How to use this toolkit
Each paper below is meant to be copied, adapted, and put to work. Start with the risk tier worksheet, since it determines how many of the others you need. A low-tier hire may need only the certification and the day-one memo. A senior, head-to-head hire may need everything through Paper 9. Papers 10 to 15 sit in a drawer until something happens, at which point you will be glad not to be drafting from scratch at 7 p.m.
Three cautions. Every form here may become an exhibit, so do not add adjectives you would not want read aloud in court. These templates need adjustment for state law, particularly in California, Florida, Massachusetts, Minnesota, and Washington. And no form replaces conduct: the companies in Bimbo Bakeries and Language Line had signed acknowledgments and still faced serious claims.
For the reasoning behind these papers, see Hiring From a Competitor: Inevitable Disclosure, Employee Raiding, and the New Employer's Trade Secret Exposure. For the step-by-step sequence, see Onboarding a Competitor's Employee Without Importing Its Secrets: A Practical Guide. For a printable task list, see Competitor Hire Trade Secret Checklist: A Practical Checklist.
Table of contents
| No. | Paper | Owner | When |
|---|---|---|---|
| 1 | Risk tier worksheet | Counsel, hiring manager | Before offer |
| 2 | Recruiter and headhunter instruction | Talent, counsel | Before outreach |
| 3 | Interviewer briefing and stop script | Hiring manager | Before each interview |
| 4 | Restrictive covenant disclosure form | HR | Before offer |
| 5 | Indemnification decision questions | Counsel, finance | Before offer |
| 6 | Offer letter clause bank | HR, counsel | With offer |
| 7 | Good leaver letter | HR | With offer or on acceptance |
| 8 | Candidate certification | HR | At acceptance and on day one |
| 9 | Day-one instruction memo and firewall memo | Manager, HR, counsel | Day one |
| 10 | IT onboarding control sheet | IT, security | Before day one |
| 11 | Incident intake and quarantine protocol | Counsel, IT | On discovery |
| 12 | Employee interview warning and hold notice | Counsel | On discovery or demand |
| 13 | Response to a cease-and-desist letter | Counsel | Within the deadline |
| 14 | Forensic protocol and hash exchange term sheet | Counsel for both sides | During dispute |
| 15 | Former employer's evaluation sheet and demand letter | Former employer's counsel | Before sending |
Paper 1: Risk tier worksheet
Purpose: decide how much process this hire needs, and record why. Owner: counsel with the hiring manager. Timing: before any offer; update if the role changes.
| Factor | 1 (lower) | 2 | 3 (higher) | Score |
|---|---|---|---|---|
| Competition between companies | Adjacent | Some overlap | Head-to-head | [ ] |
| Similarity of old and new role | Different function | Partly similar | Nearly identical | [ ] |
| Old access | Routine data | Some confidential | Plans, pricing, code, formulas | [ ] |
| Freshness | Stale for a year or more | Mixed | Current plan or launch | [ ] |
| Team effect | Single hire | Two people | Three or more from one group | [ ] |
| Circumstances of leaving | Open, amicable | Unknown | Secret, disputed, or angry | [ ] |
| Former employer's habits | Rarely enforces | Sends letters | Sues or has sued us | [ ] |
| Enforceable covenant in play | None | Doubtful | Likely enforceable | [ ] |
Total [ ]: 8 to 12, low tier; 13 to 18, medium; 19 to 24, high.
Forum notes: lives in [ ]; will work in [ ]; old employer in [ ]; contract law and forum [ ]. Inevitable disclosure in likely forum: [recognized / limited / rejected]. Decision and required papers: [ ]. Decided by [ ], date [ ].
Drafting notes. The scoring is a thinking aid, and a judge will not care about the arithmetic. The factors come from the case law: direct competition, role similarity, and value in EarthWeb, Inc. v. Schlack, 71 F. Supp. 2d 299 (S.D.N.Y. 1999); safeguards and forthrightness in Whyte v. Schlage Lock Co., 101 Cal. App. 4th 1443 (2002). For the forum line, compare Bimbo Bakeries USA, Inc. v. Botticella, 613 F.3d 102 (3d Cir. 2010) (sufficient likelihood or substantial threat under Pennsylvania law) with Marietta Corp. v. Fairhurst, 301 A.D.2d 734 (N.Y. App. Div. 2003) and LeJeune v. Coin Acceptors, Inc., 381 Md. 288 (2004). Keep the worksheet in counsel's file, marked privileged only if it was actually prepared to obtain legal advice.
Paper 2: Recruiter and headhunter instruction
Purpose: keep agents from becoming your knowledge. Owner: head of talent, approved by counsel. Timing: with every engagement of an outside recruiter and in the annual internal briefing.
