To fill out a non-disclosure agreement, decide whether you need a one-way or mutual NDA, gather the legal names of the parties, a specific description of the information you want to protect, the purpose of the disclosure, the length of the confidentiality obligation, and the state whose law will govern, then work through each section of the template with concrete details rather than generic boilerplate. An NDA is a contract that creates a legal duty for the person receiving sensitive information to keep it confidential, and courts will generally enforce that duty when the agreement is properly drafted and reasonable in scope.1Legal Information Institute. Non-Disclosure Agreement (NDA) A vague or incomplete form can be unenforceable at the exact moment you need it, so the details matter more than most people expect.
Pick the Right Type of NDA First
Before you touch a blank, figure out which direction the information flows. A unilateral (one-way) NDA protects one side: the disclosing party shares sensitive information and the receiving party promises to keep it quiet. This fits an employer onboarding a new hire, a startup pitching financials to an investor, or a company handing internal processes to an outside consultant.
A mutual (bilateral) NDA protects both sides equally, because each party is simultaneously discloser and receiver. Use it in merger and acquisition talks, joint venture negotiations, or partnership evaluations where both companies open their books.
Choosing wrong creates a real gap. If you use a one-way NDA when both sides are actually sharing information, the party labeled “receiving” has no contractual protection for what it disclosed. When in doubt, use a mutual NDA.
Information to Gather Before You Start
Collect these before you sit down with the form. Hunting mid-draft leaves blanks that get forgotten.
- Full legal names and addresses for every party. If a party is a business, use the exact registered legal name, not a trade name or abbreviation. An NDA naming “Smith Consulting” when the actual entity is “Smith Consulting LLC” creates an argument that the LLC itself was never bound.
- A specific description of the confidential information. “Business information” is too broad to survive a challenge. Instead, identify the categories that apply: customer lists, financial projections, source code, manufacturing processes, marketing strategies, product designs.
- The purpose of the disclosure. Why the receiving party needs access — evaluating an acquisition, performing consulting work, developing a product together. This purpose limits how the information can later be used.
- The duration of confidentiality. Common terms run two to five years. Trade secrets often warrant indefinite protection, since their value depends on staying secret.
- The governing jurisdiction. Which state’s laws apply if there is a dispute. This matters most when the parties sit in different states.
Working Through the Form Section by Section
NDA templates vary, but most contain the same core sections. Fill them out in order.
Parties
Enter the full legal name and address of each party. For companies, include the entity name, state of incorporation, and principal address. In a one-way NDA, label one party the disclosing party and the other the receiving party. In a mutual NDA, both parties take on both roles.
Definition of Confidential Information
This is the heart of the agreement. Describe what is being protected in concrete terms. Rather than “all proprietary information,” list the actual categories: financial records, customer data, product designs, software code. If specific documents or datasets are being shared, name them. Courts have refused to enforce NDAs where the definition was so vague it could mean practically anything, so precision here is what makes the rest of the document usable.
Exclusions
Every well-drafted NDA carves out information the receiving party has no duty to protect. Standard exclusions cover information that was already public, information the receiving party already had before signing, information later received from a third party with no duty of confidentiality, and information the receiving party developed independently without reference to the disclosed material.2Association of Corporate Counsel. Non-Disclosure Agreements Tips and Traps – Section: Carve-Outs from Definition If your template lacks exclusion language, add it. An NDA without exclusions is a red flag for the receiving party and may face enforceability challenges.
Purpose Clause
State the specific reason the information is being shared. “For the evaluation and potential negotiation of a business acquisition” is much stronger than “for business purposes.” A narrow purpose clause prevents the receiving party from using confidential information in ways you did not anticipate.
Obligations of the Receiving Party
This section spells out what the receiving party must and must not do. At minimum, it prohibits sharing with unauthorized people and restricts use to the stated purpose. Many NDAs also require the receiving party to protect the information with the same level of care it applies to its own confidential data, and to limit internal access to employees or advisors who genuinely need to see it. Confirm the language permits sharing with the receiving party’s own attorneys, accountants, or employees who need it for the stated purpose. Without those carve-outs, the receiving party may technically breach the NDA by doing routine business with the information.
Term and Survival
Set two related but distinct periods: how long the overall agreement lasts, and how long the confidentiality duty survives after the agreement ends. A survival clause might extend confidentiality for three to five years past the end of the business relationship, or indefinitely for trade secrets. An NDA that expires after one year with no survival clause can leave your information unprotected the moment the term ends.
Return or Destruction
A strong NDA requires the receiving party to return or destroy all confidential materials, including copies, notes, and derivative works, when the agreement ends or the disclosing party requests it. If your template includes this section, fill in the specifics: how many days the receiving party has to comply after a request, whether destruction must be certified in writing, and any exceptions. Common exceptions include one archival copy for regulatory compliance, or electronic copies sitting in automated backups as long as they remain subject to the confidentiality obligations. Without a return-or-destroy clause, your information just sits in someone else’s files indefinitely.
Governing Law
Enter the state whose laws will control. Contract law varies by state, and the jurisdiction you pick determines how courts interpret ambiguous terms, what remedies are available, and what procedural rules apply.3Legal Information Institute. Governing Law If the parties are in different states, expect negotiation, since each side typically prefers its home state. Consider where you would actually need to enforce the agreement and whether that state’s courts are convenient for you.
