I'm a founder and I'd like to throatpunch your employer. Everything that has been already said is true. What he's doing is illegal.
And hey, if the opensource CMS in question is Drupal, shoot me an email, I'm always on the prowl for good Drupallers.