Instructions for recruiting from competitors
- Do not ask a candidate for any confidential information about a current or past employer, including customers, pricing, plans, products in development, code, formulas, or lists of employees and their pay.
- If a candidate offers such information, or offers to bring documents, a team, or a ready-made design, say: "We don't want that. Please don't send it." End that part of the conversation.
- Report the offer to [counsel] by phone the same day. Do not forward recordings, notes, or documents to anyone else, and do not delete them.
- Do not ask a candidate to identify or approach other employees of their employer.
- Contact candidates only through personal channels.
- Do not record calls unless [counsel] has approved, and state recording laws allow it.
Drafting notes. Point 3 reflects Comet Technologies USA, Inc. v. XP Power, LLC, No. 23-15709 (9th Cir. July 14, 2026), where a headhunter's recording of a candidate's pitch reached senior executives. Knowledge reaches the company through its agents, and 18 U.S.C. § 1839(5) reaches anyone who "knows or has reason to know." Point 4 reflects the raiding risk in Bancroft-Whitney Co. v. Glen, 64 Cal. 2d 327 (1966). Point 6 exists because some states require all-party consent to record calls.
Paper 3: Interviewer briefing and stop script
Purpose: keep interviews on ability. Owner: hiring manager. Timing: emailed before each interview loop with a competitor candidate.
Today's candidate works for a competitor. Please focus on skills, experience, general methods, and public work.
Fine to ask: "How would you structure this problem?" "What tradeoffs do you weigh when choosing X?" "Tell me about a project you can describe without confidential details."
Do not ask: who their customers are, pricing or margins, roadmaps, unreleased products, internal tool names, why a named project was delayed, or who else there might be interested in moving.
If they start to share something sensitive, say: "Let me stop you there. We don't want anything confidential from your employer, and I don't want to put you in a difficult position."
Afterward: do not write down the substance. Tell [counsel] that something came up.
Work samples: use only the exercise we supply.
Drafting notes. Language Line Services, Inc. v. Language Services Associates, Inc., 944 F. Supp. 2d 775 (N.D. Cal. 2013) records exactly what you are trying to avoid: an interview presentation listing competitor accounts with financial data, and a pre-hire business plan. "Do not write it down" is about not spreading the information. It is never an instruction to destroy anything that already exists.
Paper 4: Restrictive covenant disclosure form
Purpose: find the paper. Owner: HR. Timing: before the offer goes out.
Name: [ ] Current employer: [ ] Work location: [ ] Home state: [ ]
Please list any agreement or plan, past or current, that may restrict your work for a competitor, your contact with customers or employees, or your use of information:
☐ Employment agreement ☐ Confidentiality or invention assignment agreement ☐ Offer letter ☐ Equity, option, or RSU agreement ☐ Bonus or deferred compensation plan ☐ Severance or separation agreement ☐ Sale of business agreement ☐ Other: [ ]
Please provide the restrictive language if you are permitted to, or describe it. If you are unsure whether you can share it, ask your own lawyer first.
Do not send any other document from your current or former employer, and do not describe its confidential business.
Signature: [ ] Date: [ ]
Drafting notes. Whether a covenant can bind depends heavily on place. Note Cal. Bus. & Prof. Code § 16600.5, Edwards v. Arthur Andersen LLP, 44 Cal. 4th 937 (2008), and Application Group, Inc. v. Hunter Group, Inc., 61 Cal. App. 4th 881 (1998) for California; Minn. Stat. § 181.988 for Minnesota; RCW 49.62 and ESHB 1155 (Laws of 2026, ch. 149, effective June 30, 2027) for Washington; and the CHOICE Act (ch. 2025-213, Laws of Florida) for Florida. The FTC rule is not a source of protection: see Ryan LLC v. Federal Trade Commission, 746 F. Supp. 3d 369 (N.D. Tex. 2024) and the removal at 91 Fed. Reg. 6,507 (Feb. 12, 2026). For employee nonsolicitation clauses in California, see AMN Healthcare, Inc. v. Aya Healthcare Services, Inc., 28 Cal. App. 5th 923 (2018).
Paper 5: Indemnification decision questions
Purpose: decide whether and how to back the candidate. Owner: counsel with finance. Timing: before making any promise, including an oral one.
- What claims are realistic: covenant, trade secret, loyalty, interference?
- What is the likely forum, and how likely is an injunction there?
- Does the candidate need this to accept? Could paying for independent counsel be enough?
- Are we indemnifying defense costs, judgments, or both? Is there a cap?
