M&A NDA: Key Clauses, Standstill, and Residuals Explained

An M&A non-disclosure agreement is the first binding contract in most deals, and its key clauses do specific jobs: they define what information is protected, who can see it, how long the obligations last, what the receiving party cannot do with what it learns, and what happens if the rules are broken. Get the clauses wrong and a buyer can walk away with a competitor’s playbook, or a seller can lose leverage before the real negotiation starts. Get them right and the document carries real weight — a Delaware court once barred a buyer from pursuing an acquisition for four months after finding it had used confidential materials to launch a hostile bid.1Justia Law. Martin Marietta Materials, Inc. v. Vulcan Materials Co.

Which Form of NDA You’re Signing

Before any individual clause matters, the parties have to pick a structure. Three forms are common, and the choice depends on who is actually disclosing information.

A unilateral NDA fits a straightforward sale where the seller does most of the disclosing. The buyer takes on confidentiality obligations while it reviews financials, customer lists, and operations; the seller carries few restrictions. This works when the buyer is paying cash and has no reason to open its own books.

A mutual NDA binds each side to the same obligations. It appears in strategic mergers where both companies are evaluating a combination, and in stock deals where the seller needs to assess the buyer’s financial health.

A clean team agreement comes in when buyer and seller are direct competitors. Sharing raw pricing, supplier contracts, or customer terms between competitors creates antitrust risk. A clean team is a small group of vetted individuals who sit between the two companies, review the sensitive material inside a restricted environment, and pass sanitized summaries to the broader deal team. This arrangement supplements the main NDA rather than replacing it.

Defining Confidential Information

The definition of confidential information decides what the agreement actually protects. Most M&A NDAs define it broadly: all oral, written, and electronic data disclosed during the evaluation process, plus any analyses, notes, or derivative materials the receiving party creates from that data.

The exclusions matter just as much. Standard carve-outs cover information already public before disclosure, information the receiving party already knew independently, information it developed on its own without reference to the disclosed materials, and information received from a third party with no confidentiality obligation to the disclosing party. These exist because it would be unreasonable to restrict a party from using knowledge it already had or anything available through public channels. A well-drafted agreement puts the burden on the party claiming an exclusion to prove it with documented evidence.

Who Can Access the Information

Due diligence pulls in outside lawyers, accountants, investment bankers, and financial advisors. The NDA handles this by permitting disclosure to “representatives,” typically defined to include officers, directors, employees, agents, advisors, and affiliates of each party. Two conditions attach: each representative must actually need the information to evaluate the transaction, and each must be told about the confidentiality obligations and agree to follow them.2U.S. Securities and Exchange Commission. Mutual Non-Disclosure Agreement

The practical consequence: the receiving party is on the hook for its advisors. If an investment banker on the buy side leaks deal information, the buyer carries the liability. Some agreements require any third-party advisor to sign a separate acknowledgment before getting access to the data room.

Standstill Provisions

A standstill clause prevents a potential buyer from turning confidential information into ammunition for a hostile takeover. Once a buyer has seen the target’s internal financials, customer relationships, and strategic plans, it holds a significant informational advantage. A standstill typically prohibits the buyer from acquiring the target’s shares, launching a tender offer, soliciting proxies, or otherwise moving to gain control outside the negotiated process. These restrictions usually expire after a set period, often tied to the confidentiality term.

In Martin Marietta v. Vulcan Materials, the Delaware Court of Chancery found that Martin Marietta breached both the NDA and the joint defense agreement by using confidential evaluation materials to support a hostile bid and by disclosing protected information through press releases and investor calls that were not legally required.1Justia Law. Martin Marietta Materials, Inc. v. Vulcan Materials Co.

A related provision sometimes added is the “don’t-ask-don’t-waive” clause, which bars the buyer from even privately asking the target’s board to waive the standstill. It prevents behind-the-scenes pressure to open the door for an unsolicited approach. These clauses have been controversial because they can insulate boards from considering potentially valuable offers.

Duration, Return of Materials, and Residuals

How Long the Obligations Last

Standard business and financial data is typically protected for one to five years, depending on the deal’s complexity and the sensitivity involved. Trade secrets and proprietary source code often get indefinite protection because their value depends entirely on secrecy. The parties set the term based on how quickly the information goes stale and how much harm late disclosure could cause.

Returning or Destroying Materials

If the deal collapses, the receiving party cannot keep what it collected. A return-or-destroy clause requires it to hand back physical materials and delete electronic copies, including notes and analyses derived from the confidential data. Most agreements require a written certification from a senior officer confirming the purge is complete. This prevents a failed bidder from sitting on a competitor’s internal playbook.

