Anyone who will see, handle, or receive sensitive business information should sign a non-disclosure agreement before that access begins. In practice, that means employees, independent contractors, third-party vendors, investors at the appropriate stage, potential buyers in a deal, and board or advisory members. Just as important as the list of signers is who signs on the other side: only a person with actual legal authority to bind the organization can create an enforceable agreement.
Employees and Contractors
Full-time staff, part-time employees, and independent contractors are the most common NDA signers. These people handle customer lists, pricing strategies, proprietary software, and internal processes that give a company its competitive edge. The agreement should be signed during onboarding, before the person touches any protected information. Waiting until someone is already embedded in your systems weakens your position if you ever need to enforce.
Under the Defend Trade Secrets Act, a “trade secret” is broadly defined to include financial, business, scientific, technical, and engineering information, so long as the owner has taken reasonable steps to keep it secret and the information derives economic value from not being publicly known.1Office of the Law Revision Counsel. 18 USC 1839 Definitions A signed NDA is one of the clearest “reasonable measures” you can point to if a dispute ever reaches court.
Contractors deserve a second look. The DTSA’s definition of “employee” explicitly includes anyone performing work as a contractor or consultant, which means the whistleblower notice requirement discussed below applies to them too.2Office of the Law Revision Counsel. 18 US Code 1833 – Exceptions to Prohibitions An NDA by itself does not transfer ownership of anything a contractor creates. If you want to own the intellectual property a contractor develops on your behalf, you need a separate assignment agreement. Confusing confidentiality with ownership is one of the most expensive mistakes companies make with contractor relationships.
Confidentiality obligations typically run one to five years after the working relationship ends, though trade secret protections are often carved out as indefinite since their value lasts as long as the information stays secret. NDAs also remain a core protection tool as non-compete agreements face regulatory pressure. The FTC has noted that trade secret laws and NDAs give employers well-established alternatives to non-competes for protecting proprietary information.3Federal Trade Commission. FTC Announces Rule Banning Noncompetes
Third-Party Vendors and Service Providers
Manufacturers, marketing agencies, IT support teams, and logistics providers often need access to technical specifications, customer databases, or product prototypes to do their jobs. Handing that information over without a signed NDA leaves you no contractual basis to stop further distribution if something goes wrong. The signature should come from someone authorized to bind the vendor company, not just the technician who happens to show up on site.
The biggest gap in vendor NDAs is subcontractor coverage. Your vendor may outsource part of the work to a smaller firm you’ve never vetted. A well-drafted agreement includes a flow-down provision requiring the vendor to bind its subcontractors to the same confidentiality terms. Without that language, information can leak through a party you have no direct contract with, and your only recourse is to sue your vendor for failing to control the chain.
Service-level agreements often include confidentiality clauses, but these tend to define data usage narrowly. A standalone NDA offers broader protection because it covers information exchanged outside the scope of the service contract, such as business strategies discussed during planning meetings or financial data shared during vendor selection.
Investors and Financial Partners
Venture capitalists, angel investors, and traditional lenders review financial statements, revenue projections, and expansion plans before making funding decisions. Sharing that information without an NDA means a potential investor who passes on your deal faces no legal barrier to discussing your numbers with a competitor or with a different portfolio company working in the same space.
The practical reality in venture capital, though, is that most professional VC firms refuse to sign NDAs at the initial pitch stage. They review hundreds of pitches a year, many involving overlapping concepts, and signing an NDA for each one would create an impossible web of legal exposure. A signed NDA could also prevent a firm from investing in a legitimate future opportunity simply because it overlaps with something in your pitch deck. Asking for an NDA before even sending a teaser can signal that your competitive advantage is too fragile to survive disclosure, which is the opposite of the impression you want to make.
The workable approach is to share only high-level information during early conversations and save the detailed financials and proprietary technology for later, after there’s genuine interest and the investor is willing to sign. Series A rounds and bank lending relationships typically reach a stage where NDAs become standard. Define confidential information narrowly enough to exclude anything already known to the investor or publicly available, which prevents disputes later about whether the investor independently developed a similar concept.
Potential Buyers in Mergers and Acquisitions
Due diligence in a merger or acquisition exposes the most sensitive parts of a business: tax returns, intellectual property portfolios, employee compensation data, key customer contracts, and internal financial ledgers. Every person who touches that information on the buyer’s side, including lead negotiators, valuation consultants, and outside counsel, should be covered by the NDA.
