The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →What is a trade secret? Under U.S. federal law, it is information that has actual or potential economic value because it is not generally known or readily discoverable through proper means, and that its owner takes reasonable steps to keep secret. Software and AI companies may be able to protect particular code, data, methods, or business information this way—but a “confidential” label alone does not make something a trade secret.
This is a general U.S. overview based on federal law and official U.S. Patent and Trademark Office (USPTO) materials current as of October 7, 2026. State trade-secret laws also apply and may differ in detail. This is not state-specific legal advice.
What qualifies as a trade secret?
Under 18 U.S.C. § 1839(3), the term covers information in many forms, including financial, business, scientific, technical, economic, and engineering information, as well as methods, processes, procedures, programs, and codes. The information must meet both parts of the federal definition:
- It has independent economic value, actual or potential, because it is not generally known and is not readily ascertainable by proper means by someone who could obtain economic value from its disclosure or use.
- The owner takes reasonable measures to keep it secret.
The USPTO’s trade-secret policy, published October 28, 2025 and last updated July 29, 2026, describes three required elements: value from not being generally known, value to others who cannot legitimately obtain it, and reasonable efforts to preserve secrecy. These requirements apply to the particular information and the owner’s conduct—not automatically to an entire product, team, or repository. Protection has no fixed duration while the requirements continue to be met.
#1 Best Overall
What can software and AI companies protect?
Potential candidates include non-public source code, system architecture, technical documentation, deployment methods, pricing or customer information, and proprietary datasets. USPTO materials also recognize proprietary software code, certain data, and improvements as information that may be maintained as a trade secret. Each candidate still needs its own factual assessment.
Possible AI-related candidates
Depending on the circumstances, a company might assess non-public model parameters, training or evaluation data, data-curation rules, prompts, evaluation methods, inference workflows, or deployment know-how. These are examples to examine under the general definition, not categories that automatically qualify. The relevant questions are whether the information is secret, whether secrecy gives it economic value, and whether the company takes reasonable measures to preserve it.
Identify the information precisely
“Our model” or “our codebase” may be too broad to show what information the company claims to protect. Identify the material at a useful level of detail—for example, a particular non-public process, dataset, or code component—and be able to explain its value, where it is kept, and who can access it. A confidentiality marking may support a broader program, but does not establish trade-secret status by itself.
How do you protect a trade secret?
Reasonable measures are assessed in context. The USPTO says relevant circumstances include the kind and value of the information, its importance to the company, and the company’s size and organizational complexity. Its examples include limiting access, confidentiality commitments, training, markings, permission controls, and departure procedures. No checklist guarantees protection; controls should match the sensitivity of the information and how the company actually handles it.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall- Inventory the information. Record each candidate secret at a practical level of detail, its business value, owner, storage locations, authorized roles, and review date.
- Limit and review access. Give access to people who need the information for their work. Use individual accounts and role-appropriate permissions, and revisit access when responsibilities change.
- Set expectations before disclosure. Use appropriate confidentiality terms with employees, contractors, vendors, and prospective partners. Align contract language with actual handling practices.
- Train people and label consistently. Teach staff how to recognize, store, share, and report confidential information. Use labels that correspond to company policy and real controls.
- Manage copies and access changes. Keep relevant access records and establish procedures for role changes and departures, including return or deletion of materials and reminders of continuing obligations where appropriate.
- Review third-party tools before sharing sensitive material. For cloud services, AI tools, or other vendors, have security staff and counsel review applicable permissions, retention, confidentiality, and any use of submitted material for training. The effect of a particular service’s terms on trade-secret status depends on the terms and facts; there is no universal rule established here.
What is the difference between a patent and a trade secret?
A patent makes a different bargain from secrecy: the applicant discloses the invention, while a granted patent can provide a time-limited right to exclude others. A trade secret requires no application or registration, but its protection depends on continued secrecy and reasonable safeguards. The USPTO says the approaches can complement one another—for instance, a company may patent an invention while keeping particular code, data, or improvements secret.
| Decision point | Trade secret | Patent |
|---|---|---|
| How protection begins | Maintain information that meets the legal requirements through reasonable secrecy measures; no USPTO application or registration is required. | File an application and obtain a patent grant. |
| Disclosure | Keep qualifying information secret. | Disclose the invention sufficiently to permit others to make and use it, as described by the USPTO. |
| Potential duration | No fixed end date while the legal requirements continue to be met. | Up to 20 years for a utility patent, according to the USPTO’s 2023 toolkit. |
| Independent discovery or reverse engineering | Federal law treats reverse engineering of a lawfully obtained product and independent derivation as proper means, not misappropriation. | A patent can provide exclusion rights against making or using the patented invention during its term, subject to applicable law. |
| Central decision | Can the company keep this specific information secret and show reasonable, durable controls? | Is disclosure in exchange for a time-limited exclusion right preferable for this invention? |
What counts as misappropriation—and what does not?
Federal law defines misappropriation to include acquiring someone else’s trade secret while knowing or having reason to know it was obtained by improper means, as well as certain unauthorized disclosure or use by someone with the required knowledge or duty. Improper means listed in the statute include theft, bribery, misrepresentation, breach or inducement of a secrecy duty, and espionage. USPTO materials also give examples such as unauthorized removal of company files, deceptive access, and digital hacking.
By contrast, federal law excludes reverse engineering, independent derivation, and other lawful means from “improper means.” Examining a product acquired lawfully or independently developing a competing solution is therefore different from taking files, accessing protected systems without authorization, or inducing someone to break a confidentiality duty.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should a company do if an employee takes confidential files?
If theft is suspected or discovered, the USPTO recommends contacting legal counsel promptly and gathering evidence. A company should use an appropriate legal and security process to preserve relevant access logs, communications, and records, rather than retaliating or making public accusations without advice. An inventory of the claimed secrets, the safeguards in place, and the people with access can help organize evidence.
Federal civil remedies and timing
The Defend Trade Secrets Act (DTSA) allows a trade-secret owner to bring a federal civil action when the secret relates to a product or service used in, or intended for use in, interstate or foreign commerce. Potential remedies include injunctions and damages for actual loss, unjust enrichment not already included in actual loss, or—in lieu of other measures—a reasonable royalty. For willful and malicious misappropriation, exemplary damages may be awarded up to twice the damages awarded.
The DTSA’s federal civil claim generally has a three-year limitation period, measured from when the misappropriation is discovered or when reasonable diligence should have led to its discovery. For this rule, continuing misappropriation is treated as a single claim. Federal and state remedies coexist; state laws based on the Uniform Trade Secrets Act are widely adopted. Federal criminal prosecution under the Economic Espionage Act is separate from a civil claim, and not every suspected theft should be described as a federal crime.
What employers should know about reporting immunity
Under 18 U.S.C. § 1833(b), an individual has immunity under federal and state trade-secret law for certain confidential disclosures to a federal, state, or local government official, or to an attorney, made solely to report or investigate a suspected legal violation. The statute also covers qualifying information filed under seal in court. It permits limited use of trade-secret information in an anti-retaliation case subject to sealing and court-order conditions.
An employer must provide notice of this immunity in agreements with employees that govern the use of trade secrets or other confidential information. The notice may cross-reference a policy document that describes the reporting policy, and “employee” includes contractors and consultants for this notice provision. If the employer omits the notice, it may be unable to obtain exemplary damages or attorney fees under the specified DTSA provisions in an action against an employee who did not receive notice. Employers should have counsel review relevant agreement templates and policies.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
