Every business conversation that involves sensitive information should start with an NDA. Whether you are pitching investors, hiring a contractor, exploring a partnership, or sharing proprietary data with a vendor — a non-disclosure agreement is the baseline protection for your confidential information.
The problem is that most people either skip the NDA entirely (too much friction) or use a generic template they found online without understanding what it actually says. Both approaches create risk.
This guide gives you a working NDA template and walks you through every clause so you know exactly what you are signing — and what you are asking someone else to sign.
What Is an NDA and When Do You Need One?
A non-disclosure agreement (NDA) is a legally binding contract that creates a confidential relationship between parties. The party sharing information (the disclosing party) is protected because the receiving party agrees not to share, use, or profit from that information without permission.
You need an NDA before:
- Investor meetings — sharing financial projections, growth metrics, or product roadmaps
- Hiring contractors or freelancers — giving access to proprietary systems, client data, or trade secrets
- Partnership discussions — exploring joint ventures where both sides reveal competitive information
- Vendor evaluations — sharing technical specifications or customer data during procurement
- Employee onboarding — protecting company IP from day one
- Mergers and acquisitions — due diligence requires sharing everything
The cost of not having an NDA is not hypothetical. In 2024, a federal court in California awarded $4.6 million in damages in a trade secret case where the disclosing party had failed to require an NDA before sharing manufacturing processes with a potential partner.
Anatomy of an NDA: The 7 Essential Clauses
Every enforceable NDA includes these clauses. Skip any one of them and you weaken your legal position.
1. Identification of Parties
Name every party to the agreement using their full legal names and addresses. For businesses, use the registered entity name — not a trade name or DBA.
Why it matters: If a dispute goes to court, the court needs to know exactly who is bound. Vague identification ("the company") creates enforcement headaches.
2. Definition of Confidential Information
This is the most important clause in the entire agreement. Define specifically what information is protected.
Good definitions include categories:
- Technical data (source code, algorithms, formulas, designs)
- Business information (financial records, customer lists, pricing strategies)
- Marketing data (launch plans, competitive analysis, market research)
- Personnel information (employee compensation, organizational structure)
What to avoid: Do not define confidential information as "all information shared between the parties." Courts routinely reject this as overbroad. Be specific enough to be enforceable but broad enough to cover what you actually need to protect.
3. Exclusions from Confidentiality
Standard exclusions include information that:
- Was already publicly available before disclosure
- Becomes publicly available through no fault of the receiving party
- Was already known to the receiving party before the NDA
- Is independently developed by the receiving party without using the confidential information
- Is disclosed pursuant to a court order or legal requirement (with prior notice to the disclosing party)
These exclusions are not optional — they make the NDA reasonable and enforceable. An NDA without standard exclusions is more likely to be challenged.
4. Obligations of the Receiving Party
Spell out exactly what the receiving party must do and must not do:
- Must not disclose confidential information to any third party without written consent
- Must use confidential information only for the stated purpose
- Must protect confidential information using at least the same degree of care used for their own confidential information (and no less than reasonable care)
- Must limit internal access to employees and agents who need to know
- Must notify the disclosing party immediately upon discovering any unauthorized disclosure
5. Term and Duration
Specify two time periods:
- Agreement term — how long the NDA relationship lasts (e.g., two years from the effective date)
- Survival period — how long confidentiality obligations continue after the agreement ends (e.g., three years after termination)
For trade secrets, consider including language that obligations survive "for as long as the information qualifies as a trade secret under applicable law."
6. Return or Destruction of Materials
When the NDA ends or a party requests it, the receiving party must return or destroy all copies of confidential information — including digital copies, notes, summaries, and derivative works.
Include a certification requirement: the receiving party must confirm in writing that all materials have been returned or destroyed.
7. Governing Law and Dispute Resolution
Specify which state or country's laws govern the agreement and how disputes will be resolved (litigation, arbitration, or mediation first).
