Table of Contents
- How to Document What You Took, What You Did Not Take, and What You Still Have Access To
- Why Documentation Becomes So Important In Trade Secret Disputes
- What This Kind Of Documentation Usually Covers
- 1. What You Took
- 2. What You Did Not Take
- 3. What You Still Have Access To
- 4. What You Returned, Deleted, Or Segregated
- 5. What Evidence Exists To Prove All Of That
- How To Build A Clear Record Without Making Things Worse
- 1. Start With A Timeline
- 2. List Every Place Company Information Could Exist
- 3. Separate Possession From Access
- 4. Be Specific About What Was Not Taken
- 5. Preserve Evidence Before Devices Or Apps Change It
- 6. Avoid “Cleaning Up” Without Advice
- 7. Document Return And Segregation Carefully
- What Employers, Courts, And Attorneys Often Look For
- Common Documentation Mistakes That Can Complicate A Defense
- Relying On Memory Instead Of Records
- Mixing Personal And Work Data In One Account
- Forgetting Messaging Apps And Collaboration Tools
- Using Vague Language
- Deleting First And Explaining Later
- What If You Still Have Access To Company Systems Right Now?
- How This Documentation Can Help Your Attorney Early
- A Simple Framework You Can Use
- Take
- No Take
- Access
- Return
- Proof
- Final Thoughts
Type
Great Grandchild
Status
Approved
Caption
Title (YouTube)
Caption X
Cover
OG Image
Alt Image Text
Flat vector illustration of documenting what you took, what you did not take, and what you still have access to in trade secret disputes, with files, devices, cloud access, and an organized evidence timeline.
Images
Videos
Video Published (Blog)
Publish Date (Social)
Apr 13, 2027 16:00
Scheduled (Social)
Scheduled (Social)
Images Posted (Social)
Images Failed (Social)
Videos Posted (Social)
Videos Failed (Social)
Featured
Do not index
Videos Post IDs (Social)
Created time
Apr 1, 2026 07:54 PM
Sub-item
Authors
Images Post IDs (Social)
YT Post ID
YT Embedded
Images Delete (Social)
Videos Delete (Social)
How to Document What You Took, What You Did Not Take, and What You Still Have Access To
Leaving a job, joining a competitor, or getting accused of taking confidential company information can turn into a trade secret dispute fast. In many of these cases, the first big fight is not only about what happened. It is about what can be proven.
That is where documentation matters.
A clear record of what files you copied, what you returned, what accounts you can still access, and what systems you never touched can shape how an employer, a court, or an attorney understands the situation. In federal trade secret cases, courts can issue injunctions to prevent actual or threatened misappropriation, but the law also says a person cannot be blocked from working for a new employer based only on what they know in their head; there has to be evidence of threatened misappropriation, not mere knowledge alone (LII’s text of the Defend Trade Secrets Act). That distinction often makes documentation incredibly important.
In this post you’ll learn how to create a careful record of what you took, what you did not take, and what you still have access to, why that record matters in trade secret disputes, and how an attorney may use that timeline to reduce confusion early. If you want broader background first, it may help to start with this overview of trade secret conflicts that come up when people leave jobs, get accused of taking data, or face injunction requests.
Scroll to the bottom for every post in this series.
Why Documentation Becomes So Important In Trade Secret Disputes
Trade secret claims often turn on a few recurring issues:
- whether the information actually qualified as a trade secret
- whether it was acquired, used, or disclosed improperly
- what devices, cloud folders, email accounts, and collaboration tools were involved
- whether evidence was preserved or lost
- whether ongoing access still exists
Under the federal Defend Trade Secrets Act, a trade secret owner can bring a civil action if the alleged misappropriation relates to a product or service used in interstate or foreign commerce (LII). State-law claims often track similar concepts because many states adopted versions of the Uniform Trade Secrets Act, which generally defines a trade secret as information that derives independent economic value from not being generally known and is subject to reasonable efforts to maintain secrecy (Uniform Law Commission overview).
In plain English, these cases often become evidence fights:
- What exactly was accessed?
- When was it accessed?
- Where was it stored?
- Who still controls it?
- Can anyone verify that it was deleted, returned, or never possessed at all?
If the answer is vague, suspicion usually fills the gap. If the answer is documented, the dispute sometimes becomes narrower and more manageable.
That matters even more because electronically stored information can become central very quickly. Federal Rule of Civil Procedure 37(e) addresses lost electronically stored information and focuses on whether relevant ESI should have been preserved, whether reasonable steps were taken, and whether the lost material can be restored or replaced (LII Rule 37). In other words, once a dispute is reasonably foreseeable, evidence handling can become almost as important as the underlying accusation.
What This Kind Of Documentation Usually Covers
A useful record is usually less about making arguments and more about building a factual map. That map often includes five categories.
1. What You Took
This includes any company-related information that moved with you in any form, such as:
- emailed documents
- downloaded files
- synced folders
- screenshots
- printed materials
- notes containing confidential details
- contacts exported from business systems
- files transferred to USB drives, personal cloud storage, or messaging apps
The key point is not only “important” files. It can also include routine materials that later become disputed.
