How to Write an NDA: Clauses, Sample Wording, and Limits

Written and reviewed by the iRunDocs Editorial Team. Last updated: October 2, 2026.

This article is general educational information about non-disclosure agreements in the United States. It is not legal advice, and iRunDocs is not a law firm. Confidentiality rules interact with employment law, whistleblower protections, and state statutes, so talk to a licensed attorney when the information or the relationship is high-stakes.

A non-disclosure agreement, usually called an NDA, is a contract in which one or more people agree to keep certain information confidential and to use it only for a stated purpose. It is one of the most common business documents in the country, and also one of the most commonly copied from a template without much thought. That is a problem, because an NDA that is vague about what is confidential, silent about how long the duty lasts, or written so broadly that a court sees it as a disguised non-compete can fail exactly when you need it.

This guide explains how to write an NDA that does its job. It covers when an NDA is worth using, the difference between one-way and mutual agreements, every clause that matters with sample wording you can adapt, the federal and state rules that limit what an NDA can do, a worked example, and the mistakes that most often weaken these agreements. When you are ready to draft, you can create a non-disclosure agreement with the iRunDocs generator and review the full preview before you pay.

In this guide

• What an NDA does and what it cannot do
• When an NDA is worth using
• One-way, mutual, and multilateral NDAs
• The clauses every NDA needs, with sample wording
• Rules that limit what an NDA can do
• Step by step: drafting and signing an NDA
• Worked example: a product company and a manufacturer
• Common NDA mistakes
• When to involve an attorney
• Frequently asked questions
• Official sources worth checking
• Putting it together

What an NDA does and what it cannot do

An NDA creates a contractual duty of confidentiality. Without one, the person receiving your information may owe you no duty at all, unless some other relationship (employment, a partnership, an attorney-client relationship) or trade secret law already supplies it. With one, you have a written definition of what is protected, a list of the recipient's obligations, and a contract claim if those obligations are broken.

An NDA does several useful things at once:

• It sets expectations before information changes hands. Most people intend to behave well; an NDA tells them exactly what behaving well means for this information.
• It supports trade secret protection. Trade secret law generally protects information only if the owner takes reasonable measures to keep it secret. Requiring NDAs before disclosure is one of the most common reasonable measures.
• It limits use, not just disclosure. A good NDA stops the recipient from using your information for their own benefit, even if they never tell anyone else.
• It creates a paper trail. If a dispute arises, the signed agreement and the record of what was shared under it are central evidence.

It is just as important to understand the limits:

• An NDA does not make public information secret. If something is already widely known, no contract can make it confidential.
• It does not stop independent development. If the other side builds something similar on their own, without using your information, a standard NDA generally does not prevent it.
• It does not override the law. Federal and state rules protect whistleblowers, reports to government agencies, and in many situations discussions of workplace harassment or working conditions. An NDA that tries to forbid those can be unenforceable in that respect and can create legal exposure for the party that drafted it.
• It is only as strong as your ability to prove a breach. Marking documents, logging what you shared, and sharing only what is necessary all matter as much as the contract wording.

When an NDA is worth using

An NDA makes sense whenever you are about to share information that has real value because it is not public, and the other side has no existing duty to keep it confidential. Common situations include:

• Exploring a deal. Discussions about a merger, investment, joint venture, licensing arrangement, or the sale of a business usually start with an NDA before financials and customer data are exchanged.
• Hiring contractors and vendors. Developers, designers, marketers, bookkeepers, and manufacturers often see source code, customer lists, pricing, or processes.
• Employment. Employers commonly include confidentiality terms in offer letters, employment agreements, or a standalone confidentiality agreement.
• Product development. Sharing prototypes, formulas, or designs with potential manufacturers or partners before patent filings or launch.
• Selling or buying a business. Buyers usually must sign an NDA before seeing the seller's books.
• Sensitive personal matters. Individuals sometimes use NDAs for private financial or family information shared with business partners, though these raise their own enforceability questions.

An NDA is often not worth the friction when the information is not actually confidential, when you are pitching an idea to investors who routinely refuse to sign them, or when the other party already owes you a professional duty of confidentiality. Our article on whether to use an NDA before sharing a business idea covers the pitching situation in more depth.

One-way, mutual, and multilateral NDAs

The first drafting decision is who is disclosing and who is receiving.

One-way (unilateral) NDA

Only one party shares confidential information, and only the other party takes on obligations. This is typical when a business shares information with a contractor, a prospective employee, or a potential buyer. It is simpler and keeps the obligations focused.

Mutual (bilateral) NDA

Both parties expect to share confidential information, and both take on the same obligations. Mutual NDAs are common in partnership discussions, joint ventures, and deals where each side reveals its own data. They feel fairer, which can speed up signing, but each party should make sure the obligations it is accepting are ones it can actually comply with.

Multilateral NDA

Three or more parties share information under one agreement. This avoids a web of separate two-party NDAs, but the drafting has to be careful about who can share what with whom.