- Does the promise exclude intentional wrongdoing, dishonesty, or false certification?
- Can we control the defense, or at least consult? Does counsel have a conflict?
- What happens if the candidate is terminated, or the claim settles?
- How would this document read in a claim that we induced a breach?
- Is it consistent with our policy, and with what we have done for others?
- Does insurance respond? Have we given required notice?
Sample limited promise
Subject to the conditions below, [Company] will advance reasonable attorneys' fees you incur in defending a claim by [Former Employer] that your employment with us breaches [identified covenant]. This does not apply to any claim arising from your taking, keeping, using, or disclosing confidential information, or from any false statement in your certification, and any advance for such a claim must be repaid. You must notify us promptly of any claim, cooperate, and use counsel reasonably acceptable to us. [Company] may end this commitment if it determines in good faith that you have breached these conditions.
Drafting notes. An indemnity may be offered as evidence of knowledge in an interference claim. In New York, a generalized competitive interest does not excuse interference with an existing contract under White Plains Coat & Apron Co. v. Cintas Corp., 8 N.Y.3d 422 (2007). An unreasonable covenant may provide a defense in Texas under Juliette Fowler Homes, Inc. v. Welch Associates, Inc., 793 S.W.2d 660 (Tex. 1990). Keep defense counsel's independence clear, for the reasons in Waymo LLC v. Uber Technologies, Inc., 870 F.3d 1350 (Fed. Cir. 2017).
Paper 6: Offer letter clause bank
Purpose: representations and instructions that show what you expected. Owner: HR and counsel. Timing: with the offer. Use only what fits.
A. No conflicting obligations
You represent that you have disclosed to us every agreement that may restrict your work for us, and that performing the duties described in this letter will not breach any obligation you owe to anyone else. You have reviewed the description of your duties and will tell us immediately if you believe any part of them conflicts with such an obligation.
B. No former employer information
We are hiring you for your skills and experience. We do not want, and you must not bring, use, or disclose, any confidential information or property of any former employer or other third party. You represent that you have not retained any such material, in any form, including in personal email, cloud storage, personal devices, or code repositories. If you discover any, do not use it, do not delete it, and notify [contact] immediately.
C. Condition of employment
This offer is conditioned on the truth of these representations. A false statement is grounds for withdrawal of this offer or termination of your employment.
D. Role limits (high tier)
For [period], you will not [work on named accounts or products / participate in named decisions]. These limits are meant to help you perform your job without any need to draw on another company's confidential information. They are not an admission that you hold such information.
E. Preserving rights to report
Nothing in this letter or any other agreement limits your right to report possible violations of law to a government agency or to communicate with your own lawyer.
F. Nonsolicitation reminder
Until your last day with [Former Employer], you must not encourage any of its employees or customers to leave it. After that, you must comply with any enforceable obligation you have disclosed to us.
Drafting notes. Clause B's instruction not to delete is deliberate, and it departs from many older forms that say "destroy any such materials." A hire who follows that older instruction may be creating the fact pattern in WeRide Corp. v. Kun Huang, 379 F. Supp. 3d 834 (N.D. Cal. 2019). Clause D gives you something to show under 18 U.S.C. § 1836(b)(3)(A)(i), which requires conditions on employment to rest on evidence of threatened misappropriation. Clause D's disclaimer language is useful because a role limit might otherwise be painted as an admission. Clause E reflects the policy of 18 U.S.C. § 1833(b) as well as agency rules against impeding reports. Do not assume clauses B and C will prevent liability. Quaker's similar paper in PepsiCo, Inc. v. Redmond, 54 F.3d 1262 (7th Cir. 1995) did not, and many courts allow a claim against the employer vicariously even when it lacks personal knowledge, as in Thola v. Henschell, 140 Wash. App. 70 (2007).
Paper 7: Good leaver letter
Purpose: shape the last two weeks. Owner: HR. Timing: on acceptance, before notice is given.
Dear [Name],
We are delighted you have accepted. Please read this before you give notice.
Take nothing. Do not take, copy, forward, photograph, upload, or print any document or data belonging to [Current Employer], even if you wrote it. This includes materials in personal email, cloud accounts, phones, or home devices. Return company property as they direct.
Don't tidy up on your own. If you find [Current Employer] material in a personal account or device, do not use it and do not delete it. Call your lawyer, who can arrange return in the right way. We will cover up to [$X] of that lawyer's fees for this purpose.
Stay loyal while you are there. Keep doing your job. Do not use your employer's systems to deal with us. Please don't encourage any colleague or customer to leave, and don't tell colleagues about the move before you have given notice.
