What coverage
is used for.

Security or legal at a company whose value sits partly in what its people know: the customer list, the pricing logic, the model weights, the playbook.

The trigger today is the resignation email, which often arrives after the copying is done. DLP fires on one bulk export and stays quiet through three weeks of ordinary-looking downloads. By the time you look, the laptop has been wiped and reissued, the mailbox is purged and the logs have rolled.

Security at a company where engineers, researchers or commercial staff hold broad access by design, and where almost all of them use it exactly as intended.

There is no single event to catch. A repository cloned the week before a resignation, a customer export with no deal attached, compute funding personal work. None of it breaks a policy, so nothing fires. The pattern only exists if something kept the whole record while it formed.

Anyone covering a company where AI tools arrived faster than the policy, and where the honest answer to what has been put into them is that nobody knows.

The traffic is encrypted, the destination is sanctioned, and an employee doing legitimate work started it. Network tools see an allowed domain. DLP sees a paste without its context. Neither puts it beside the rest of the person’s record, or shows who does it again and again.

Whoever gets asked, on the day it surfaces, exactly what was in it and exactly who reached it. Usually by a regulator, an insurer or a customer’s security team, with a clock running.

The console that created the exposure can tell you it exists today. It cannot tell you when it opened, who reached it while it was open, or what was inside at the time. That is the scoping question, and it decides whether this becomes a notification.

Anyone who has to answer outside their own team: counsel, a works council, an insurer, a regulator or a court.

Preservation that starts when the notice arrives has started too late. Reconstructing from what survived is slow, expensive and arguable, and every gap becomes a point the other side gets to make.