NDA Agreement Template

The non-disclosure agreement—commonly known as an NDA or confidentiality agreement—is one of the most frequently used and widely recognized legal documents in the business world. Whether you are sharing proprietary technology with a potential investor, discussing a business partnership with a prospective client, or engaging a contractor who will have access to your customer data, a properly executed NDA is the essential legal instrument for protecting your most sensitive business information from unauthorized disclosure or use.

Our free NDA template is designed for US businesses and individuals, supporting both mutual (bilateral) and one-way (unilateral) confidentiality arrangements. It covers the definition of confidential information, the obligations of the receiving party, permitted disclosures, standard legal exceptions, the duration of confidentiality obligations, and remedies for breach. The template is free to download, fully customizable to your specific situation, and requires no signup.

What Is an NDA?

A non-disclosure agreement is a legally binding contract under which one or more parties agree to keep specified information confidential and to use it only for specified permitted purposes. The fundamental purpose of an NDA is to protect confidential information—trade secrets, proprietary technology, business strategies, customer data, financial information, and other sensitive business data—from being disclosed to unauthorized third parties or used for purposes other than those for which it was shared.

NDAs are grounded in the common law doctrine of confidentiality and, for trade secrets specifically, the federal Defend Trade Secrets Act (DTSA) and the Uniform Trade Secrets Act (UTSA) as adopted by most states. A properly drafted NDA creates contractual obligations between the parties that supplement these statutory protections, providing both injunctive relief (courts can order the receiving party to stop disclosing or using the information) and monetary damages (compensation for losses caused by the breach) if the confidentiality obligations are violated.

The legal enforceability of NDAs in the United States is well established, but not absolute. Courts will not enforce NDAs that cover information that is not genuinely confidential (such as publicly available information), that impose overly broad restrictions on the receiving party's ability to conduct its normal business, or that are otherwise contrary to public policy. The "reasonableness" standard applies particularly to the scope, duration, and geographic reach of confidentiality provisions—a provision that is excessively broad may be narrowed by a court or found unenforceable entirely.

There are two primary types of NDAs: one-way (unilateral) and mutual (bilateral). In a one-way NDA, only one party is disclosing confidential information and assuming confidentiality obligations—for example, a startup sharing its business plan with a potential investor. In a mutual NDA, both parties are disclosing confidential information to each other, and both assume confidentiality obligations. In either case, the disclosing party retains the burden of clearly identifying what information is confidential and what use is permitted.

Key Clauses Every NDA Must Include

1. Definition of Confidential Information

The definition of confidential information is the most important substantive clause in any NDA. It should clearly specify what categories of information are covered (for example, trade secrets, business plans, financial data, technical information, customer lists, and marketing strategies), how confidential information will be identified or marked (written disclosures should typically be labeled "Confidential" or "Proprietary"), and what information is excluded from the definition (publicly known information, independently developed information, information already known to the receiving party, etc.).

2. Obligations of the Receiving Party

This clause sets out what the receiving party can and cannot do with the confidential information. Standard obligations include: using the confidential information only for the purpose for which it was disclosed (such as evaluating a potential business relationship); protecting the confidential information using at least the same degree of care as the receiving party uses to protect its own confidential information (and in no event less than reasonable care); not disclosing the confidential information to any third party without prior written consent; and limiting access to the confidential information to employees and contractors who have a need to know and are bound by confidentiality obligations.

3. Permitted Disclosures and Exceptions

No NDA is absolute—there are circumstances in which disclosure of confidential information is legally required or practically necessary. This clause should specify the standard exceptions to confidentiality obligations, including: disclosures required by law or court order (with the receiving party typically required to give the disclosing party prompt written notice so they can seek protective orders or contest the disclosure); disclosures to professional advisors bound by professional confidentiality; and disclosures that are already publicly known, already known to the receiving party, independently developed without use of the confidential information, or received from a third party without restriction.

4. Term and Duration

The term clause specifies when the NDA becomes effective (typically upon first disclosure of confidential information or upon signing, whichever occurs first) and when the confidentiality obligations expire. For general confidential information, three to five years is a common duration. For trade secrets, some agreements impose perpetual obligations, though these face increasing judicial scrutiny. The clause should also specify whether confidentiality obligations survive the expiration or termination of the NDA and for how long.

