Apparatus and methods securely limiting access to a document segment. The apparatus may include a use-zone definition engine. The use-zone may include a zone in which authorized individuals may engage in activity regarding a document segment that is designated for use in the zone. The zone may be defined based on zone parameters such as geographic coordinates or network domains. The apparatus may include a use-zone instancing engine. The instancing engine may be configured to attach to the segment an executable program corresponding to the use-zone. The executable program may be configured to verify that the segment is inside the zone and that the user is authorized to be in the zone. The executable program may be configured to destroy a copy of the segment residing on a device registered to the user.