2. What You Did Not Take
This is often overlooked, but it can be just as important. A detailed list of systems or file groups you never copied, exported, forwarded, photographed, or retained can help define the boundaries of the dispute.
Examples may include:
- source code repositories you never accessed
- pricing databases you never exported
- customer lists you never downloaded
- R&D folders you never opened
- CRM records you viewed only in the ordinary course, without copying them
A later accusation may be broader than reality. A contemporaneous record can help separate the two.
3. What You Still Have Access To
Access issues can create ongoing risk even when nobody intentionally “takes” anything. For example:
- company email still forwarding to a personal account
- Slack, Teams, or project management tools still active
- shared drives that remain accessible after departure
- password-manager entries that still log in automatically
- phone apps that continue syncing data
- remote desktop or VPN credentials that still work
This matters because continued access can be interpreted in different ways. Sometimes it reflects an employer’s offboarding failure. Sometimes it raises questions about ongoing possession or monitoring. The Department of Justice and FTC have publicly emphasized preservation obligations involving collaboration tools and ephemeral messaging because modern workplace systems can contain responsive evidence even when messages disappear quickly (DOJ announcement).
4. What You Returned, Deleted, Or Segregated
A strong factual record often includes:
- devices returned and when
- credentials surrendered and when
- files deleted and from where
- backups identified
- personal and business data separated
- external drives checked
- cloud folders reviewed
- paper files boxed or returned
5. What Evidence Exists To Prove All Of That
Documentation is strongest when it is supported by objective evidence, such as:
- screenshots
- download histories
- email confirmations
- shipping receipts
- IT tickets
- access logs
- written return acknowledgments
- preservation notices from counsel
- forensic images or neutral expert reports, where appropriate
How To Build A Clear Record Without Making Things Worse
The goal is usually to create a clean factual timeline, not a self-serving narrative. Here is a practical framework many attorneys find useful when evaluating these disputes.
1. Start With A Timeline
Begin with dates, not conclusions.
A useful timeline may include:
- your resignation date
- your last day of work
- when you accepted a new role
- when you last accessed company systems
- when you returned equipment
- when your credentials stopped working
- when any accusation first appeared
- when a cease-and-desist letter, litigation hold, or court filing was received
Trade secret disputes often move fast, especially when an employer seeks emergency relief. A timeline can help an attorney compare your version with device records, server logs, and offboarding documents.
2. List Every Place Company Information Could Exist
This step is broader than many people expect. Think about every storage location and communication channel, including:
- work laptop
- personal laptop
- mobile phone
- tablet
- personal email
- USB drives
- Dropbox, Google Drive, iCloud, OneDrive
- Slack, Teams, Signal, WhatsApp
- printouts and notebooks
- home printers and scans
- backup systems
- browser downloads folders
Federal discovery rules and preservation principles often focus on electronically stored information in many forms, not just formal documents (LII Rule 37). NIST guidance on digital evidence preservation likewise emphasizes preserving digital evidence in ways that protect its integrity (NIST digital evidence resources).
3. Separate Possession From Access
These are related, but not identical.
You may possess a document on a device. You may also have access to a system without having downloaded anything from it. In trade secret fights, the distinction matters.
For example:
- A still-active company Dropbox folder may indicate access, not necessarily copying.
- A forwarded attachment in personal Gmail may indicate possession.
- Auto-login credentials on a phone may suggest potential access even if there was no later use.
When documenting this, try to break it into columns:
- system or file source
- whether you accessed it
- whether you downloaded it
- whether you still possess it
- whether access remains live
- what proof supports each answer
4. Be Specific About What Was Not Taken
General statements like “I didn’t take anything confidential” often do less work than people expect. Courts and employers often care about categories and evidence.
A more useful factual approach may identify:
- named folders not downloaded
- databases not exported
- repositories not cloned
- customer lists not copied
- proprietary formulas or models not retained
- strategic plans not forwarded
This does not guarantee agreement, but it creates a more verifiable record.
5. Preserve Evidence Before Devices Or Apps Change It
This is an area where caution matters. Phones sync. Apps delete. Cloud systems overwrite. Browsers clear history. IT departments reassign devices. Messaging tools may have disappearing-message settings.
The federal rules recognize that electronically stored information can be lost, and the 2015 committee notes to Rule 37(e) explain that courts often ask whether the information should have been preserved when litigation was reasonably foreseeable, whether reasonable steps were taken, and whether substitute information exists (LII Rule 37 and notes). DOJ and FTC guidance on ephemeral messaging reflects the same practical concern: modern tools can destroy relevant evidence very quickly if nobody addresses preservation early (DOJ).
In general terms, that often means people in this situation consider preserving:
- screenshots of active accounts and folder structures
- login status for company systems
- email chains about return of property
- metadata-rich originals where possible
- text messages and collaboration messages
- logs showing account deactivation or failed login attempts
6. Avoid “Cleaning Up” Without Advice
One of the biggest risks is trying to make a problem disappear by deleting files, wiping devices, or changing accounts before getting legal guidance. Even if the original intent was innocent, later deletion can become a separate dispute about spoliation, credibility, or intent.