Give notice soon, and step back. Please give notice within [X] days. If you are invited to discuss plans or strategy after you have accepted this job and before you give notice, please decline.
Be straightforward. You don't have to tell anyone where you are going unless your contract requires it. If you choose to answer, answer truthfully. Please don't say you are undecided or leaving the industry if that isn't so.
Exit interview. Take part if asked. Sign only what you are comfortable with, and you may consult your lawyer before signing.
Nothing here limits your rights to communicate with a government agency or your lawyer.
Drafting notes. The honesty paragraph answers PepsiCo's "out and out lies" finding, and the facts of Whyte and Bimbo Bakeries, where people accepted and stayed in sensitive meetings. In Bimbo Bakeries, forensic review of the last days was central, including a pattern of files accessed within seconds. Telling a candidate how to behave while employed elsewhere can look like control, so keep the letter about avoiding wrongdoing. Do not coach on anything that looks like avoiding detection. "We will cover fees" should be cleared against Paper 5.
Paper 8: Candidate certification
Purpose: a dated record of what the person affirmed. Owner: HR. Timing: at acceptance, and again on day one, after the live conversation.
I, [Name], certify that:
- I have not brought and will not bring to [Company], or store on any [Company] system, any confidential information or property of any former employer.
- I have searched my personal email, cloud accounts, devices, and code repositories that I might use for work, and [I found no such material] [I found the material described in the attached note and have told counsel].
- I have disclosed all agreements that may restrict my work, listed here: [ ].
- I can do my job without using any former employer's confidential information. If that changes, I will tell [contact] at once.
- I have not been asked by anyone at [Company] to provide any such information.
- If I discover such material later, I will not use or delete it, and I will tell [contact] immediately.
- I understand that a false statement is grounds for discipline, including termination.
I understand that nothing in this certification limits my right to report possible violations of law to a government agency.
Signed: [ ] Date: [ ] Witness: [ ]
Drafting notes. Item 2 calls for an actual search, and it offers a way to say "I found something," which is more valuable than a clean signature. Item 5 is useful evidence against the claim that the company solicited the material. The employee's verification to his new employer that he held no former employer data appears in the record in CAE Integrated, L.L.C. v. Moov Technologies, Inc., 44 F.4th 257 (5th Cir. 2022), where the injunction was denied. A form alone did not carry the day in Bimbo Bakeries, whose language is quoted in full in a footnote and is worth reading. Do not ask the employee to give you access to personal accounts as part of this certification. See 18 U.S.C. § 2701.
Paper 9: Day-one instruction memo and firewall memo
Purpose: turn the paper into a conversation. Owner: manager and HR, with counsel for the firewall. Timing: day one, in person or on video.
Day-one memo
To: [Name] From: [Manager] cc: [HR]
Welcome. We hired you for what you can do, not for what you know about [Former Employer]. Here is how that works in practice.
- Don't bring it. No documents, templates, code, data, or lists from a former employer. Your general skills and experience are yours to use.
- Don't discuss it. If a project raises something you know only from your old job, say so and step back. Try: "I can't talk about how they did that, but here's how I'd approach it from first principles."
- Use our tools only. Use only your company laptop, your company accounts, and approved AI tools. Please do not restore from a backup or sign in to personal storage on our systems.
- If you find something, on a laptop, in a drive, or in your memory of a specific number or formula you know is theirs, do not use it or delete it. Call [contact]. You won't be in trouble for asking.
- If someone asks you for it, even me, say no and call [contact].
- Former colleagues: please don't recruit them. If one reaches out, refer them to [HR].
We will check in at 30, 60, and 90 days.
Reviewed with me on [date]. Signed: [Name] [Manager]
Firewall memo (high tier only)
Scope: For [period], [Name] will not [work on / attend meetings about / review documents concerning] [named accounts, products, or decisions].
Why: To make sure [Name] can do the job without any need to use confidential information of [Former Employer]. This does not imply that [Name] has done anything wrong.
Who covers instead: [Names]. They have been told not to ask [Name] about the work.
How we check: [Manager] confirms compliance at each check-in. Exceptions go through [counsel].
End date and review: [Date]. [Counsel] and [Manager] will review before it lapses.
Drafting notes. Tie the period to the shelf life of the information. PepsiCo's injunction ran about five months, keyed to annual plans, and the Seventh Circuit said a permanent bar would have raised a harder question. The "first principles" line protects independent derivation under 18 U.S.C. § 1839(6)(B), which in practice depends on a record. Keep notes of your independent work, since Oakwood Laboratories LLC v. Thanoo, 999 F.3d 892 (3d Cir. 2021) treats reliance on a secret to speed development as use. A firewall can also be offered to a court as a narrower alternative to an injunction under Mallet & Co. v. Lacayo, 16 F.4th 364 (3d Cir. 2021), which vacated an unfocused order. In California, take care that a firewall is voluntary and does not imply a restraint the state forbids.