The Residuals Exception

A residuals clause carves out an exception for information that stays in someone’s memory after the documents are returned. The idea is that you cannot un-know what you learned during due diligence, so the clause permits the receiving party to use general knowledge retained in “unaided memory” without consulting the original materials. It is not supposed to cover information someone deliberately memorized.

Sellers should scrutinize residuals clauses. The line between general impressions and specific competitive intelligence is not sharply defined. Protective limitations include specifying that the clause grants no patent or intellectual property license and restricting individuals who received confidential information from involvement in competing operations.

Non-Solicitation of Employees

Due diligence often exposes org charts, compensation data, and performance reviews. Without a non-solicitation clause, a buyer who walks away could cherry-pick the seller’s best talent. Non-solicitation provisions typically prohibit the buyer from recruiting or hiring employees it learned about through due diligence for a defined period after discussions end, commonly one to two years. Carve-outs often cover general public job postings and employees who approach the buyer on their own initiative.

Compelled Disclosure

A subpoena, regulatory demand, or court order can force disclosure of information the NDA otherwise protects. The standard compelled disclosure clause requires the receiving party to give the disclosing party prompt written notice of the legal demand, provided notice is itself legally permitted. The disclosing party then has a window to seek a protective order or other remedy.

If disclosure ultimately has to happen, the receiving party is limited to the minimum portion the legal process actually requires. The information keeps its confidential status under the NDA for all other purposes. The structure balances legal compliance with contractual protection.

Disclaimers and No Obligation To Proceed

Two provisions manage what the NDA does not promise. A disclaimer clause states that the disclosing party makes no warranty about the accuracy or completeness of the information shared during due diligence. The detailed representations and warranties about the business come later, in the definitive purchase agreement, where they carry survival periods and real remedies. The NDA is not the right vehicle for those commitments.

A “no obligation to proceed” clause makes clear that signing the NDA does not commit either party to doing a deal. Without this language, an aggressive litigant might argue that the NDA and the negotiations that followed created an implied duty to negotiate in good faith or to reach a final agreement. The clause typically states that no binding obligation to consummate any transaction exists until both parties sign definitive documentation. The confidentiality provisions themselves are carved out as binding and enforceable even when the surrounding document is characterized as preliminary.

Remedies for Breach

The primary remedy for an NDA breach in M&A is injunctive relief rather than money damages. Once confidential information reaches competitors or the public, no payment fully undoes the harm. Most M&A NDAs include a clause where both parties acknowledge that a breach would cause irreparable injury and that the non-breaching party is entitled to seek an injunction without having to prove money damages would be inadequate.

Courts retain discretion over equitable remedies regardless of what the contract says, but these provisions have teeth. In Martin Marietta, the court enjoined Martin Marietta from pursuing its hostile bid for four months and prohibited further NDA violations during that period.1Justia Law. Martin Marietta Materials, Inc. v. Vulcan Materials Co. The NDA in that case contained a standard stipulation that money damages would be insufficient and that the non-breaching party could seek equitable relief including specific performance.

Beyond injunctions, the breaching party may face claims for actual monetary damages caused by the disclosure. Some agreements include liquidated damages setting a predetermined amount. NDA litigation in M&A tends to move quickly because the harm compounds with every day the information stays exposed.

Governing Law and Forum Selection

The governing law clause picks the state law that applies; the forum selection clause picks the court. Delaware and New York are the most common choices in M&A confidentiality agreements, largely because both have deep case law and specialized commercial courts. The Martin Marietta dispute, for example, was litigated in the Delaware Court of Chancery, which hears corporate disputes exclusively.

Drafting precision matters here. A clause that says the parties “consent to” a particular court’s jurisdiction may be read as permissive, so either side could still file somewhere else. Making the forum exclusive requires explicit language. A bare governing law clause may cover only contract claims, leaving tort or fraud claims under a different state’s law. Experienced counsel draft these provisions to cover “any dispute arising out of or relating to” the agreement, which pulls in fiduciary duty and tort theories alongside breach of contract.

Signing and Storing the Agreement

Federal law gives electronic signatures the same legal effect as ink signatures for contracts involving interstate commerce.3Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity Most M&A NDAs are executed through e-signature platforms that produce timestamped audit trails. Speed matters: a seller running a competitive auction may need signed NDAs from multiple bidders within days.

Once signed, the agreement should live in a secure virtual data room alongside the material it protects. Data rooms offer role-based permissions, multi-factor authentication, document watermarking, and activity logs tracking who viewed which documents and when. Those features protect the data during the deal and create an evidence trail if a dispute arises later. Revoking a party’s data room access immediately after it exits the process is a basic step that prevents continued exposure after discussions end.