# Can we see if a leaving employee uploads company data to the cloud?

You can see whether a company device sends unusual amounts of data to cloud services, which is often the most useful early signal, but not who did it or which files. In the weeks before someone leaves, a sharp rise in uploads from their laptop to a personal storage service, a file-transfer site or an AI tool is worth a conversation, especially at odd hours. A sound offboarding process matters more than detection: agree in writing what stays with the company, remove access to SaaS and cloud accounts on the last day, revoke tokens and app passwords, check sharing links and forwarding rules in mail and storage, and collect devices. Data-loss prevention and the audit logs of your storage and mail services can show file names; a network sensor cannot. Keep any review proportionate, focused on devices and company data, and agreed with HR and, where required, the works council, because monitoring staff is regulated in every EU country. On every plan, NetSenX alerts on unusual outbound data volume from a device and shows the destination.

FAQ: [Cloud and SaaS security](https://netsenx.com/en/faq/cloud) · https://netsenx.com/en/faq/can-we-see-if-a-leaving-employee-uploads-company-data-to-the-cloud

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/eu-data-residency

## Related questions

- [Can ransomware reach the files we keep in the cloud?](https://netsenx.com/en/faq/can-ransomware-reach-our-cloud-files)
- [Is our SaaS data backed up by the provider?](https://netsenx.com/en/faq/is-our-saas-data-backed-up-by-the-provider)
- [How do we secure our Microsoft 365 or Google Workspace accounts?](https://netsenx.com/en/faq/how-to-secure-microsoft-365-and-google-workspace-accounts)
- [What is OAuth consent phishing?](https://netsenx.com/en/faq/what-is-oauth-consent-phishing)
- [Which cloud and SaaS logs should we switch on and keep?](https://netsenx.com/en/faq/what-logs-should-we-keep-for-cloud-and-saas)