Paper 10: IT onboarding control sheet
Purpose: close the common channels. Owner: IT or security, reviewed by counsel. Timing: ready before day one; review after 90 days.
| Channel | Risk | Control | Exception path | Done |
|---|---|---|---|---|
| Laptop setup | Migration of old data | Fresh image; no restore from personal backup | Counsel approval | [ ] |
| USB storage | Files in or out | Block mass storage; log device connections | Time-limited ticket | [ ] |
| Personal cloud | Sync of old folders | Block consumer sync clients and upload domains | None | [ ] |
| Browser | Synced profile brings bookmarks, passwords | Restrict sign-in; managed browser | None | [ ] |
| Forwarding from personal accounts | Alert on bulk inbound attachments in first 90 days | Review with counsel | [ ] | |
| Source control | Old repos, foreign headers | Scan new commits for former employer names and copyright strings; personal accounts not linked | Review | [ ] |
| Collaboration tools | Paste-ins and uploads | Keyword alerts for former employer name and domains | Review | [ ] |
| CRM | Imported customer lists | Disable bulk import for 90 days | Manager and counsel | [ ] |
| AI tools | Old prompts and uploads | Approved tenant only; logging | None | [ ] |
| Phones | Contacts sync, personal apps | Managed container for work data | None | [ ] |
| Retention | Evidence ages out | Extend logs for this user to [X] days | n/a | [ ] |
Escalation: anything that matches goes to [counsel], and not to the manager. Do not open the file. Record the time, user, path, size, and hash.
Drafting notes. These items correspond to the channels in the reported cases: USB in WeRide, personal cloud in CAE Integrated and Free Country Ltd. v. Drennen, 235 F. Supp. 3d 559 (S.D.N.Y. 2016), Gmail in Language Line, and source repositories in Motorola Solutions, Inc. v. Hytera Communications Corp., 108 F.4th 458 (7th Cir. 2024). Write a monitoring policy and give any notice required by state law (for example, N.Y. Civ. Rights Law § 52-c, Conn. Gen. Stat. § 31-48d, Del. Code tit. 19, § 705). Apply the same controls to all lateral hires so you are not singling out one person. For related controls on your own information, see Trade Secret Protection Toolkit: Building and Defending a Confidentiality Program and Trade Secret Audit Checklist: A Practical Checklist.
Paper 11: Incident intake and quarantine protocol
Purpose: preserve first, then decide. Owner: counsel directs; IT executes. Timing: starts the moment outside material is suspected.
Intake form
Reported by: [ ] Time: [ ] How noticed: [ ] Where (system, path, channel): [ ] Who has seen it: [ ] Was it opened: [ ] Has anyone deleted, moved, or forwarded it: [ ] Employee involved: [ ] Do not attach or describe the contents.
Quarantine protocol
| Time | Action | By |
|---|---|---|
| 0 to 1 hour | Stop use. No opening, forwarding, or deleting. Phone counsel. | Finder |
| 0 to 4 hours | Hold notice issued. Suspend auto-delete, chat expiry, device refresh, exit wipes. | Counsel, IT |
| 0 to 24 hours | Restrict access to the location by permissions. Freeze repository branches. Do not force-push, reimage, or purge backups. | IT |
| 24 to 72 hours | Engage forensic vendor through counsel. Image affected company devices. Record hashes. | Counsel, vendor |
| 24 to 72 hours | Interview the employee with warning (Paper 12). Reassign away from affected work. | Counsel, HR |
| Days 3 to 10 | Search company systems by metadata and hash. Identify use in any product or deliverable. | Vendor, counsel |
| Days 3 to 14 | Decide on disclosure, remediation, discipline. Record decisions and reasons. | Counsel, executive sponsor |
| After imaging | Segregate originals with vendor. Remove from production systems by a documented process. | Vendor, IT |
| By agreement or order | Return or destroy; certify. | Counsel |
Do and don't
| Don't | Do |
|---|---|
| Delete, even to be helpful | Remove access, keep a forensic copy |
| Rewrite Git history | Snapshot the repository; remove from active branches later, with notes |
| Read the document to see if it matters | Scope by file name, size, hash, and metadata |
| Ask the employee to clean a personal account | Employee's counsel preserves and proposes a plan |
| Share the vendor's report widely | Keep with counsel; share findings on a need-to-know basis |
Remediation record (if material was used)
Affected item: [ ] Exposed people: [ ] Decision: [replace / rebuild / remove feature] Rebuild team (no prior exposure): [ ] Input specification, reviewed by counsel: [ ] Start and finish dates: [ ] Treatment of past shipments: [ ] Sign-off: [ ]
