An NDA is a contract that legally binds someone to keep your information confidential. You need one whenever you are about to share something that would genuinely damage your business if a competitor, a client, or a former employee repeated it — pricing formulas, customer lists, source code, product roadmaps, or unreleased financials. Most small businesses need an NDA far less often than they assume, and when they do need one, they sign whatever the other side sent without reading it. This guide covers what an NDA actually does, the five clauses that decide whether one is fair, and the situations where you can safely skip it.
A non-disclosure agreement (NDA) is a legally binding contract in which one or both parties agree not to disclose specified confidential information to anyone outside the agreement.
That is the entire mechanism. An NDA does not make information secret — it creates a legal consequence for sharing it. If the information was already public, or the other side already knew it before you spoke, an NDA cannot claw that back.
What an NDA Actually Protects
An NDA protects whatever the agreement defines as “confidential information” — and nothing else. That definition is the most important paragraph in the document, because everything else in the contract hangs off it. In practice, small business NDAs typically cover:
- Customer, client, and supplier lists
- Pricing, margins, and cost structures
- Product roadmaps and unreleased features
- Source code, formulas, recipes, and manufacturing processes
- Financial statements, cap tables, and fundraising plans
- Marketing strategy and campaign performance data
Some of this may also qualify as a trade secret, which carries its own legal protections independent of any contract you sign. The Legal Information Institute at Cornell Law School defines a trade secret as information that derives economic value from not being generally known, and that the owner takes reasonable steps to keep secret. An NDA is one of those reasonable steps, which is part of why they matter even when you never intend to enforce one.
The Two Types of NDA: Mutual vs. One-Way
There are only two structures, and knowing which one you have been handed tells you a great deal about the other side’s expectations.
A one-way NDA (also called unilateral) binds only one party. One side discloses, the other side promises silence. This is standard when you hire a contractor, bring on a freelancer, or share a brief with an agency.
A mutual NDA (also called bilateral) binds both parties, because both expect to share something sensitive. This is standard for partnership discussions, integrations, acquisition talks, and joint ventures.
If you are handed a one-way NDA but you will also be sharing your own pricing, roadmap, or customer information during the conversation, ask for it to be made mutual. That request is routine, takes one email, and is rarely refused. Signing a one-way NDA when information is genuinely flowing both directions leaves you carrying all of the obligation and none of the protection.
When You Actually Need an NDA
You need an NDA when the specific information you are about to disclose has real commercial value and is not already public. In day-to-day small business operations, that usually means one of these five moments:
- Due diligence. Before sharing financials, contracts, or customer data with a potential buyer, lender, or investor.
- Contractor onboarding. Before giving a freelancer or agency access to your systems, customer records, or codebase.
- Partnership talks. Before exchanging roadmaps, pricing, or integration plans with another company.
- Manufacturing and supply. Before letting a supplier or manufacturer see a design, specification, or formula.
- Employee onboarding. When hiring someone who will handle proprietary processes or sensitive customer information.
Five Clauses That Decide Whether an NDA Is Fair to Sign
Most NDAs are three to five pages, and most of it is boilerplate. These five clauses are where the actual risk lives.
1. The definition of confidential information
Watch for definitions broad enough to cover everything you learn, including things you already knew or could work out independently. A fair definition is limited to information marked confidential, or information a reasonable person would understand to be confidential given the circumstances.
2. The term
Two dates matter and they are often confused: how long the agreement stays in force, and how long your confidentiality obligation survives after it ends. Two to five years is typical for ordinary commercial information. Indefinite terms are worth questioning unless genuine trade secrets are involved.
3. Permitted disclosures and carve-outs
A reasonable NDA lets you disclose information that becomes public through no fault of yours, that you already possessed, that you develop independently, or that a court compels you to produce. If those four carve-outs are missing, the agreement is more aggressive than standard.
