# Trade-secret protection is conditional on reasonable measures, evidenced before the dispute.

Every trade-secret framework across every jurisdiction asks the same question in almost identical words: can you prove what protective measures were in place, and that they predated any alleged misappropriation? immut creates a dated, tamper-evident record of every protection measure, an NDA, an access-control configuration, a confidential marking, anchored to the XRP Ledger at the moment the measure is applied.

## How often do trade-secret disputes turn on evidence?

- **84% win rate at verdict** (Stout Trade Secret Litigation Report, 2024)
- **1,500+ federal filings in 2025** (Lex Machina Trade Secret Report, 2026)
- **$180B estimated annual US trade secret disputes** (Commission on the Theft of American IP)

The 84% verdict win rate conceals a more troubling number: claims dismissed at summary judgment on the reasonable-measures element, and preliminary injunctions denied because the plaintiff could not prove its protection programme predated the employee's departure.

## What does the law require in each jurisdiction?

Four frameworks, one question: can you prove it? The standard is not absolute security. It is a systematic, documented programme of protection, provable on demand.

- **DTSA, 18 U.S.C. §1839(3)(A) (US).** A trade secret requires that the owner "has taken reasonable measures to keep such information secret". This is a condition of protection, not a post-hoc formality. If the owner cannot show, with evidence, what measures were taken and when, the claim fails regardless of whether the information was genuinely valuable and genuinely secret.
- **EU Trade Secrets Directive 2016/943, Art 2(1)(c).** The information must have been subject to "reasonable steps under the circumstances" to keep it secret. The Directive recognises technical means, including marking, as a form of reasonable steps. A hash anchored to a public ledger at the moment of marking is technical evidence of a reasonable step.
- **UK SI 2018/597, Regulation 2.** The UK Trade Secrets (Enforcement, etc.) Regulations 2018 adopt the EU formulation verbatim. UK courts use forensic IT investigators to examine whether digital records of protective measures are genuine.
- **TRIPS Agreement, Article 39(2)(c).** Binding on all 164 WTO member countries, with the same reasonable-steps wording. The question is always the same: can you prove the measures, and can you prove they predate the dispute?

## Why isn't an NDA in an HR system enough?

An NDA in an editable HR system is not contemporaneous evidence. Metadata is editable. Date fields are populated by users or administrators. Access-control screenshots taken after an employee resigns are not contemporaneous. Policy acknowledgment logs with user-editable date fields are not independent.

- **HR systems:** most platforms place responsibility for the accuracy and integrity of date fields contractually back on the customer.
- **eSignature platforms:** can attest to signature mechanics, but the document's creation date is outside their scope. The evidentiary chain remains incomplete.
- **Internal IT logs:** a system administrator with appropriate privileges can alter log entries. The SEC requires independent third-party attestation for exactly this reason.

## Which cases turned on evidence of reasonable measures?

In every major trade-secret case, the outcome turned on the quality of contemporaneous evidence of reasonable measures, not the value of the secret itself.

- **Waymo v. Uber** (US District Court, N.D. Cal., $245M settlement, 2018): Waymo had to prove access controls and NDAs predated Levandowski's downloads, not just that the files were valuable. The strength of the evidence on reasonable measures was foundational to reaching trial at all.
- **PepsiCo v. Redmond** (US 7th Circuit, injunction upheld, 1995): PepsiCo had to produce the full history of confidentiality agreements and access authorisations, their existence and their dates, before disclosure to Redmond.
- **Motorola v. Hytera** (US District Court, N.D. Ill., $764M verdict, 2020): Hytera conceded the theft. The case advanced to full damages precisely because Motorola's documentation of reasonable measures was solid. Strong contemporaneous records converted an admitted theft into a maximum verdict.
- **WeRide v. Huang** (US District Court, N.D. Cal., terminating sanctions and injunction, 2020): WeRide had to prove PIIA agreements and access controls predated the employees' access. Contemporaneous records supported a preliminary injunction.

## How does immut create reasonable-steps evidence?

At the moment an NDA is signed, an access-control configuration is applied, or a document is marked confidential, a hash is generated and anchored on-chain. That is your contemporaneous evidence.

1. **Document stays on your infrastructure.** The SHA-256 hash is computed locally. The NDA, access-control record, or confidential marking is not transmitted, stored, or visible to immut.
2. **Hash anchored to the XRP Ledger.** Written to the public XRP Ledger at the moment the protective measure is applied. Once written, no party can alter or delete it.
3. **Certificate issued immediately.** A court-ready certificate contains the hash, XRPL transaction ID, ledger sequence number, and UTC timestamp.
4. **Proof outlives immut.** The record lives on a public blockchain and remains verifiable even if immut ceased to exist.

Integrates with DocuSign, PandaDoc, document management systems, HR platforms, and any system with a webhook or API.

## Do courts accept blockchain evidence in trade-secret disputes?

- **United States, US v. Sterlingov (2024):** the US District Court for DC admitted blockchain transaction records as primary evidence, satisfying federal evidentiary standards for authenticity and reliability without expert testimony.
- **European Union, EU Regulation 2025/2531 (eIDAS-2):** qualified electronic time-stamps have the legal effect of evidence of the date and time indicated and the integrity of the data, across all 27 Member States.
- **France, AZ Factory v. Valeria Moda (2025, Tribunal Judiciaire de Marseille):** a blockchain timestamp was accepted as proof of prior creation, establishing date and integrity without production of the file itself.
- **China, Supreme People's Court (2018):** blockchain-stored evidence is presumptively authentic. Over 1,400 IP cases have since been decided on blockchain-anchored evidence.

## The question to ask yourself

If an employee left tomorrow with your most valuable trade secret, could you prove the protective measures predated their access?

## Where can I learn more?

- Live page: https://www.immut.io/evidence/trade-secrets
- Developer docs: https://www.immut.io/docs
- For AI agents: https://www.immut.io/ai-agents