Drafting notes. The duty to preserve arises when litigation is reasonably foreseeable under Micron Technology, Inc. v. Rambus Inc., 645 F.3d 1311 (Fed. Cir. 2011), and Fed. R. Civ. P. 37(e) allows severe sanctions for intentional loss of electronic data. WeRide Corp. v. Huang, No. 5:18-cv-07233 (N.D. Cal. Apr. 24, 2020) and E.I. du Pont de Nemours & Co. v. Kolon Industries, Inc., 803 F. Supp. 2d 469 (E.D. Va. 2011) are the warnings. The rebuild follows Computer Associates International, Inc. v. Altai, Inc., 982 F.2d 693 (2d Cir. 1992): keep the tainted person out, lock up the source, and use unexposed engineers working from a description of functions. From the moment you have reason to know, continued use is the danger under 18 U.S.C. § 1839(5)(B). For more on the general hold process, see Litigation Hold and Evidence Preservation Checklist: A Practical Checklist; for forensic forms in a filed case, see Trade Secret Litigation Toolkit: Identification Statements, Two-Tier Protective Orders, and Forensic Protocols.
Paper 12: Employee interview warning and hold notice
Purpose: protect privilege and evidence. Owner: counsel. Timing: at the start of any interview about the issue; hold notice as soon as a dispute is foreseeable.
Interview warning
"I am a lawyer for [Company]. I represent the company, not you personally. I am speaking with you to help the company get legal advice. This conversation is privileged, but the privilege belongs to the company, and the company can decide to waive it and share what you say, including with third parties or the government. Please keep this conversation confidential, though that does not restrict your rights to speak to a government agency or to your own lawyer. You may want your own lawyer, and we can talk about arranging that. Do you have questions? Are you willing to continue?"
Hold notice
Legal hold: do not delete. [Company] may be involved in a dispute concerning [general subject]. You must keep all documents and data that may relate to [Name]'s hiring and work, and any material from [Former Employer]. That includes email, chat, texts, personal devices or accounts if used for work, notes, code, and drafts. Please turn off any automatic deletion or disappearing messages. Do not move, rename, reorganize, or "clean up" anything. Do not discuss this with others, except counsel. Questions: [contact]. This notice overrides any policy that would permit deletion.
Drafting notes. The warning follows Upjohn Co. v. United States, 449 U.S. 383 (1981), and the point about adversity comes from Waymo. The notice should go to IT with separate technical directions. Include departing employees and any exit-wipe process. Chat matters, since WeRide treated the shift to ephemeral messaging as part of the sanctions picture. If a case is pending, consider a Fed. R. Evid. 502(d) order before any review or exchange.
Paper 13: Response to a cease-and-desist letter
Purpose: a measured reply a judge can read. Owner: counsel. Timing: within the demand's deadline, or after a holding note. Match the signer to the sender.
Holding note
Dear [Name]: We have your letter of [date] and take it seriously. [Company] has taken steps to preserve relevant material. We expect to respond in substance by [date]. Please direct further communications to me.
Substantive reply
Dear [Name]:
Thank you for your letter of [date] concerning [Employee].
[Company] does not want, and has instructed [Employee] not to bring or use, any confidential information of [Former Employer]. Before [Employee] started, [Company] [gave these written instructions / obtained this certification], copies of which [are enclosed / can be provided on a confidential basis].
After receiving your letter, we [issued a preservation notice; retained an independent forensic vendor; searched these company systems: ___, using these methods: ___]. To date, [describe results accurately, for example: "we have not located the listed files on those systems" / "we located the two files identified on the attached list, which have been isolated and preserved and which have not been accessed since we learned of them"]. That work is continuing, and we will update you if it changes these statements.
[Employee]'s role at [Company] is [general description]. For [period], [Employee] will not work on [limits]. [Optional: Employee is represented by separate counsel, [name].]
To help us assess your concerns, please identify the specific information at issue, including file names and hash values for any electronic files. We would also propose [the attached forensic protocol] so any material can be identified and returned without either company reviewing the other's confidential information.
[If applicable: We note that California law provides that [covenant] is void, see Cal. Bus. & Prof. Code §§ 16600, 16600.5.]
Please preserve your own records concerning [Employee]'s departure, including access logs and the forensic images referenced in your letter.
We are glad to talk. Please call me.