NDA, confidentiality clause, non-compete, or non-solicitation

These terms get mixed up constantly. A confidentiality clause is simply the NDA's core obligation placed inside a larger contract. A non-compete restricts someone from working in competition with you, which is a far more heavily regulated restriction; California, for example, refuses to enforce most non-competes under its Business and Professions Code section 16600, and many other states limit them. A non-solicitation clause restricts poaching customers or employees. If what you really need is a restriction on competing, an NDA is the wrong tool, and an NDA that is so broad it effectively stops someone from working in their field risks being treated like a non-compete.

NDA types and related restrictions at a glance

Agreement	Who is bound	What it restricts	Typical use
One-way NDA	Only the receiving party	Disclosure and use of the discloser's information	Contractors, vendors, prospective buyers, new hires
Mutual NDA	Both parties equally	Disclosure and use of each side's information	Partnerships, joint ventures, two-way deal talks
Multilateral NDA	Three or more parties	Sharing among all signatories under one set of terms	Consortiums and multi-party projects
Confidentiality clause	Parties to the larger contract	Same core duty, inside another agreement	Service, employment, and supply contracts
Non-solicitation clause	Usually the departing or contracting party	Poaching customers or employees	Employment and contractor relationships
Non-compete	Usually an employee or seller	Working in competition; heavily regulated by state law	Business sales and some employment, where allowed

The clauses every NDA needs, with sample wording

The sample language below shows typical drafting choices. It is illustrative, not a complete agreement, and it should be adapted to your facts. Replace everything in brackets.

Parties and effective date

Name each party with its full legal name. For a business, use the exact entity name and state of formation, not a trade name. State the effective date and, if information was already shared during earlier conversations, consider covering that too.

This Non-Disclosure Agreement is entered into as of [date] (the "Effective Date") between [Disclosing Party legal name], a [state] [entity type] ("Discloser"), and [Recipient legal name], a [state] [entity type] ("Recipient"). This Agreement also covers Confidential Information disclosed by Discloser to Recipient before the Effective Date in connection with the Purpose.

Purpose

The purpose clause is what makes the use restriction meaningful. Without it, the recipient can argue that any use was permitted.

Recipient may use Confidential Information solely to evaluate and discuss a potential [describe the business relationship, for example "manufacturing arrangement for Discloser's product line"] between the parties (the "Purpose") and for no other purpose.

Definition of confidential information

This is the heart of the agreement. A definition that says "all information" is easy to write and hard to enforce. A better definition describes categories and states whether information must be marked.

"Confidential Information" means non-public information disclosed by or on behalf of Discloser, in any form, that is marked or identified as confidential at the time of disclosure, or that a reasonable person would understand to be confidential given its nature and the circumstances of disclosure, including [product designs, source code, formulas, supplier and customer lists, pricing, financial statements, business plans, and marketing strategies].

Marking requirements are a trade-off. Requiring every document to be stamped "confidential" gives the recipient certainty but punishes the discloser for forgetting. The "reasonable person" catch-all in the sample is a common middle ground. If you rely on marking, put a short process for oral disclosures in writing too, such as a follow-up email summarizing what was confidential.

Exclusions

Standard exclusions protect the recipient from liability for information it legitimately had or obtained. Courts and counterparties expect them, and leaving them out can make the NDA look overreaching.

Confidential Information does not include information that Recipient can show by written records: (a) is or becomes publicly available through no fault of Recipient; (b) was lawfully known to Recipient before disclosure without a duty of confidentiality; (c) is lawfully received from a third party without a duty of confidentiality; or (d) is independently developed by Recipient without use of or reference to the Confidential Information.

Obligations of the recipient

Spell out what the recipient must do and not do. The usual set is: keep it confidential, use it only for the purpose, protect it with reasonable care, and share it only with people who need to know.

Recipient shall (a) hold Confidential Information in confidence using at least the same degree of care it uses for its own confidential information of similar importance, and no less than reasonable care; (b) not disclose Confidential Information to any third party except as permitted in this Agreement; and (c) not use Confidential Information for any purpose other than the Purpose.

Permitted disclosures to representatives

Most businesses need to share information internally and with advisors. Allow it, but make the recipient responsible for those people.

Recipient may disclose Confidential Information to its employees, officers, contractors, and professional advisors who need to know it for the Purpose and who are bound by confidentiality obligations at least as protective as this Agreement. Recipient is responsible for any breach of this Agreement by those persons.

Legally required disclosure

Recipients sometimes receive subpoenas or regulatory requests. A good NDA lets them comply while giving the discloser a chance to object.

If Recipient is required by law, regulation, or court order to disclose Confidential Information, Recipient shall, where legally permitted, give Discloser prompt written notice so Discloser may seek a protective order, and shall disclose only the portion legally required.