Remedies for Breach
You usually will not fill in blanks here, but read the language carefully. Confirm the NDA allows the disclosing party to seek an injunction — a court order forcing the receiving party to stop sharing the information immediately. This is the most important remedy because once information is out, money alone cannot undo the damage. NDAs also typically allow recovery of actual financial losses, disgorgement of profits the receiving party gained from the breach, and in some cases attorney fees. When trade secrets are involved and the breach was willful, federal law allows courts to award up to double the actual damages.4Office of the Law Revision Counsel. United States Code Title 18 – 1836 If the template includes a liquidated damages provision (a pre-set dollar amount for breach), check that the figure is reasonable. Courts may refuse to enforce a liquidated damages clause that looks more like a punishment than a genuine estimate of harm.
Two Federal Requirements You Can’t Skip
Whistleblower Immunity Notice
The Defend Trade Secrets Act requires employers to include a notice of whistleblower immunity in any contract with an employee that involves trade secrets or confidential information. The notice must inform the employee that federal law protects them from liability if they disclose a trade secret in confidence to a government official or attorney for the purpose of reporting a suspected legal violation, or if they use trade secret information in a court filing made under seal.5Office of the Law Revision Counsel. United States Code Title 18 – 1833
If your NDA covers employees and you skip this notice, you lose the ability to recover exemplary damages (the double-damages provision) and attorney fees under the DTSA if you later sue that employee for misappropriating trade secrets.5Office of the Law Revision Counsel. United States Code Title 18 – 1833 You can satisfy the requirement by including the immunity language directly in the NDA or by cross-referencing a separate company policy document that covers it. Either works, but you need one.
The Speak Out Act
Since December 2022, the Speak Out Act has barred courts from enforcing any pre-dispute NDA or non-disparagement clause that tries to silence claims of sexual assault or sexual harassment. “Pre-dispute” is the key word: an NDA signed before any allegation arises cannot be used to prevent someone from later speaking about harassment or assault.6Congress.gov. Text S.4524 117th Congress Speak Out Act This applies regardless of what your NDA says, and even if both parties signed voluntarily. Many states have enacted additional restrictions in harassment and discrimination contexts, some broader than the federal law. If your NDA will cover employees in multiple states, check whether any of those states impose tighter limits.
What Makes the Whole Thing Enforceable
Filling in every blank does not help if the underlying agreement has structural problems. An NDA needs the same elements as any contract.
- Consideration. Both parties must receive something of value. When an NDA is signed at the start of employment, the job itself is the consideration. An NDA handed to an existing employee with nothing new in return is vulnerable to challenge. Employers often address this with a bonus, additional access to proprietary systems, or a promotion.
- Reasonable scope. The definition of confidential information must be specific enough to put the receiving party on notice. Courts have struck down NDAs that tried to protect “all information” exchanged between parties, or that treated obviously non-confidential material as secret.
- Reasonable duration. A five-year confidentiality period for business strategies is likely enforceable. A twenty-year restriction on information with a two-year competitive shelf life probably is not. Trade secrets are the exception, because their value depends entirely on secrecy.
- Consistent conduct by the disclosing party. You cannot enforce confidentiality on information you treat carelessly. If you share “confidential” data openly at industry conferences or post it on an unprotected website, a court may find you waived the protection.
An overbroad NDA that tries to cover everything can end up protecting nothing, because a court may void the entire confidentiality clause rather than rewrite it to be reasonable.
Reviewing, Signing, and Storing
Once every section is filled in, go back through the document with fresh eyes. Check that every name and address matches the correct party. Confirm dates are consistent throughout. Make sure no blanks were left empty, because an unfilled field in a signed NDA creates ambiguity the other party can exploit. Verify that the definition of confidential information in the body matches what you described in the purpose clause. Read the obligations section from the receiving party’s perspective and ask whether a reasonable person could tell exactly what they are and are not allowed to do. For any NDA that covers substantial assets, sensitive technology, or a complex business relationship, an attorney review typically runs a few hundred dollars and can catch enforceability issues that are invisible to non-lawyers.
When both sides are satisfied, execute the document. Every party must sign, and anyone signing on behalf of a company must have actual authority to bind that entity.7Justia. Authority Contract Clause Examples In most companies, that authority belongs to officers like the CEO or a vice president, or to someone with a formal delegation of signing authority. If the wrong person signs, the company may later argue the NDA does not bind it.
Electronic signatures are legally valid. Federal law provides that a contract or signature cannot be denied legal effect solely because it is in electronic form, so platforms like DocuSign or Adobe Sign produce enforceable agreements.8Office of the Law Revision Counsel. United States Code Title 15 – 7001 Date the agreement on the day it is actually signed, not a future or past date, to avoid disputes about when the obligations began.
Distribute a complete copy to every party. Store the original or the digitally signed version somewhere secure: a physical copy in a fireproof safe or locked cabinet, a digital copy in an encrypted repository with access controls. You may need this document years from now, and not being able to produce a clean copy undermines your ability to enforce it.