Drafting notes. Only say what you know, because a too-sweeping denial is the sentence that comes back. The request for specifics has teeth: in Bombardier Inc. v. Mitsubishi Aircraft Corp., 383 F. Supp. 3d 1169 (W.D. Wash. 2019), a generic demand that identified no specific secret did not establish knowledge, while a precise letter likely would. Asserting legal arguments is best kept short. If the sender relies on inevitable disclosure alone, note gently that 18 U.S.C. § 1836(b)(3)(A)(i) and 18 U.S.C. § 1836(b)(3)(D) exist, and in California cite FLIR Systems, Inc. v. Parrish, 174 Cal. App. 4th 1270 (2009). If a limitations defense may exist, do not argue it yet, but preserve the dates under 18 U.S.C. § 1836(d) and Insulet Corp. v. EOFlow, Co., No. 25-1807 (Fed. Cir. May 28, 2026). See Responding to a Cease and Desist Letter: A Practical Guide for broader guidance on replying to demands, and Negotiating a Protective Order and Filing Under Seal: A Practical Guide if the exchange moves into a protective order.
Paper 14: Forensic protocol and hash exchange term sheet
Purpose: find and resolve material without either side seeing the other's secrets. Owner: counsel for both sides. Timing: after initial letters, or as a stipulated order.
- Neutral. The parties jointly retain [vendor]; fees split [ ]; vendor signs a confidentiality undertaking.
- Scope. Devices and accounts: [company laptop; company cloud folder; employee's personal account, with consent of employee and employee's counsel]. Date range: [ ].
- Identifiers. Within [X] days, [Former Employer]'s counsel gives the vendor MD5 or SHA-256 hash values, file names, sizes, and search terms for the material at issue, and keeps the underlying documents.
- Search. The vendor runs matches and terms and reports hits to outside counsel for both sides only, as a list of hash, name, path, timestamps.
- Review. Outside counsel for [Former Employer] may inspect hits to confirm they belong to it. [Company] personnel may not view them. Privileged and personal material is screened by the employee's counsel first.
- Remediation. Confirmed files are preserved in the vendor's sealed archive, and removed from active systems using a documented method.
- Certification. The employee and a [Company] officer certify as to search and removal.
- Preservation. The vendor keeps the sealed archive until [end of limitations period / final resolution].
- No admission and no waiver. Participation is not an admission. A [Rule 502(d)] order will be sought if a case is pending.
- Reservation. All claims and defenses preserved. [Tolling, if agreed: dates.]
Drafting notes. A matching hash shows that a file is identical, but a mismatch does not show it is different in substance, since changing a byte changes the value. Add name, size, and term searches for that reason. Forensic orders should be proportionate, as John B. v. Goetz, 531 F.3d 448 (6th Cir. 2008) cautions, and requests rest on Fed. R. Civ. P. 34 and Fed. R. Civ. P. 26 once in suit. Consider adding a tolling term if the former employer is worried about limitations in light of Insulet, which may buy you time to resolve the dispute. Any settlement restricting future hiring needs attention under 15 U.S.C. § 1. Keep such a term limited, and see Deslandes v. McDonald's USA, LLC, 81 F.4th 699 (7th Cir. 2023).
Paper 15: Former employer's evaluation sheet and demand letter
Purpose: decide whether to assert, then assert precisely. Owner: former employer's counsel. Timing: after preserving and investigating, and before any letter. See also Employee Departure Trade Secret Protection Checklist: A Practical Checklist.
Evaluation sheet
| Question | Answer | Evidence |
|---|---|---|
| Specific secrets, in writing, separated from general knowledge | [ ] | [ ] |
| Reasonable measures | [ ] | [ ] |
| Acquisition by employee: what, when, how | [ ] | [ ] |
| What the forensics do not prove | [ ] | [ ] |
| New employer's knowledge or reason to know | [ ] | [ ] |
| Scope of employment, for a vicarious theory; forum's rule | [ ] | [ ] |
| Use or threatened use; similarity | [ ] | [ ] |
| First date of knowledge of access and similarity; three-year date | [ ] | [ ] |
| Covenant: enforceable where? | [ ] | [ ] |
| Is inevitable disclosure available and needed? | [ ] | [ ] |
| Harm: what is irreparable; what is money | [ ] | [ ] |
| Bad faith fee risk | [ ] | [ ] |
| Desired outcome | [ ] | [ ] |
Demand letter to new employer
Dear [General Counsel]:
We represent [Former Employer]. [Employee] worked for [Former Employer] as [title] until [date] and now works for [Company] as we understand it.
