Updated July 2026 · 9 min read
Most people sign non-disclosure agreements without reading them. An NDA arrives right before something you want — an interview, a pitch, a data room — and pushing back feels like a good way to lose the opportunity. But the clauses that cause trouble later are always the same handful.
The direction of information flow decides who carries the risk. Find the sentence naming who discloses and who receives. If you will share anything of your own — a work sample, your pricing, how you built something — a one-way agreement gives you every obligation and them none.
Right when only one side genuinely discloses.
One party discloses, the other is bound. Standard for employment and contractor onboarding. You carry every obligation, so read it hardest. If you are also disclosing, ask to make it mutual — a normal request rather than a difficult one.
Right whenever both sides exchange information.
Both disclose, both bound by identical terms. The default for partnership talks and acquisition discussions. Mutual NDAs tend to be more balanced for a simple reason: whoever drafts an aggressive clause has to live under it too.
Right for three or more parties at once.
One agreement binds several parties instead of a web of two-way NDAs. Everyone negotiates the same text, so it lands broader than any single party wanted.
A typical NDA runs two to five pages, so reading it properly costs you a few minutes rather than an afternoon. Four clauses deserve real attention.
This does more work than every other clause combined, because everything else only applies to what it captures. Catch-all definitions are normal; ones with no boundary are not — “all information relating to the Disclosing Party, its affiliates, business or industry.” Read literally, that captures what you knew before you met them. Ask to limit it to what they actually disclose.
A well-drafted NDA carves these out. If they are all missing, the document is one-sided — sometimes by design, sometimes because someone reused a poor template:
Already public
Public when disclosed, or public later through no fault of yours. Without it you stay bound by information they themselves publish.
Already known to you
Information you held without obligation before disclosure. The most commonly omitted exclusion, and the one you are most likely to need.
Independently developed
Anything you develop without reference to their material. Essential if you build in the same space.
Rightfully received elsewhere
Information a third party gives you legitimately, breaching no obligation of their own.
Check the proof standard too. Requiring written evidence of prior knowledge is workable if you keep records; requiring proof “to the Disclosing Party's sole satisfaction” is not an exclusion at all.
The term of the agreement is the window in which disclosures are covered; the confidentiality period is how long you protect them afterwards. A two-year agreement with a five-year confidentiality period means something disclosed on the last day stays protected for five more years. Perpetual protection suits genuine trade secrets; an indefinite obligation over ordinary commercial information is harder to justify.
This lets individuals keep using what they retain in unaided memory without it counting as a breach. As a receiving party still working in the field, that is real protection — you cannot un-learn things. As a disclosing party it is a significant hole, because concepts become reusable so long as no document was copied. It is often buried mid-paragraph.
Permitted purpose
Should name why information is shared. If it reads "any business purpose," ask for a sentence describing the actual conversation.
Permitted recipients
Look for disclosure to advisors on a need-to-know basis, bound by equivalent confidentiality. A blanket ban is one a sole trader with an accountant cannot comply with.
Survival, return and destruction
Return-or-destroy often requires written certification. Ask for carve-outs covering automated backups and retention required by law.
Compelled and protected disclosure
Look for a carve-out for disclosure required by law, a court or a regulator. Some protections exist whatever the document says, though each has its own scope: in the UK, section 43J of the Employment Rights Act 1996 voids a provision in a worker-and-employer agreement insofar as it purports to preclude the worker from making a protected disclosure; in the US, the Defend Trade Secrets Act 2016 created an immunity for disclosing a trade secret in confidence to a government official or an attorney for the purpose of reporting a suspected violation of law.
Injunctive relief
An acknowledgement that breach causes irreparable harm is standard. Resist fixed sums payable per breach and one-way legal-costs recovery.
Governing law and jurisdiction
Exclusive jurisdiction on another continent means you could never realistically bring or defend a claim. Counterparties rarely move on governing law but sometimes will on jurisdiction.
Assignment
If they can assign freely, the company you agreed terms with could be acquired by your direct competitor, who would then hold an enforceable agreement over you.
An NDA is a confidentiality agreement, but extra restrictions are often inserted near the end in flat language that does not draw attention:
Non-solicitation
Not hiring or approaching their staff or customers. Sometimes narrow and fair; sometimes covering anyone who ever worked there.
Non-competition
Not working on, investing in, or building anything competing. This is a restraint on your livelihood rather than a confidentiality term, and it deserves scrutiny separate from the rest of the document.
Non-circumvention
Not dealing directly with introduced contacts or investors. Legitimate in broker agreements; check how broadly "introduced" is defined.
Exclusivity or standstill
Not discussing a similar deal with anyone else for a period. Occasionally appropriate in acquisition talks, rarely in a vendor conversation.
IP assignment
Assigning ownership of your feedback or improvements. A fair NDA confirms disclosure alone grants no licence or ownership.
Non-compete enforceability varies enormously. In the US it is largely state by state — California's Business and Professions Code section 16600 has long voided most restraints on practising a lawful profession, other states have enacted broad restrictions, and attempted federal rulemaking has been contested in court. In England and Wales, restrictive covenants are void under the common-law restraint of trade doctrine unless shown to go no further than reasonably necessary to protect a legitimate business interest. Verify the current position where you are, and never sign assuming a clause is unenforceable — that gets decided in court.
This is the failure mode that damages independent professionals most. You spend three years developing an approach. A larger company invites you in, sends a one-way NDA with no prior-knowledge or independent-development exclusion, and you sign because you want the meeting. You have now agreed that information you brought into the room is confidential information owed to them. Ship your own product later and they can argue you used their material, leaving you to prove a negative.
