Set your work emails to POP3 and save them all locally, if they try some sketchy/ illegal stuff, you have on the record copies and ebough header info to verify it in court if need be.