What Is a Non-Disclosure Agreement (NDA)?

Search Fintrev

Search our guides, reviews and glossary.

A non-disclosure agreement (NDA) is a legally binding contract in which one party agrees not to reveal, and usually not to misuse, confidential information it receives from another party. It is also called a confidentiality agreement or a non-disclosure contract. The party sharing the information is the disclosing party; the party receiving it is the receiving party. The agreement sets out what counts as confidential, what the recipient may do with it, how long the obligation lasts and what happens if it is broken.

NDAs appear wherever sensitive information has to change hands before trust or a final deal exists: companies negotiating a partnership or acquisition, startups pitching to investors, employers hiring staff who will see internal data, and vendors bidding for work. In a job context, “signing an NDA” means you have promised not to share the employer’s or client’s protected information outside the limits the contract allows, often during and after your employment.

How a Non-Disclosure Agreement Works

An NDA creates a confidential relationship by contract. Before the agreement, a company that shows a potential partner its pricing model or source code has limited control over what happens next. After the agreement, the recipient has a legal duty, enforceable in court, to keep that information private and to use it only for the stated purpose.

The basic sequence looks like this:

1. The parties identify a reason to share information. This is often called the “purpose” in the contract, such as evaluating a possible joint venture or performing a consulting engagement.
2. They sign the NDA before the disclosure. Information shared before signing may fall outside the agreement unless the contract expressly covers earlier disclosures.
3. Information is disclosed under the agreement’s terms. Many NDAs require documents to be marked “confidential” or require oral disclosures to be confirmed in writing within a set period.
4. The recipient uses the information only for the purpose. It may share it only with people who need to know, such as its own employees or advisers, who are bound by similar obligations.
5. The obligation runs for the agreed term. When the relationship ends, the recipient is typically required to return or destroy the materials.

If the recipient leaks or misuses the information, the disclosing party can sue for breach of contract instead of relying only on goodwill or general trade secret law.

Types of NDAs

NDAs come in a few standard forms, distinguished mainly by who is bound.

Mutual NDA

A mutual (bilateral) NDA binds both parties and fits situations where information flows in both directions, such as two businesses exploring a partnership that each disclose details about their operations, finances or technology. Each company is both a discloser and a recipient.

Unilateral (non-mutual) NDA

A unilateral NDA binds only the receiving party. It is the usual form for new employees with access to sensitive company information, and for contractors, consultants and prospective buyers reviewing a company’s books. Some companies require every employee to sign one; others limit the requirement to specific departments or roles.

Multilateral NDA

A multilateral NDA involves three or more parties, at least one of which discloses information to the others. It replaces a set of separate two-party agreements when several companies are working on the same project.

Main Parts of an NDA

However customized, most NDAs contain the same core provisions.

Parties to the agreement

The NDA must identify every party precisely. The recipient might be a named individual, a specific company and all its employees, or any representative of that company. A disclosing company with a complex legal structure has to decide which legal entity owns the information; many list all entities under common ownership so that information held by a subsidiary or affiliate is covered.

Definition of confidential information

This is the hardest clause to draft. The company has to identify what must not be shared, yet describing confidential information in too much detail would itself disclose it. Companies often solve this by defining categories rather than specifics, such as “any information disclosed by or relating to the research and development department.” A definition that is too broad or vague can make the clause harder to enforce in some states.

Exclusions from confidentiality

The exclusions clause lists information the recipient is free to use. Standard exclusions include information that is or becomes public through no fault of the recipient, information the recipient already knew before the disclosure, information developed independently, and information lawfully received from a third party. In some agreements it is simpler to make everything confidential and then list specific exceptions the disclosing company has approved, which helps catch items that might otherwise slip through.

Permitted use

An NDA may let the recipient use information while limiting how. A company might show a supplier its operating processes but forbid the supplier from sharing them with a competitor or copying them for its own financial benefit. The clause usually ties use to the stated purpose and restricts internal sharing to people with a need to know.

Time period

Much proprietary information loses value over time, especially in research and development, as competitors study, replicate or overtake it. NDAs therefore usually state when the obligation ends, either as a fixed term after signing or a period after the last disclosure. Trade secrets are the main exception, as discussed under duration below.