Practical tip: Choose the jurisdiction where the disclosing party is located. This gives you home-court advantage if enforcement becomes necessary.
Mutual vs. Unilateral: Which NDA Do You Need?
| Scenario | NDA Type | Why | |----------|----------|-----| | Hiring a contractor | Unilateral | You share information; they do not | | Employee onboarding | Unilateral | Company shares IP; employee agrees to protect it | | Partnership exploration | Mutual | Both sides share sensitive information | | Joint venture | Mutual | Reciprocal disclosure is the norm | | Investor pitch | Unilateral | You share; they evaluate (though many investors refuse to sign NDAs) | | Vendor evaluation | Unilateral or Mutual | Depends on whether the vendor also shares proprietary methods |
Mutual NDAs are not just unilateral NDAs with "both parties" language. They require careful drafting to ensure each party's obligations and protections are clearly separated and balanced.
State-Specific Considerations
NDA enforceability varies by jurisdiction. Key differences to watch:
- California — NDAs cannot restrict an employee's ability to work for a competitor (non-compete provisions are void under Cal. Bus. & Prof. Code § 16600). Confidentiality obligations themselves remain enforceable.
- New York — Courts apply a reasonableness standard to NDA scope and duration. Overly broad NDAs may be reformed rather than voided entirely.
- Texas — NDAs tied to employment must be supported by independent consideration (not just continued employment in some circuits).
- Delaware — Business-friendly courts generally enforce NDAs as written if they meet basic contract requirements.
Always select governing law that aligns with your business location and the jurisdiction most favorable to enforcement.
Common NDA Mistakes That Kill Enforceability
1. Defining "everything" as confidential. Courts will not enforce an NDA that claims all information exchanged is confidential. You must define categories.
2. No consideration. An NDA must include consideration — something of value exchanged. In employment contexts, the job offer itself is consideration. In business contexts, the mutual exchange of confidential information or the opportunity to evaluate a business relationship counts. If there is no consideration, the NDA is just a promise with no legal weight.
3. Unreasonable duration. A 20-year NDA for non-trade-secret business information will face judicial skepticism. Match the duration to the lifespan of the information's value.
4. Missing exclusions. Without standard exclusions, the receiving party has no defense if information becomes public through independent means. This makes the NDA appear one-sided and invites challenges.
5. No signature. This sounds obvious, but it happens — parties exchange NDA drafts by email, assume mutual agreement, and never execute the final version. An unsigned NDA is unenforceable.
How to Create Your NDA
You have three paths:
- Hire a lawyer — $200–$1,500 depending on complexity. Best for high-stakes situations with unusual terms or international parties.
- Use a generic online template — Free, but you assume the risk of gaps, outdated clauses, and jurisdiction mismatches.
- Use a smart contract generator — Create your NDA on Contract.diy and get a jurisdiction-aware NDA with all seven essential clauses, customized to your specific situation. No legal jargon to decode, no blanks to fill in wrong.
The right choice depends on the stakes. For a standard business NDA protecting trade secrets during a vendor evaluation, a well-structured template is sufficient. For a multi-million-dollar acquisition, involve a lawyer.
NDA Checklist Before You Sign
Before executing any NDA, verify:
- [ ] Both parties are identified by full legal name
- [ ] Confidential information is defined with specific categories
- [ ] Standard exclusions are included
- [ ] The purpose of disclosure is clearly stated
- [ ] The term and survival period are specified
- [ ] Return/destruction obligations are included
- [ ] Governing law and dispute resolution are specified
- [ ] Both parties have signed and dated the agreement
- [ ] Each party retains a fully executed copy
Frequently Asked Questions
For a deeper dive into NDA terminology, visit our contract glossary — covering terms like confidential information, trade secret, and non-compete clause.
Create Your NDA Now
Stop using unsigned email promises as confidentiality agreements. A properly drafted NDA takes minutes to create and can save you from six-figure disputes.
Create your NDA on Contract.diy →
Need a different contract type? Explore our freelance contracts, service agreements, or lease agreements.