NDA Clauses Explained in 12 Terms That Matter

An NDA clause is a single provision in a non-disclosure agreement that sets one rule, such as what counts as confidential, how long protection lasts or what happens after a breach. Twelve clauses do most of the work. The definition, exclusions, use limits, permitted disclosures, return or destruction, term, survival, remedies and governing law matter in every NDA.

The rest of a typical NDA is boilerplate that rarely causes trouble. This guide walks through the twelve clauses in the order they usually appear, explains what each one does in plain English, and lists what to check when you are drafting your own or reviewing the other side's paper. The examples follow the structure of the NonDisclosures NDA template, so every clause described here exists in the actual document.

The 12 clauses at a glance

1. Parties and Purpose

The opening names the parties and, in a well drafted NDA, defines the Purpose, meaning the reason information is being shared, such as evaluating a partnership or a possible acquisition. The Purpose matters more than it looks, because the core obligation in most NDAs is to use information only for the Purpose. A vague Purpose like "business discussions" gives the recipient room to argue that almost any use was allowed.

Also check whether affiliates and Representatives are covered. Our templates define Representatives as the people who may receive information on a need to know basis, meaning affiliates plus directors, officers, managers, employees and professional advisors such as attorneys and accountants, and make the recipient responsible for what they do.

2. Definition of Confidential Information

This is the heart of the agreement. Definitions usually fall into three styles.

• Broad. Everything disclosed, in any form, whether marked or not.
• Standard. Information marked confidential, or that a reasonable person would understand to be confidential from its nature and the circumstances, including oral and visual disclosures.
• Narrow. Only information marked confidential at the time, with oral disclosures confirmed in writing within a short window.

A narrow definition puts the burden on the discloser to mark everything, which busy teams rarely do. A broad one can sweep in information the recipient already has. The standard version is the most common middle ground. Our template also treats the fact that discussions are happening as confidential, and covers notes and analyses the recipient prepares from the information.

3. Exclusions

Almost every NDA excludes four categories: information that is or becomes public without a breach, information the recipient already knew, information developed independently without using the disclosed material, and information received from a third party with no duty of confidentiality. These exclusions are fair and expected. A counterparty NDA without them is a red flag.

The details matter. Our template says information is not public just because pieces of it are public or could be assembled from public sources with significant effort, and it puts the burden of proving an exclusion on the recipient, with written records. If you are the recipient, keep those records, especially for independent development.

4. Use and non-disclosure obligations

This clause sets the actual duties. In our templates they are use only for the Purpose, no disclosure except as permitted, protection with at least the care the recipient uses for its own similar information and never less than reasonable care, no reverse engineering of software or samples, and prompt notice of any unauthorized use or disclosure. Investor and M&A versions add a reminder about securities laws, since material non-public information about a public company restricts trading.

Watch for drafts that impose a specific security standard you cannot meet, or that require you to notify the other side within an unrealistic number of hours.

5. Permitted and compelled disclosures

The recipient almost always needs to share information internally, with lawyers, accountants or lenders. This clause allows that for Representatives who need to know, have been told the information is confidential and are bound by duties at least as protective, while keeping the recipient liable for their breaches.

The compelled disclosure part covers subpoenas, court orders and regulator requests. A good version requires prompt notice where legally permitted, so the discloser can seek a protective order, and limits disclosure to what counsel says is legally required. Investor and bidder forms often add a carve-out for routine regulatory examinations that do not target the discloser.

6. Return or destruction

At the end of the relationship, or on request, the recipient must return or destroy the information. Our generator lets you choose between return or destroy and destroy with written certification. A realistic clause also exempts automatic backups and copies kept under law or a genuine retention policy, as long as those copies are not accessed, and says retained copies stay confidential for as long as they are kept. Employee versions work differently: company devices and documents go back, and personal copies are deleted, except documents about the employee's own pay and benefits.

7. No license and no warranty

This short clause says sharing information does not transfer ownership or grant any license under patents, copyrights or other rights, and that information is provided as is. It protects the discloser from implied license arguments and protects the recipient from claims it relied on information that turned out to be wrong. If a counterparty draft adds an IP assignment here, stop and read carefully. An NDA is not the place to transfer ownership of anything the recipient creates.

8. Term

The term is the window during which disclosures are covered. Our generator offers 1, 2, 3 or 5 years, and either party can end the term early by notice, which stops future sharing without releasing duties for information already disclosed. Many people confuse the term with how long secrecy lasts. That is the next clause.

