees tasks will reset (Pass to Fail) on that annual mark to prompt users to re-accept or re-take training so that your organization stays in compliance with the applicable frameworks.
I accidentally sent onboarding to a user's personal email address, then after integrating it pulled in their work email as well. They claim the onboarding tasks are finished, but they are not present under the work email?
In this scenario, tasks were completed under the personal email. An admin can merge the two accounts, which also merges completed Employee Onboarding tasks.
See detailed instructions on editing and merging personnel records.
What should I do if the Secureframe Agent download section is missing on my onboarding screen after logging in?
A common cause is that Secureframe Agent downloads are enabled only for certain groups. For example, Agent may be enabled for the Employee group but not Contractors, so Contractors will not see the download step.
An admin can either update the user's group/type or add the relevant group to the Agent download configuration in Employee Onboarding settings.
What happens if an employee is offboarded and has open tasks?
Employees who have been offboarded should no longer receive notification emails.
You should mark them as inactive to ensure they do not receive any further notifications.
How do I uninvite or remove someone from the Secureframe platform?
It depends on the user’s relationship to your organization:
Employees or Contractors: If the person was an employee or contractor, mark them as Inactive. This will automatically revoke their access to Secureframe but preserve their record for audit purposes.
If they’re still employed but no longer need Admin access, you will need to edit their account and remove their level of admin access, then save.
Non-Personnel (e.g., auditors, external advisors): Always mark users who are not employees or contractors as Non-Personnel.
If they already have no access (check the Access Role column), no further action is needed.
If they still have an active access role and you want their account fully deleted and removed from Secureframe, please submit a support ticket.
An employee cannot log in with the magic link to complete onboarding. What should I check?
Confirm the email on the Personnel record matches the inbox where the employee expects the link.
Ask the admin to Resend Invite from the three-dot menu on the Personnel page.
If the employee uses SSO (Google Workspace, Okta, Microsoft), they should sign in with SSO instead of the magic link when prompted. See Multi-Factor Authentication (MFA) for enrollment issues after first login.
If login still fails, contact Support with the employee email and a screenshot of the error.
An employee was synced from HRIS before their work email existed and the invite bounced. How do I fix it?
Update the personnel record with the correct work email under Personnel.
Use Resend Invite after the email is corrected. A bounced invite to a placeholder address will not deliver to the new address automatically.
If duplicate personnel records exist (old and new email), merge the users to preserve completed onboarding tasks.
Can I change an employee's email without losing completed onboarding tasks?
Updating the email on a single personnel record generally preserves task completion tied to that record.
If the employee already has two records (old and new email), merge them so onboarding progress carries over. See Editing & merging personnel records.
After a company acquisition or email domain change, plan merges before re-inviting large groups to avoid duplicate accounts.
Can I edit the email template that says "User has partnered with Secureframe to become SOC 2 compliant"?
No, this specific notification email template, which is sent automatically based on users who have tasks open, is not currently customizable.
However, you can customize the invite email using the instructions here.