Insist on those exclusions, then create a dated record of what you knew before the meeting — a design document, commit history, an invoice for earlier work. And avoid receiving information you do not need: if they offer to show you detail in an area where you are actively building, declining costs nothing.
Honestly: you have less leverage, and their legal team has processed hundreds of these. But NDAs are more negotiable than people assume, because the person chasing your signature is usually a recruiter or a founder who wants the meeting to happen, not someone invested in clause 9.3. Usually negotiable: making a one-way agreement mutual, adding the four exclusions, adding a permitted-recipients carve-out, narrowing the definition, shortening an indefinite term. Usually not: governing law at a large corporation, the injunctive-relief acknowledgement, boilerplate.
Pay for a lawyer when the NDA touches your core IP, contains restrictive covenants, or attaches to a deal big enough that a dispute would hurt. Declining is legitimate too: a counterparty who refuses a prior-knowledge exclusion is telling you how the relationship will go. The same instincts apply to what follows — see our guide to signing business contracts.
Do not sign a document you disagree with and then annotate the PDF or cross clauses out by hand — that creates an ambiguous instrument and an argument over whether your edits were accepted. Handle it before signature, in one message.
Sample request
Thanks for sending this over — happy to sign and keen to get the meeting booked. Three small points first:
1. Could we limit Confidential Information to what you actually disclose for the evaluation, rather than all information relating to your business?
2. The usual exclusions are missing — could we add carve-outs for information that is public, that I already held without obligation, that I independently develop, or that I receive properly from a third party?
3. I use an external accountant, so I need to share on a need-to-know basis with advisors under equivalent obligations.
Everything else looks fine — I can sign today if you confirm these.
Keep the list short: a couple of points reads like a formality, a dozen reads like a negotiation. Once agreed, ask for a revised PDF and sign that — not the original plus an email chain of amendments.
Breach of an NDA is a breach of contract claim, and disputes rarely start with a lawsuit. The usual sequence is a letter — a cease and desist, or letter before action — asserting the breach and demanding disclosure stop. Many matters end there. If it escalates, the priority is speed rather than money: an interim or preliminary injunction to halt further disclosure. That is why irreparable-harm wording appears in nearly every NDA, though it does not bind a court, since the applicant must still satisfy the court's own test.
Damages are harder than people expect, because the claimant must show what it actually lost and separate that from ordinary competition. Separately from contract, misappropriation of trade secrets supports its own claim: in the US under the Defend Trade Secrets Act 2016, in the EU under the Trade Secrets Directive (EU) 2016/943 as implemented by member states, and in the UK under the equitable doctrine of breach of confidence. Those routes can exist without any signed NDA.
Generally, yes. NDAs are ordinary commercial contracts and sit inside electronic signature legislation rather than the narrow excluded categories. In the US, the ESIGN Act 2000 federally and the Uniform Electronic Transactions Act 1999 as adopted in nearly every state give electronic signatures the same effect as handwritten ones for most transactions. In the EU, Regulation (EU) No 910/2014 (eIDAS) provides that a signature cannot be denied legal effect solely because it is electronic. In the UK, the Electronic Communications Act 2000 and the Law Commission's 2019 report on electronic execution support simple electronic signatures for most commercial agreements. India's Information Technology Act 2000 and Australia's Electronic Transactions Act 1999 provide comparable recognition.
The categories that commonly fall outside ordinary electronic execution — wills, some powers of attorney, negotiable instruments, and anything your jurisdiction requires to be witnessed or notarised in a particular way — do not normally include NDAs. What matters is that the signer intended to be bound, had authority to bind the named entity, and that both sides hold the same final version. For how the signature tiers differ, see our guide to electronic signature laws by country.
New to browser-based signing? Our step-by-step guide to signing a PDF online covers the interface in detail.
SimpleSignPDF produces a Simple Electronic Signature — a signature image applied to your PDF in your browser. It does not verify who you are, does not generate a certificate of completion or audit trail with timestamps and IP addresses, and does not apply a cryptographic seal that would reveal later tampering. It also cannot send a document to another party for signature.
For most NDAs that is sufficient, and the counterparty usually just wants the signed PDF back by email. If you need a certified audit trail, identity verification, or a countersignature workflow, use a platform built for it — our comparison of free and paid e-signature tools sets out where each fits.
Ask for the change before signing, in writing, naming the clause number and proposing the replacement wording you would accept rather than only objecting. Handing them a drafted sentence removes the work from their side, which is usually what decides whether an amendment gets agreed quickly or disappears into a legal queue.
For a routine interview or a standard mutual NDA, careful reading is usually proportionate. Get legal review when the NDA touches your core intellectual property, contains a non-compete, runs perpetually, or attaches to a deal large enough that a dispute would hurt.
That is precisely what the prior-knowledge and independent-development exclusions are for. Insist on those carve-outs and keep dated evidence of what you knew beforehand — design documents, commit history, anything with a timestamp predating the disclosure.
A confidentiality obligation should restrict what you may disclose, not where you may work. If the document also contains a non-compete, that is a separate restrictive covenant. Enforceability varies significantly by jurisdiction, so check the current position where you are.
If the obligations should sit with your business, sign as an officer of that entity, for and on behalf of the company. Check the block: some NDAs are drafted so the individual signs personally too, extending the obligations to you privately.
This page is general information about common NDA terms, not legal advice. It creates no solicitor-client or attorney-client relationship and does not account for the law of your jurisdiction or the facts of your situation. For any agreement that materially affects your business, employment, or intellectual property, take advice from a qualified lawyer.