There are real enforceable legal salves you can take for these purposes included targeted NDAs (as opposed to the less enforceable "Don't talk about our stuff") that makes it really easy to prove wrong doings - additionally there are forms of business insurance out there to cover the short term sudden costs of corporate espionage/sabotage.

Basically, trusting in the person to be trustworthy because equifax is giving you a big thumbs up with a stupid grin on their face is a stupid idea. Just set up protections for your company, properly utilize the practice of minimum access and call it a day.