The short version
- A one-way (unilateral) NDA binds only the receiving party. A mutual NDA binds both, and is the right default whenever both sides will share anything.
- Ask for mutual by default: it costs nothing, it removes the awkward conversation later, and it makes the clauses fairer because the drafter has to live with them.
- Four carve-outs are non-negotiable: already public, already known, lawfully received elsewhere, independently developed.
- An NDA protects secrecy. It does not protect ideas, prevent competition, or transfer ownership — those need different clauses or a different agreement entirely.
The two shapes
| One-way (unilateral) | Mutual (bilateral) | |
|---|---|---|
| Who is bound | The receiving party only | Both parties |
| Typical use | Pitching to an investor, hiring a contractor, disclosing to a supplier | Partnership talks, M&A, joint development, agency onboarding |
| Negotiation dynamic | Drafter has no downside, so clauses skew hard | Every clause applies to the drafter too, which moderates them |
| Length | Shorter | Marginally longer — the obligations are just reciprocal |
That is the whole structural difference. It matters because of the second row of that table: a party drafting a one-way NDA bears none of the burden it creates, so unilateral agreements are systematically more aggressive than mutual ones. Making an NDA mutual is the cheapest available way to make it reasonable.
Why mutual NDAs come back more reasonable
One-way
- Only the receiving party is bound
- The drafter carries none of the burden they are writing
- Definitions, duration and remedies drift wide, because nothing bites back
Mutual
- Every obligation applies to the drafter too
- Overreach is self-correcting — they have to live under it as well
- Marginally longer, and one round to ask for
Which is why "can we make it mutual?" fixes several clauses at once without arguing about any of them individually.
The six clauses that decide whether it is any good
1. The definition of Confidential Information
Too narrow and real secrets fall outside it; too broad and the agreement becomes unworkable. "All information disclosed by the Disclosing Party" technically covers the weather during the meeting, and courts are unsympathetic to definitions that cover everything.
Two workable approaches: require material to be marked confidential (clear, but people forget to mark things), or define it by category — technical information, pricing, customer lists, business plans — with a catch-all for anything a reasonable person would understand to be confidential given the circumstances. The second is more common and generally better.
2. The carve-outs
These four exceptions appear in essentially every properly drafted NDA. An agreement missing them is asking you to promise something you cannot reliably keep.
- Information that is or becomes public through no fault of yours.
- Information you already had before disclosure, and can show you had.
- Information lawfully received from a third party who was free to disclose it.
- Information you developed independently without reference to the disclosure.
A fifth is worth adding: disclosure required by law or a court order, with an obligation to notify the other side first where you are permitted to.
3. Permitted use
The clause defining what you may do with the information, usually tied to a stated "Purpose". Check that the Purpose is drawn widely enough to cover what you will actually need to do — evaluating a deal usually means discussing it with your accountant, your lawyer and your co-founders. A permitted-disclosure clause covering advisers and employees who need to know, on equivalent terms, is standard and should be there.
4. Duration
Two separate periods, frequently confused: how long the disclosure window lasts (the term of the agreement), and how long the obligation of confidence survives after it. Two to five years post-disclosure is the common commercial range. Perpetual confidentiality is appropriate for genuine trade secrets — a formula, source code, a customer database — and unreasonable as a blanket rule, because nobody can administer an indefinite obligation over routine business information.
5. Return or destruction
What happens when talks end. A workable clause requires return or destruction on request, with a carve-out for copies held in routine backups and for one archival copy retained for legal-compliance purposes. Without those exceptions the clause is impossible to comply with honestly, since no one can purge a backup tape on demand.
6. Remedies and jurisdiction
Confidentiality breaches are hard to quantify in damages, so most NDAs acknowledge that injunctive relief is available. That is normal. What to watch is a clause adding liquidated damages at a fixed sum per breach, or one placing disputes somewhere expensive and distant — either can turn a routine document into a real liability.
