A non-disclosure agreement (NDA) is a contract that keeps shared information secret. Before you show a contractor your source code, pitch a partner your business plan, or open your books to a buyer, an NDA makes the recipient legally responsible for keeping that information confidential and using it only for the agreed purpose.
This template generates both common forms: a unilateral NDA when only one side discloses, and a mutual NDA when both sides will exchange sensitive information.
Unilateral or mutual: which NDA do you need?
Choose based on the direction of the information flow, not on who is bigger or who drafted the document. If you are hiring a freelancer and only your information is at stake, a unilateral NDA is enough and simpler to negotiate. If two companies are exploring a partnership, merger, or joint project where both will open up, a mutual NDA treats both sides identically and is usually accepted faster.
| Situation | Recommended NDA |
|---|---|
| Hiring a contractor or freelancer | Unilateral |
| Showing a product to a potential customer | Unilateral |
| Partnership or joint venture talks | Mutual |
| Merger or acquisition discussions | Mutual |
| Both teams sharing technical data | Mutual |
When in doubt, propose the mutual version. It signals fairness, removes the negotiation over whose obligations are heavier, and costs a disclosing-only party nothing, since a side that receives no information simply has nothing to keep secret. The one situation to avoid is signing the other side's unilateral NDA when you will also be disclosing: your information would then travel with no protection at all.
When to put an NDA in place
The trigger is simple: an NDA belongs in the file whenever someone outside your circle of trust is about to see information that would hurt you in a competitor's hands. The most common moments are onboarding a freelancer or agency, giving a vendor access to systems or data, pitching a product to a prospective customer who will see roadmaps or pricing, opening books to a potential buyer or lender, exploring a partnership or license, and hiring employees who will handle sensitive material. Sign before the first disclosure, not during or after: an NDA generally protects only what is shared once it is in force.
There are also moments when an NDA is the wrong reflex. Patent-pending inventions are protected by the filing, not the NDA. Publicly available information cannot be made confidential by contract. And requesting an NDA from parties who never sign them, such as most investors and journalists, usually just slows the conversation without protecting anything.
What an NDA can and cannot protect
An NDA protects non-public business information: customer lists, pricing, financials, product plans, code, and know-how. It cannot lock up information that is already public, that the recipient already knew, or that they develop independently. Those standard exclusions are in every enforceable NDA, including this one; removing them makes the agreement more vulnerable in court, not stronger.
NDAs cannot silence everything
Federal and state laws limit NDAs: they cannot block whistleblower reports to government agencies, and many states restrict confidentiality clauses covering unlawful workplace conduct. Use an NDA for business secrets, not as a general gag clause.
How long should confidentiality last?
Two to five years is the standard range for ordinary business information; one year can be fine for fast-moving fields like software, while sensitive financial or technical data often justifies five. Trade secrets are the exception: they stay protected for as long as they remain secret, and this template says so explicitly. Avoid writing 'perpetual' obligations for ordinary information, as some courts read unlimited terms as unreasonable.
An NDA protects information, not relationships: to restrict a departing employee from competing or poaching clients, you need a separate non-compete agreement or non-solicitation agreement. When hiring outside help, pair the NDA with an independent contractor agreement.
The clauses that decide whether your NDA works
Most NDA disputes are not about whether an NDA existed but about what it actually covered and what the recipient was allowed to do. Four clauses do nearly all of the work, and each is worth understanding before you sign or send one.
The definition of confidential information
The definition sets the fence line. Too narrow, and the recipient can argue the leaked material fell outside it; too broad ('all information disclosed by any means'), and a court may refuse to enforce it as unreasonable. The practical middle ground is a definition that names the categories that matter to you (financials, customer data, code, product plans, pricing) and captures information a reasonable person would understand to be confidential from its nature or the circumstances of disclosure. If you routinely mark documents confidential, keep doing it: markings are not usually required, but they make proof effortless.
Purpose and permitted use
Confidentiality alone is not enough. Without a purpose clause, a recipient could keep your information secret while quietly using it to build a competing product. The purpose clause limits use to the stated project ('evaluating a potential business relationship,' 'performing services under the parties' contract') and turns any other use into a breach even if nothing was disclosed to a third party. It also controls who inside the recipient's organization may see the information, typically employees and advisers who need to know and who are themselves bound by confidentiality duties.
The standard exclusions
Every enforceable NDA excludes information that was already public, already known to the recipient, independently developed without using your disclosure, or lawfully received from a third party. A fifth carve-out covers legally compelled disclosure: if a court or regulator orders production, the recipient may comply, usually after giving you notice so you can seek protection. Resist the urge to strike these exclusions. Courts expect them, and an NDA that tries to lock up public information reads as overreaching, which weakens the whole document.