That does not mean every file on a personal device has to remain forever. It means the timing, method, and documentation around deletion often matters. An attorney may help determine whether preservation, neutral forensic collection, negotiated return, or staged deletion makes more sense in the specific context.
7. Document Return And Segregation Carefully
If company property or data was returned, deleted under agreement, or moved into a segregated location pending review, document each step.
Helpful items may include:
- date and time
- device name
- account involved
- file categories involved
- who requested the action
- who observed or confirmed it
- whether screenshots or logs exist
- whether a lawyer, IT team, or forensic vendor participated
A simple “I returned everything” message is less useful than a documented chain of events.
What Employers, Courts, And Attorneys Often Look For
Trade secret cases do not arise in a vacuum. Courts often look at whether the disputed information appears to have been protected as secret, whether access was legitimate at first but later became improper, and whether the facts suggest actual or threatened misuse.
The Defend Trade Secrets Act allows injunctions but also limits them in important ways, including by requiring evidence of threatened misappropriation rather than allowing employment restrictions based solely on a person’s general knowledge and experience (LII). That is one reason documentation about actual files, actual access, and actual retention can matter so much.
In many disputes, attorneys also look for evidence tied to secrecy measures, such as:
- confidentiality agreements
- restricted access controls
- password protection
- device policies
- offboarding instructions
- document labeling
- monitoring logs
State trade secret law often turns on whether the owner used reasonable measures to maintain secrecy, a core element reflected in UTSA-style definitions (Uniform Law Commission overview).
Common Documentation Mistakes That Can Complicate A Defense
Even people trying to be careful can make avoidable mistakes. Some of the most common are:
Relying On Memory Instead Of Records
People often remember the big moments and forget the small technical ones, like auto-synced folders, backup drives, cached email, or mobile app logins.
Mixing Personal And Work Data In One Account
That can create privacy concerns and also make targeted review harder. A lawyer may help evaluate whether a narrowed collection or neutral process makes sense.
Forgetting Messaging Apps And Collaboration Tools
Slack, Teams, Signal, WhatsApp, and similar tools can become part of the factual record. DOJ and FTC preservation guidance specifically addresses collaboration and ephemeral messaging tools because relevant business evidence may exist there (DOJ).
Using Vague Language
Statements like “nothing important” or “just ordinary files” often create more questions than answers. Specific categories are usually more useful.
Deleting First And Explaining Later
That can make a manageable dispute look more serious.
If you are trying to avoid these kinds of missteps before a move to a competitor, our related guide on leaving carefully without escalating a confidential-information dispute can help frame the bigger picture.
What If You Still Have Access To Company Systems Right Now?
This is one of the most sensitive scenarios.
Continuing access after separation can happen because of overlooked permissions, shared credentials, mobile-device sync, or delayed offboarding. But from the outside, it can also look like an ongoing ability to obtain confidential information.
Useful documentation here often includes:
- what system still works
- when you discovered access still existed
- whether you actually entered the system
- what, if anything, you viewed
- whether anything was downloaded
- screenshots showing the access condition
- any notice sent to the company or counsel about the issue
The distinction between ability to access and actual use can matter. So can the distinction between inadvertent technical access and intentional continued entry.
How This Documentation Can Help Your Attorney Early
A lawyer evaluating a trade secret accusation usually wants to answer a few practical questions quickly:
- Is there an immediate injunction risk?
- Is there a preservation issue?
- Is there actual possession of disputed data?
- Is there an access problem that can be addressed right away?
- Is a forensic protocol likely?
- Can the facts be narrowed before litigation escalates?
A well-organized document package may help an attorney move faster on those questions. In many situations, that can affect the tone of early communications, the scope of any return or deletion protocol, and the ability to challenge overbroad accusations with objective facts.
That is especially true when emergency litigation is in play. Trade secret plaintiffs sometimes seek temporary restraining orders or other rapid relief. When that happens, contemporaneous records can become far more persuasive than later reconstructions.
A Simple Framework You Can Use
If you want one practical checklist, think in terms of Take, No Take, Access, Return, Proof.
Take
- What did you copy, send, save, or retain?
No Take
- What confidential categories did you never download, export, or keep?
Access
- What systems, folders, apps, and accounts can you still get into?
Return
- What did you hand back, delete, segregate, or stop using?
Proof
- What screenshots, emails, logs, receipts, or device records back that up?
That framework will not resolve every dispute. But it often gives an attorney a factual starting point that is far stronger than a general denial.
Final Thoughts
Trade secret disputes often become messy when facts are incomplete, devices change, and people talk in conclusions instead of evidence. A careful record of what you took, what you did not take, and what you still have access to can help define the real dispute before assumptions take over.
In general terms, the earlier that record is built, the easier it may be for counsel to evaluate preservation issues, offboarding problems, access questions, and any risk of emergency court action. If your situation involves a job change, competitor move, demand letter, account-access issue, or accusation involving confidential company information, an attorney may help determine what facts matter most and how to preserve them without creating new problems.
Visit ReferU.AI to get matched with an attorney who has demonstrable experience in cases like yours — for free.