Read the full NDA template
The complete text, free — definition, carve-outs, permitted disclosure, term and return obligations, all published on the page. Copy it or download PDF or Word.
What an NDA does not do
A large share of NDA disappointment comes from expecting it to do a different job.
Name the worry first, then pick the document
What is it you are actually afraid will happen?
They will repeat what I told them
This is the job an NDA does, and it does it well. Definition, carve-outs, permitted disclosure, duration.
They will build the same thing
An NDA does not reach it. Independent development is a complete answer if true, and competition is a non-compete — a separate negotiation with its own enforceability problems.
They will own what they build for me
Confidentiality keeps it secret. Only an IP assignment makes it yours, and the two are different documents that get signed at different moments.
Two further limits are worth stating plainly. An NDA does not stop lawful reporting — many jurisdictions void clauses attempting to prevent reports to regulators, and US law protects trade-secret disclosures made in confidence to a government official or attorney to report a suspected violation. And it does not make enforcement cheap: proving breach means showing what was disclosed, that it was confidential, and that the other side used it. Compare non-compete enforceability for the competition question, and an IP assignment for the ownership one.
When you do not need one
Insisting on an NDA in the wrong situation costs you credibility and time. Institutional investors almost universally refuse to sign one at first meeting, and that refusal is not a red flag — it reflects the volume of similar pitches they see and the conflict risk that signing would create. Show them the market, the team and the traction; keep the mechanism until diligence, at which point NDAs are normal.
Similarly, an NDA before a first conversation with a potential customer usually signals inexperience. Save it for the point where you actually have to hand something over.
A five-minute review checklist
Before you sign any NDA
- Is it mutual? If not, should it be?
- Is the definition of Confidential Information bounded, or does it cover everything?
- Are all four standard carve-outs present?
- Does the Purpose cover what you actually intend to do with the information?
- Can you share it with your advisers and the colleagues who need to know?
- How long does the obligation last after disclosure ends — and is perpetual justified here?
- Does return-and-destroy have a backup and legal-archive exception?
- Any liquidated damages, unusual indemnity, or a forum you could not afford to litigate in?
- Is there anything in it beyond confidentiality — a non-compete, non-solicit or IP clause smuggled in at the back?
That last item catches more than people expect. NDAs are trusted precisely because they are assumed to be short and standard, which makes them a convenient place to put a restriction that would be argued about in the main contract.
General information, not legal advice. This guide explains how these documents and rules generally work. Law varies by jurisdiction and changes, and none of it is applied to your circumstances here. For anything consequential, consult a licensed attorney where you are.
Frequently asked
Is an NDA legally enforceable?
Yes, in the great majority of jurisdictions, provided it is reasonable in scope and duration and supported by consideration. What varies is how a court will treat an unreasonably broad one — some will narrow it, others will decline to enforce it at all. Restrictions on disclosing unlawful conduct or reporting to regulators are void in many places regardless of the wording.
How long should an NDA last?
Two to five years after disclosure covers most commercial situations. Use perpetual only for genuine trade secrets, and consider stating a shorter general period with an indefinite period for a defined category of material — that structure is easier to defend and easier to administer.
Can I use one NDA for everything?
A good mutual NDA covers most day-to-day situations. Two cases need something different: engaging someone to create work for you, which requires an IP assignment as well, and any arrangement where the real concern is competition rather than disclosure, which is a different agreement altogether.
What happens if someone breaches an NDA?
The usual first step is a cease-and-desist letter, which resolves a large share of cases because most breaches are careless rather than deliberate. Beyond that, the remedies are an injunction to stop further disclosure and damages for loss caused — the second being hard to quantify, which is why injunctive relief is expressly preserved in most agreements.
Does an employee need a separate NDA?
Usually not — confidentiality obligations belong in the employment contract, together with the IP clause, and employees also owe implied duties of confidence in most jurisdictions. A standalone NDA makes sense when someone is being brought into a specific sensitive project beyond their normal role.