Other provisions

Additional clauses commonly cover:

• Return or destruction of materials when the relationship ends or on request.
• Remedies, including the right to seek an injunction and, sometimes, a fixed amount of liquidated damages.
• Governing law and venue, naming which state’s law applies and where disputes are heard.
• Attorney fees, specifying which party pays legal costs in a dispute.
• Compelled disclosure, allowing the recipient to disclose information if a court or regulator orders it, usually after notifying the discloser.
• Industry or government requirements, which can be stricter than ordinary commercial terms, particularly for government agencies and regulated sectors.

What Information an NDA Can Protect

Companies use NDAs for a wide range of non-public information, including:

• Customer information: lists of major customers, their contact details, preferences and direct communications.
• Financial information: figures about specific customers and financial data not required to be publicly disclosed, often closer to internal cost accounting than to published financial statements.
• Intellectual property: trade secrets, unpublished patent applications, technologies, formulas and anything else that gives the company a competitive advantage.
• Marketing information: sales plans, pricing strategies, billing policies and advertising techniques.
• Operating information: employee data, supplier details, payroll information and internal costs that are not publicly reported.
• Deal information: the existence and terms of negotiations themselves, such as a proposed merger, financing or partnership.

What an NDA Cannot Cover

An NDA cannot make information confidential simply by calling it confidential. Public information, information that becomes public without the recipient’s fault, and the other standard exclusions above generally fall outside the agreement, though courts and parties sometimes disagree about where that line falls.

The larger limits come from public policy. A contract that purports to conceal illegal activity is generally unenforceable to that extent. Several US federal rules narrow what NDAs can do:

• Defend Trade Secrets Act of 2016: Individuals are immune from trade secret liability for disclosing secrets in confidence to government officials or an attorney solely to report a suspected violation of law, or in a sealed court filing. Employers must give notice of this immunity in agreements with employees covering trade secrets; one that fails to do so cannot recover exemplary damages or attorney fees under the Act from that employee.
• SEC Rule 21F-17: No one may take action, including enforcing or threatening to enforce a confidentiality agreement, to stop a person from communicating with the Securities and Exchange Commission about a possible securities law violation.
• Speak Out Act (2022): Pre-dispute nondisclosure and nondisparagement clauses are unenforceable with respect to sexual assault and sexual harassment disputes.
• National Labor Relations Act: Non-supervisory employees have protected rights to discuss wages and working conditions, and the National Labor Relations Board has found overly broad confidentiality terms unlawful where they interfere with those rights.

Several states add their own restrictions, particularly on confidentiality in harassment and discrimination settlements. Because of these overlapping rules, an NDA clause can be valid in a commercial deal and partly unenforceable in an employment context.

Example of a Non-Disclosure Agreement

Hypothetical example: a bank and a software company. A regional bank is evaluating a software company’s fraud-detection platform. To test whether the product works, the bank needs to share samples of transaction data and describe its internal fraud controls. The software company needs to show the bank its detection models and product roadmap.

Information flows both ways, so the parties sign a mutual NDA. Its key terms might look like this (all terms are illustrative):

• Purpose: evaluating a possible licensing agreement.
• Confidential information: the bank’s customer and transaction data and control procedures; the vendor’s source code, models, pricing and roadmap; and the fact that talks are taking place.
• Exclusions: public information, information already known, independently developed or lawfully received from third parties.
• Permitted use: evaluation only, by employees and advisers with a need to know.
• Term: a fixed number of years for general business information, with trade secrets protected while they remain secret.
• On termination: return or destroy all materials, subject to legal record-keeping requirements.

Because the bank handles customer data, it would likely add terms for data security and privacy obligations required by its regulators. If talks fail, the vendor cannot use the bank’s data to train its models for other clients, and the bank cannot pass the vendor’s pricing to a competing supplier.

A real-world illustration. Apple is known for strict secrecy and requires partners to sign NDAs, reportedly including restrictions on mentioning Apple at all. In January 2021, Hyundai said it was in talks with Apple about cars, prompting speculation that Apple was entering the auto market. It then issued a revised statement with no mention of Apple. Reporting at the time described Apple as having threatened partners that leaked information with costly lawsuits. NDAs can cover not just technical details but the existence of a relationship.

What Happens If You Break an NDA?