9. Survival

The survival or confidentiality period is how long the recipient must keep information secret after the term ends. Our templates set it as a separate number of years after the term, and keep trade secrets protected for as long as they qualify as trade secrets under law. That distinction matters, because a fixed period on genuine trade secrets can weaken the argument that you took reasonable steps to keep them secret. A detailed walkthrough of typical numbers by deal type is in our guide on how long an NDA should last.

Be cautious with perpetual confidentiality for all information. Some courts treat an unlimited duty for ordinary business information as unreasonable, and many counterparties will push back.

10. Optional covenants

These clauses are not required, and each one changes the deal.

Non-solicitation

Stops a party from recruiting the other side's employees it met through the deal. Ours defaults to 12 months and carves out general job postings and hiring people who respond to them. Some states limit employee non-solicits, so check local law.

Residuals

Allows use of general ideas and know-how retained in unaided memory. It favors the recipient. If you accept one, limit it, for example by excluding specific financial, customer and pricing data and anything identified as a trade secret.

Standstill

Common in M&A and investor NDAs. It bars the recipient from buying shares or making a hostile bid for a period, usually with a fall-away if the company agrees to sell to someone else.

No-contact

Requires all communication to go through designated contacts and bars contacting employees, customers or suppliers about the deal, while allowing ordinary course business contacts.

The covenant to watch for is the one that is not labeled. A clause that says the recipient will not "engage in any business that uses or competes with" the disclosed information can work like a non-compete. That is a common source of disputes, discussed in our article on NDAs and non-competes.

11. Remedies

Because money rarely fixes a leak, NDAs usually state that unauthorized disclosure may cause irreparable harm and that the discloser can seek an injunction without posting a bond, to the extent the law allows. Courts make their own decision on injunctions, so this language supports a request rather than guaranteeing one. Be wary of liquidated damages clauses with large fixed amounts, and of one-sided attorney fee provisions.

12. Governing law and venue

This clause picks the state law that applies and the courts that hear disputes. Delaware is a common neutral choice, and our generator defaults to it while allowing any US state. A counterparty that picks its own home state, a foreign country or mandatory arbitration in a distant city is shifting cost and leverage. Employee and contractor versions also include a local law clause, because some states require that their own law and courts apply to people who live and work there.

Clauses that must not be missing from employee NDAs

Two provisions are specific to agreements with individuals. First, a protected activity clause confirming the person can still report possible violations to agencies such as the SEC, EEOC, NLRB or OSHA, discuss wages and working conditions where the law protects it, and testify truthfully. Second, the Defend Trade Secrets Act immunity notice. Under federal law, an employer that omits the notice from an agreement governing trade secrets loses the right to recover exemplary damages and attorney fees from an employee under the DTSA. Both appear automatically in our employee NDA template and in the contractor version.

Also keep in mind the federal Speak Out Act, which makes pre-dispute non-disclosure clauses unenforceable for sexual assault and sexual harassment disputes, and the state laws that go further.

The boilerplate you can usually skim

The general provisions section covers entire agreement, amendments in writing, assignment, severability, notices, counterparts and electronic signatures, independent parties, no third-party beneficiaries, export compliance and interpretation. These rarely cause disputes, but two deserve a glance. Assignment decides whether the NDA follows a business that is sold. The counterparts and electronic signatures clause confirms that e-signatures count, which matters when you sign online under the ESIGN Act and UETA.

How to review an NDA clause by clause quickly

1. Read the Purpose and definition together. Do they describe what you actually plan to share?
2. Confirm all four exclusions are present.
3. Check term and survival as two separate numbers, and how trade secrets are treated.
4. Search for non-solicit, non-compete, residuals, standstill and assignment of IP.
5. Look at governing law, venue and any arbitration clause.
6. For individuals, confirm the protected activity language and DTSA notice.

If you review a lot of counterparty NDAs, AI contract review speeds this up. NonDisclosures returns a summary, a risk score from 0 to 100 and flags rated low, medium or high, each with the issue, why it matters and a suggested fallback, covering one-sided obligations, perpetual terms, missing carve-outs, hidden non-competes or IP assignments, unusual jurisdictions, residuals and missing return or destroy language.

To see all twelve clauses in a real document, open the generator, pick the agreement type, term, confidentiality period and governing state, and add only the optional covenants you need. Start from the NDA template generator, or compare the mutual NDA template if both sides will share information.

This article is general information about US practice, not legal advice. NonDisclosures is a software tool, not a law firm. Laws differ by state, so have a licensed attorney review agreements that matter.