M&A confidentiality agreements commonly include standstill provisions that restrict the potential buyer’s actions for a set period, typically 18 to 24 months, though shorter or longer terms are negotiated depending on the deal. A standstill prevents the buyer from making a hostile bid if friendly negotiations fall apart. A separate no-shop clause may restrict the seller from soliciting competing offers during an exclusive negotiation window. If either side violates these terms, the other can seek injunctive relief or monetary damages.
One drafting issue that catches people off guard is assignability. If the buyer later merges with another company or restructures, the NDA may not automatically transfer to the successor entity unless the agreement includes a carve-out allowing assignment in connection with mergers, consolidations, or asset sales. Without that language, the confidentiality protections can evaporate during the exact type of transaction they were designed for. If the counterparty insists on an anti-assignment clause, push for language requiring that consent to assignment not be unreasonably withheld or delayed.
Board Members and Outside Advisors
Board directors, advisory board members, and outside consultants who attend strategy sessions or review financial performance should sign NDAs. Board members in particular see nearly everything: executive compensation, pending litigation, acquisition targets, and long-term competitive strategy. A fiduciary duty to the company already exists, but a signed confidentiality agreement provides an independent contractual basis for enforcement that doesn’t depend on proving a breach of fiduciary duty in court, which is a harder case to win.
Advisory board members occupy a gray area because they often serve informally without a governance role. Their access to sensitive information can be just as deep as a formal director’s, but without a signed NDA, your only protection is whatever informal understanding existed at the time. Formalizing the obligation takes ten minutes and removes the ambiguity.
Unilateral or Mutual: Which Form Applies
The form of the agreement determines what each signer is actually promising. A unilateral NDA protects one side only: one party discloses confidential information, and the other promises not to share it. That’s the standard arrangement when onboarding an employee, hiring a contractor, or pitching to investors. A mutual NDA obligates both sides to keep each other’s information confidential. Joint ventures, co-development partnerships, and merger negotiations almost always call for a mutual agreement because both companies expose sensitive data during the process.
Choosing wrong creates real problems. If you use a unilateral NDA in a situation where both parties share trade secrets, the side that isn’t protected has no contractual remedy if the other leaks. When in doubt, a mutual NDA costs nothing extra and covers both directions.
Who on the Other Side Has Authority to Sign
The most carefully drafted NDA is worthless if the person who signed it lacked authority to bind the organization. Only individuals with actual authority, typically granted by corporate bylaws, a board resolution, or a formal delegation of power, can execute contracts on behalf of a company. In most corporate structures, that means the CEO, and often a Vice President, COO, or CFO as a secondary signer.
Trouble shows up when a mid-level manager signs an agreement based on job title alone. The other party assumes the manager has authority because of their position, which creates a legal concept called apparent authority. Courts sometimes enforce agreements signed under apparent authority, but the outcome is unpredictable and litigating it is expensive for everyone. The simplest prevention is to ask for an authorized signatory list or board resolution before accepting a signature. Many companies designate the Corporate Secretary as the person who maintains those records and can confirm signing authority.
For the party receiving the signed NDA, a quick verification up front is far cheaper than discovering two years later, in the middle of a breach dispute, that the agreement may not be enforceable. If you’re the one signing, make sure your internal delegation of authority is documented and current. An outdated signatory list is almost as bad as none at all.
Execution format rarely raises a separate issue. Federal law treats electronic signatures as legally equivalent to handwritten ones for virtually all business contracts, including NDAs, and provides that a contract cannot be denied legal effect solely because it was formed using an electronic signature.4Office of the Law Revision Counsel. 15 US Code 7001 – General Rule of Validity Platforms like DocuSign or Adobe Sign meet the standard, and the audit trail they generate can actually be stronger evidence than a wet-ink signature if the agreement is later challenged.
The Whistleblower Notice Every Employee or Contractor NDA Needs
Any NDA or confidentiality agreement with an employee or contractor must include a notice about whistleblower immunity, or at minimum cross-reference a company policy document that describes the reporting process for suspected legal violations.2Office of the Law Revision Counsel. 18 US Code 1833 – Exceptions to Prohibitions Under the Defend Trade Secrets Act, an individual cannot be held liable for disclosing a trade secret to a government official or attorney for the purpose of reporting a suspected violation of law, or in a court filing made under seal.
This notice is not optional. If your NDA fails to include it, you lose the ability to recover exemplary damages (up to double the actual damages) and attorney fees in any federal trade secret lawsuit against that employee or contractor.2Office of the Law Revision Counsel. 18 US Code 1833 – Exceptions to Prohibitions The underlying trade secret claim still works, but you leave the most powerful financial remedies on the table. Given that the fix is a single paragraph in the agreement, skipping it is an unforced error.