4. Return or destruction of materials
Many NDAs require you to return or destroy all confidential material on request. Check whether this is operationally possible for you. If the material sits in email archives or automated backups, an absolute destruction obligation is one you will breach the moment you sign it.
5. Governing law and jurisdiction
This decides where you would have to defend a claim. An NDA governed by the law of a state on the other side of the country converts a minor dispute into an expensive one. For routine agreements, pushing for your own state is a reasonable and common request.
The most common problem in NDAs sent to small businesses is not any single clause — it is the combination of an indefinite term with an overbroad definition of confidential information. Separately, each is negotiable. Together they create an obligation you can never actually discharge, because you cannot demonstrate you have stopped holding information that was never clearly defined in the first place.
When You Can Skip the NDA
Reflexively sending an NDA slows deals down and signals inexperience. You can usually skip it when:
- The information is already public. Anything on your website, in your pricing page, or in a press release cannot be made confidential retroactively.
- The conversation is still exploratory. Early calls that stay at the level of “what do you do?” rarely involve anything worth protecting.
- You are pitching most venture investors. Institutional investors typically decline to sign NDAs at the pitch stage, and insisting is usually counterproductive.
- A broader contract already covers it. Most master services agreements and employment contracts contain confidentiality provisions. A second NDA on top can create conflicting obligations.
That last point is worth dwelling on. Layering an NDA on top of an existing agreement that already addresses confidentiality is one of the easiest ways to end up with two documents that define the same term differently and specify different survival periods. When that happens, the ambiguity works against whoever needs to enforce it.
What to Check Before You Sign an NDA
Before you sign, confirm you can answer these questions from the document itself: What exactly counts as confidential? How long am I bound? What am I allowed to disclose anyway? What do I have to hand back, and can I actually do it? Where would a dispute be heard? If the agreement does not answer all five clearly, that is the list to send back to the other side.
You can work through that manually with the checklist above, and our pre-signing checklist covers the same ground for any agreement type. ContractClerk does the same pass automatically — it reads the NDA clause by clause, flags the terms that fall outside normal ranges, explains each one in plain English, and gives you language to negotiate with. NDAs are one of roughly twenty contract types it covers, and a review takes under thirty seconds.
Most NDAs run for two to five years, though the agreement period and the confidentiality obligation are often two different lengths. Commercial information usually warrants two to three years. Indefinite obligations are typically reserved for genuine trade secrets, and are worth questioning anywhere else.
You can use a template for routine, low-stakes situations such as onboarding a freelancer. Have an attorney draft or review the agreement when the information is central to your business, when the other party is much larger than you, or when the deal value is significant. The cost of review is far lower than the cost of an unenforceable agreement.
Yes. Electronic signatures are legally valid for NDAs in the United States under the federal ESIGN Act and state versions of UETA. A signature captured through a reputable e-signature platform is as enforceable as ink on paper, and generally produces a better audit trail.
The disclosing party can sue for breach of contract and seek damages, an injunction to stop further disclosure, or both. The practical difficulty is proof: you must show the information was covered by the agreement, that the other party disclosed it, and that the disclosure caused you measurable harm. This is precisely why a precise definition of confidential information matters so much.
Usually not, and asking can work against you. Most institutional venture investors decline to sign NDAs at the pitch stage because they review many similar companies. Share your market, team, and traction freely, and hold back the specific technical details that constitute your actual edge until diligence, when an NDA is standard.
The Bottom Line on NDAs
An NDA is a narrow tool that does one job well: it creates a consequence for sharing information you have clearly defined as confidential. It is not a substitute for judgment about what you disclose, and it cannot protect anything that was already public. The businesses that get the most out of NDAs are the ones that use them selectively and read the five clauses above before signing, rather than the ones that send a template to everybody they meet.
This article is general information, not legal advice, and does not create an attorney-client relationship. Contract law varies by state and by situation. For high-stakes agreements, have a licensed attorney review the document.