Breaking an NDA exposes you to the consequences set out in the contract and to an ordinary breach-of-contract claim. The disclosing party may ask a court for:

• An injunction ordering the recipient to stop further disclosure or use.
• Monetary damages for losses caused by the breach, or a liquidated damages amount if the contract specifies one and a court enforces it.
• Return of assets or materials, and in some cases profits gained from the misuse.
• Legal costs, if the contract or applicable law shifts attorney fees.

An employee who breaches an NDA may also lose their job. Related claims can be added to the lawsuit, such as copyright infringement, trade secret misappropriation or breach of fiduciary duty. Breaching an NDA is not usually a crime in itself, but the underlying conduct can be: theft of trade secrets, for example, can be prosecuted under federal law.

From the disclosing party’s side, enforcement can be difficult. It must show what information was confidential, that the recipient disclosed or misused it, and what harm resulted. This is one reason many venture investors decline to sign NDAs before hearing a pitch: they see many similar ideas, a signed agreement could constrain future deals with other companies, and they prefer not to carry a legal obligation after passing on an investment.

How Long Does an NDA Last?

Each NDA sets its own duration, so there is no single answer. Terms commonly range from one to 10 years, depending on how long the information stays valuable. Fast-moving technical information might warrant a shorter term; long-lived customer lists or formulas a longer one.

An NDA can also be indefinite, which is typical for trade secrets. But open-ended or generic confidentiality obligations can be challenged as unreasonable in some states, and a court could refuse to enforce them. Many agreements separate two clocks: the period during which disclosures are covered, and the longer period during which the confidentiality duty survives after the relationship ends. A job NDA, for instance, usually keeps binding you after you leave the company.

Advantages and Disadvantages of NDAs

Advantages

The main benefit is that sensitive information stays private, whether it concerns research and development, future patents, finances or ongoing negotiations. A good NDA spells out what may and may not be shared, which reduces disputes. It is cheap relative to the value of the information it protects, its stated consequences give the recipient a concrete reason to be careful, and it can make parties more comfortable sharing what they need to evaluate a deal.

Disadvantages

An NDA can start a relationship on a note of mistrust. Strict employee NDAs may deter strong candidates who do not want limits on how they discuss their work, and asking current employees to sign new agreements for special projects can make them feel less trusted. Enforcement is costly and slow. For the receiving party, a broad NDA can create ongoing legal exposure and restrict future business with the disclosing party’s competitors.

NDA vs. Related Agreements

Several contract terms are often confused with an NDA, but they restrict different things:

• Confidentiality agreement: generally the same thing as an NDA; the names are used interchangeably.
• Non-compete agreement: restricts a person from working for a competitor or starting a competing business for a period. An NDA restricts information, not employment. State law on non-competes varies widely, and some states sharply limit them.
• Non-solicitation agreement: bars a former employee or partner from recruiting the company’s employees or customers.
• Non-disparagement clause: prohibits making negative statements about a party, which goes beyond keeping specific information secret.
• Trade secret law: protects qualifying secrets even without a contract, but an NDA can cover information that does not meet the legal definition of a trade secret and makes the recipient’s duties explicit.
• Disclosure agreement or authorization: permits sharing rather than restricting it. For example, a patient may sign a form allowing a doctor to share medical details with an insurer, which also protects the doctor from being sued for doing so.

An employment contract may contain several of these clauses at once, so reading the whole document matters more than its title.

How Much Does an NDA Cost?

The cost depends on complexity. An NDA can be free if built from a template, or cost more than $1,000 if a lawyer drafts or negotiates it. Simple mutual NDAs for preliminary business discussions are often standardized, while agreements covering acquisitions, regulated data or significant intellectual property usually justify legal review.

NDA templates

An NDA template is a prewritten format with standard legal language and blanks for the parties, the purpose, the definition of confidential information, the term and the governing law. Templates suit routine situations. State rules differ and a template’s definitions may not fit the information actually shared, so a template should be adapted rather than signed as is.

FAQs

The Bottom Line

NDAs matter to anyone sharing or receiving sensitive information, from companies negotiating deals to employees handling internal data. Before signing, read the definition of confidential information, the exclusions, the term and the remedies, since a broad agreement can create lasting legal exposure. A template can work for routine discussions, but acquisitions, regulated data and significant intellectual property usually justify legal review.