A non-disclosure agreement typically lasts one to five years, and how long an NDA should last depends on how long the information you’re protecting stays valuable to a competitor. Short-lived data like preliminary pricing can be covered in a year or two; detailed intellectual property and long-range strategy usually warrant three to five. Trade secrets are a separate category and can be protected indefinitely.
The Two Clocks in Every NDA
Before picking a number, understand that an NDA has two timelines, not one. Confusing them is where drafting goes wrong.
The first is the overall term of the agreement. This is the window during which the parties are actively exchanging confidential information under the NDA’s protections. It might match the length of a negotiation, a consulting engagement, or run indefinitely until either side ends it in writing.
The second is the survival period of the confidentiality obligation. This is how long the recipient must keep the information secret after the overall term ends. An NDA can be active for one year and still require the recipient to protect what they learned for three more years after expiration. When a duration question comes up, this is almost always the clock people mean.
If the agreement doesn’t spell out both, you’re left arguing intent later. A well-drafted NDA states each timeline explicitly.
Typical Duration Ranges
One to five years is the standard band across most industries.
A shorter window of one to two years fits information with a limited shelf life. Pricing data shared during preliminary discussions or plans for a single marketing campaign go stale quickly, and a short protection period is enough.
Three to five years fits information with more staying power. Detailed intellectual property, proprietary processes, and long-term business strategies belong here. Five years is generally the upper end of what courts treat as reasonable for ordinary business information, though context always matters.
What Should Drive Your Choice
Three factors do most of the work.
The type of information. Financial data tied to a quarterly report loses sensitivity within months. A five-year product roadmap or a proprietary manufacturing technique stays valuable much longer. Match the duration to how long the information would give a competitor a meaningful advantage.
The relationship. A freelancer on a three-month project doesn’t need the same window as a senior executive who spent years absorbing strategic direction. Employees with deep access to core operations often sign for longer survival periods than outside vendors who only see a narrow slice.
Industry norms. In technology, one to three years is common because product cycles are short and disclosed information dates quickly. Pharmaceuticals, defense contracting, and other industries with long development timelines frequently run four or five years or longer, because the information keeps its competitive value across extended research and approval cycles.
Trade Secrets Are Different
Trade secrets get fundamentally different treatment and don’t expire on a calendar date. Under the federal Defend Trade Secrets Act, a trade secret is information that derives economic value from not being publicly known, where the owner has taken reasonable steps to keep it secret.1Office of the Law Revision Counsel. 18 U.S. Code 1839 – Definitions Customer lists, proprietary algorithms, and manufacturing formulas are typical examples. Protection lasts as long as the information stays secret. Nearly every state also protects trade secrets through its own version of the Uniform Trade Secrets Act, creating overlapping state and federal coverage.
The practical implication is a dual-duration structure, and it’s worth insisting on. The NDA sets a fixed number of years for general confidential information and states that any information qualifying as a trade secret remains protected indefinitely. Even after the general clock runs out, the most valuable information keeps its legal shield.
The Risk of Picking Too Long
Erring on the side of “as long as possible” is a bad instinct. Courts are skeptical of NDAs whose duration far exceeds the useful life of the information they cover. An agreement that tries to lock someone into confidentiality for 20 years over routine business data starts to look less like information protection and more like an unreasonable restraint on the recipient’s ability to work and compete.
The worst-case outcome is that a court declares the whole agreement unenforceable, leaving the disclosing party with no NDA at all. Some jurisdictions soften that result through the “blue pencil doctrine,” which lets a judge narrow scope or shorten duration to something reasonable. Practice varies. Several states permit courts to actively rewrite unreasonable terms; others will only strike provisions that can be cleanly removed without rewriting the rest; a handful refuse to modify restrictive agreements at all, meaning an overbroad NDA is simply void.
Counting on a court to fix an overreaching NDA is a losing plan. A carefully calibrated three-year agreement protects more than an unenforceable ten-year one.
Putting a Number on It
Start with the information itself and ask how long a competitor could still use it to hurt you. If the honest answer is under two years, write one or two years. If it’s a strategic plan or a technical process with real runway, three to five. Pair whatever number you choose with a separate clause holding trade secrets indefinitely, so the general term doesn’t cap protection for the material that most needs it. That combination, tuned to the information and the relationship rather than to a wish for maximum coverage, is what an enforceable NDA looks like.