5. Return or Destruction of Confidential Information

When the NDA relationship ends or the disclosing party requests it, the receiving party should be required to return or destroy all confidential information in its possession, including copies, summaries, and derivative materials. This clause should specify the timeframe for compliance (thirty days is common), whether written confirmation of destruction is required, and whether the receiving party may retain one archival copy for legal compliance purposes.

6. Remedies for Breach

Breaches of confidentiality agreements can cause irreparable harm that is difficult to quantify in monetary terms, which is why courts frequently award injunctive relief in trade secret and NDA cases. This clause should specify that the disclosing party is entitled to seek injunctive relief in addition to monetary damages, and that the right to injunctive relief does not require posting a bond or proving actual damages. It should also make clear that the availability of statutory remedies (under the DTSA or state law) is not limited by the contract.

7. No License or Rights Granted

An important protective provision clarifies that the NDA does not grant the receiving party any license, ownership rights, or other intellectual property rights in the confidential information beyond the limited right to use it for the permitted purpose. This prevents a receiving party from arguing that acceptance of confidential information grants them implied rights to use or further disclose it.

How to Write an NDA

Writing an effective NDA begins with understanding what information you actually need to protect and why. Not all business information is equally sensitive, and imposing overly broad confidentiality obligations can backfire by making the receiving party uncomfortable with the restrictions or by diluting the focus on the truly sensitive information. Identify the specific categories of information that are genuinely confidential and that would cause harm if disclosed, and tailor the definition accordingly.

When drafting the confidentiality definition, err on the side of specificity. A definition that is too broad ("all information shared between the parties") is difficult to enforce and may make the entire agreement vulnerable to challenge. Instead, identify specific categories of information and include reasonable procedures for marking written disclosures as confidential. For verbal disclosures, many agreements provide that the disclosing party must follow up with written confirmation of the disclosed information within a specified period for it to be treated as confidential.

Consider whether the NDA should be mutual or one-way based on the actual information flows in the relationship. Using a mutual NDA when only one party is disclosing information is not necessarily harmful, but it may signal to the receiving party that they too are expected to share confidential information—something they may not be prepared to do. Be intentional about which form you use.

Finally, ensure that the NDA is signed before any confidential information is shared. Disclosing confidential information before the NDA is signed is a common mistake that eliminates your ability to claim breach of contract for information disclosed during that window—though trade secret law may still provide some protection independently of the NDA.

Sample NDA

Consider the following scenario: NexGen Therapeutics, a biotech startup, is considering partnering with Atlas Venture Capital to discuss a potential $10 million Series B investment. As part of their due diligence, Atlas will need to review NexGen's proprietary compound library, clinical trial data, patent applications, and financial projections—all of which are highly confidential.

They execute a mutual NDA effective upon the date of signing, under which NexGen discloses its confidential information to Atlas and Atlas discloses its confidential investment criteria and portfolio information to NexGen. The agreement defines confidential information to include all non-public technical, clinical, regulatory, financial, and business information marked as confidential, with specific exclusions for information that is publicly available, already known to the receiving party, or independently developed.

The receiving party agrees to use confidential information solely for the purpose of evaluating the potential investment relationship, to protect it with reasonable care, and to limit disclosure to employees and advisors with a need to know who are bound by equivalent confidentiality obligations. Confidential information must be returned or destroyed within thirty days of the disclosing party's request or upon termination of discussions.

The confidentiality obligations survive for three years from the date of disclosure for general confidential information and perpetually for trade secrets. Either party may seek injunctive relief for breach without posting a bond, in addition to all available legal remedies.

Related Templates

• /contract-templates/consulting-contract — Professional consulting services agreement
• /contract-templates/partnership-contract — Business partnership agreement
• /contract-templates/service-agreement — General service agreement
• /contract-templates/independent-contractor — Independent contractor agreement
• /contract-templates/freelance-contract — Freelance professional services agreement