[Former Employer]'s investigation shows that on [dates], [Employee] [copied / uploaded] [number] files to [device with serial number / personal account], including the files listed in Schedule A. These files contain [general description, without revealing the secret] that [Former Employer] protects by [brief measures]. [Employee] signed the enclosed [agreement].
[Former Employer] does not object to [Company] competing or to [Employee]'s working in the industry using general skills. It does object to the use or possession of its confidential information. We are writing so that [Company] knows of these facts.
We ask that [Company], within [X] business days:
- Preserve all relevant documents and data, including devices and accounts used by [Employee], and suspend automatic deletion.
- Confirm whether any of the Schedule A files, or copies or derivatives, are on [Company] systems. We can provide hash values to a neutral vendor.
- Ensure that [Employee] does not use or disclose the information, and tell us what steps it has taken.
- Discuss a protocol for return of the material.
[If a covenant is enforceable: [Employee] is also bound by [covenant], enclosed. Please let us know how [Company] intends to comply.]
[Former Employer] reserves all rights, including under 18 U.S.C. § 1836 and [state act]. We would prefer to resolve this without litigation. Please contact me by [date].
Drafting notes. Specifics create knowledge, as the discussion of Bombardier suggests, and from then on use by the recipient is at its own risk under 18 U.S.C. § 1839(5)(B). Do not overreach. The sentence that disclaims objection to competition protects against an unfair competition counterclaim and against the fee provision in 18 U.S.C. § 1836(b)(3)(D), and it fits the limit in 18 U.S.C. § 1836(b)(3)(A)(i). Identification will matter in court under InteliClear, LLC v. ETC Global Holdings, Inc., 978 F.3d 653 (9th Cir. 2020) and Insulet Corp. v. EOFlow, Co., 104 F.4th 873 (Fed. Cir. 2024), although Schedule A should name files, not disclose content. Under Quintara Biosciences, Inc. v. Ruifeng Biztech, Inc., 149 F.4th 1081 (9th Cir. 2025), a DTSA plaintiff has more time than a California statutory plaintiff to particularize. Under Comet, remember that the plaintiff carries the burden on whether the information was readily ascertainable. Do not threaten to enforce a void covenant in California. See Cal. Bus. & Prof. Code § 16600.5. In the letter, name only the secrets you can support. See Writing a Demand Letter: The Basics and Drafting a Demand Letter: A Practical Checklist for the general structure. Trade Secret Identification and Discovery Checklist: A Practical Checklist covers identification. Trade Secret Remedies Toolkit: Damages Models, Head Start Analyses, and Injunction Briefing covers head start and injunction briefing.
This toolkit is general information and is not legal advice for a specific situation. Have counsel adapt these papers for the jurisdiction and the facts.
Related Documents
Related Articles
- Hiring From a Competitor: Inevitable Disclosure, Employee Raiding, and the New Employer's Trade Secret Exposure: the law behind each paper.
- Litigation Holds, Spoliation, and Rule 37(e): Preserving Electronic Evidence Before It Costs You the Case: the sanctions law behind Papers 11 and 12.
- Identifying Trade Secrets in Litigation: Reasonable Particularity, Sequencing Discovery, and Protecting the Secret While You Sue: what specificity means when you come to name secrets.
Related Guides
- Onboarding a Competitor's Employee Without Importing Its Secrets: A Practical Guide: the sequence in which these papers are used.
- Responding to a Cease and Desist Letter: A Practical Guide: general approach to demands received.
- Bringing or Defending a Civil Computer Fraud and Abuse Act Claim: A Practical Guide: when access claims are in play.
Related Checklists
- Competitor Hire Trade Secret Checklist: A Practical Checklist: the tasks these papers support.
- Employee Departure Trade Secret Protection Checklist: A Practical Checklist: the former employer's steps at departure.
- Trade Secret Identification and Discovery Checklist: A Practical Checklist: the identification steps for Paper 15.
Related Toolkits
- Trade Secret Litigation Toolkit: Identification Statements, Two-Tier Protective Orders, and Forensic Protocols: filed case forms, including two-tier protective orders.
- Trade Secret Protection Toolkit: Building and Defending a Confidentiality Program: your own confidentiality program.
- Trade Secret Remedies Toolkit: Damages Models, Head Start Analyses, and Injunction Briefing: injunction and damages briefing.
- Computer Access Dispute Toolkit: Access Revocation Letters, Loss Worksheets, and Pleading Outlines: access revocation letters and loss worksheets.
- Federal Jurisdiction Toolkit: Notices of Removal, Remand Motions, and Jurisdictional Allegations: removal and jurisdictional papers if the dispute goes to court.