Remedies: injunctions and damages
Money rarely fixes a leak, so the key remedy is the injunction: a court order stopping further use or disclosure. NDAs recite that a breach causes irreparable harm precisely to support fast injunctive relief. Damages remain available for losses you can quantify, and some NDAs add attorney fee shifting so the winner recovers legal costs. Liquidated damages (a fixed sum per breach) appear in some agreements but must be a reasonable estimate of harm, not a penalty, or courts will strike them.
Common NDA mistakes and how to avoid them
- Sharing the secret first and sending the NDA second: information disclosed before the effective date is generally unprotected unless the NDA expressly reaches back
- Using a unilateral NDA in a two-way exchange, leaving your own disclosures uncovered
- Defining confidential information as everything ever communicated, which invites a court to find the scope unreasonable
- Forgetting the purpose clause, so the recipient can use the information as long as they keep it secret
- Signing with an individual when the real recipient is a company, or vice versa, so the entity actually holding the information is not bound
- No return-or-destroy clause, leaving your files on the recipient's servers indefinitely after the deal dies
- Treating the NDA as a substitute for a non-compete or a contractor agreement, which protect different things
- Never enforcing it: ignoring a known breach undermines both this agreement and your trade secret posture generally
NDAs and trade secret law work together
Under federal and state trade secret law, information qualifies for protection only if you take reasonable measures to keep it secret. Signed NDAs are the single most cited reasonable measure. Even when you never sue on the NDA itself, having one signed before disclosure preserves your ability to bring a trade secret claim later.
Signing, storing, and living with an NDA
Execution is simple: signatures from both parties, no notary, no witnesses. Electronic signatures are valid nationwide under the E-SIGN Act. Make sure the signer has authority to bind the party, which for companies means an officer or someone with delegated signing authority, with their printed name and title under the signature. Date the agreement and confirm the effective date covers your first disclosure.
After signing, run a light process. Keep every executed NDA in one folder with the counterparty name and expiry noted, mark sensitive documents before sending them, and share only what the project needs: the narrower the disclosure, the smaller the exposure. When the relationship ends, invoke the return-or-destroy clause in writing and keep the confirmation. If you learn of a breach, act quickly: send a written demand to stop, preserve the evidence, and get advice on an injunction, because delay is the enemy of emergency relief. This service provides templates and general information, not legal advice on a specific dispute.
Frequently asked questions
Is an NDA legally enforceable?
Yes. A properly drafted NDA is a binding contract in every state. Courts enforce them regularly, provided the scope is reasonable, the information is genuinely confidential, and standard exclusions are present.
What happens if someone breaks an NDA?
The disclosing party can sue for damages and, because leaks are hard to undo, seek an injunction ordering the recipient to stop using or spreading the information. This template includes the injunctive relief clause that makes that remedy available.
Does an NDA need to be notarized or witnessed?
No. The signatures of the parties are enough in every state. Keep a signed copy on each side.
Can I use one NDA with several people?
Sign a separate copy with each person or company. Each recipient must be individually bound; one document signed by one recipient does not cover the others.
Should the NDA be signed before or after I share information?
Before, always. An NDA generally does not protect information disclosed before it takes effect unless it explicitly says so, and negotiating confidentiality after the secret is out has little leverage.
Can I ask an employee to sign an NDA?
Yes, and most companies do, either as a clause in the employment contract or as a standalone agreement signed at hiring. For an existing employee, some states require new consideration (a raise, a bonus, or continued employment depending on the state) for the NDA to bind. Employee NDAs cannot block reports to government agencies or, in many states, cover unlawful workplace conduct.
How much does it cost to have an NDA?
A standard template like this one costs little and covers the vast majority of business situations. Attorney-drafted NDAs make sense when the stakes are unusual: crown-jewel trade secrets, cross-border disclosures, or an M&A process where the NDA also handles non-solicitation and standstill terms.
What is the difference between an NDA and a confidentiality agreement?
Nothing. NDA, confidentiality agreement, and CDA (confidential disclosure agreement) are different names for the same contract. The content, not the title, determines what it does: check the definition of confidential information, the permitted use, the exclusions, and the term.
Will investors sign an NDA before hearing my pitch?
Venture capital firms and most angel investors almost never sign NDAs at the pitch stage: they see too many similar ideas to accept the litigation risk. Protect yourself instead by pitching the problem and traction without disclosing the secret sauce, and save NDAs for later diligence stages, contractors, and commercial partners, who sign them routinely.
Does an NDA survive if the recipient's company is acquired?
Usually yes: the acquirer generally inherits the target's contractual obligations, and well-drafted NDAs bind successors and assigns expressly. If your counterparty is acquired by a competitor, review the NDA's assignment clause and consider sending a written reminder of the obligations before sharing anything further.
Can an NDA be signed after information was already shared?
It can, but only if it says so. Add a clause making the agreement retroactive to the date disclosures began, or define confidential information to include material shared before the effective date. Without that language, earlier disclosures typically fall outside the agreement.