Protected rights carve-out

This clause is increasingly important. It confirms that the NDA does not stop anyone from doing what the law protects, such as reporting possible violations to a government agency.

Nothing in this Agreement prohibits or restricts any person from reporting possible violations of law to, filing a charge with, or participating in an investigation by any government agency, from making disclosures protected under whistleblower laws, or from exercising any right that cannot be waived by contract.

Defend Trade Secrets Act immunity notice

Under the federal Defend Trade Secrets Act, an employer that wants to keep the right to recover exemplary damages and attorney fees against an employee in a trade secret case must give notice of the Act's whistleblower immunity in any contract with that employee governing trade secrets or confidential information. The statute treats contractors and consultants as employees for this purpose. The notice can also be given by cross-reference to a policy document. A short version looks like this:

Notice under 18 U.S.C. section 1833(b): An individual shall not be held criminally or civilly liable under any federal or state trade secret law for the disclosure of a trade secret that is made in confidence to a federal, state, or local government official, directly or indirectly, or to an attorney, solely for the purpose of reporting or investigating a suspected violation of law, or that is made in a complaint or other document filed in a lawsuit or other proceeding, if such filing is made under seal. An individual who files a lawsuit for retaliation by an employer for reporting a suspected violation of law may disclose the trade secret to the individual's attorney and use the trade secret information in the court proceeding, if the individual files any document containing the trade secret under seal and does not disclose the trade secret except pursuant to court order.

Term and survival

There are two different time periods to think about: how long the parties will be sharing information, and how long the duty to protect it lasts afterward. For ordinary business information, a confidentiality period of a few years after disclosure is common. Trade secrets are different, because their value depends on staying secret indefinitely, so many NDAs protect trade secrets for as long as they remain trade secrets under applicable law.

This Agreement covers disclosures made during the [one]-year period after the Effective Date. Recipient's obligations continue for [three] years after the last disclosure, except that obligations for any Confidential Information that constitutes a trade secret continue for as long as it remains a trade secret under applicable law.

Return or destruction

When the discussions end, the recipient should return or destroy the information. Practical carve-outs for automatic backups and legal hold requirements make the clause easier to comply with.

Within [ten] days after Discloser's written request, Recipient shall return or destroy all Confidential Information and confirm in writing that it has done so, except that Recipient may retain copies in automatic electronic backups or as required by law, which remain subject to this Agreement.

No license, no warranty, no obligation to proceed

These clauses prevent misunderstandings. Sharing information is not a license to use it, the discloser is not promising the information is accurate, and neither side is committed to a deal.

All Confidential Information remains the property of Discloser. No license or other right is granted except the limited right to use Confidential Information for the Purpose. Confidential Information is provided "as is" without warranty. Neither party is obligated to enter into any further agreement.

Remedies

Money damages are often hard to prove after a leak, so NDAs typically confirm that the discloser can ask a court for an injunction. Courts still decide whether to grant one; the clause supports the request but does not guarantee it.

Recipient acknowledges that unauthorized use or disclosure of Confidential Information may cause irreparable harm for which monetary damages would be an inadequate remedy, and that Discloser may seek injunctive relief in addition to any other remedies available at law or in equity.

Governing law, venue, and signatures

Choose the state whose law governs and where disputes will be heard. Electronic signatures are generally valid for NDAs under the federal ESIGN Act and the state laws based on the Uniform Electronic Transactions Act, so you do not normally need wet signatures or a notary.

Rules that limit what an NDA can do

Several legal developments over the past decade restrict confidentiality terms, especially in the workplace. You do not need to memorize them, but any NDA used with employees or in a settlement should be checked against them.

Federal whistleblower and agency reporting protections

Beyond the Defend Trade Secrets Act notice above, federal agencies take a dim view of agreements that discourage reporting. The Securities and Exchange Commission's Rule 21F-17, for example, prohibits taking action to impede someone from communicating with the SEC about a possible securities law violation, and the SEC has brought enforcement actions over confidentiality language that did so. A protected-rights carve-out like the one above is the standard safeguard.

The Speak Out Act

The federal Speak Out Act, enacted in December 2022, makes nondisclosure and non-disparagement clauses agreed to before a dispute arises unenforceable with respect to later disputes involving sexual assault or sexual harassment. That affects NDAs and confidentiality clauses signed at hiring.

Labor law and non-supervisory employees

The National Labor Relations Board's 2023 decision in McLaren Macomb held that broad confidentiality and non-disparagement terms in severance agreements offered to employees covered by the National Labor Relations Act can be unlawful when they restrict employees' rights to discuss working conditions. The decision does not apply to supervisors and managers in the same way, and labor law positions can shift with the Board's composition, so employers should check current guidance.

State laws

A number of states restrict confidentiality provisions related to harassment, discrimination, or other unlawful workplace conduct, particularly in employment and settlement agreements. California and Washington are prominent examples, and California requires specific carve-out language in certain employment agreements. Because these laws vary and change, an employer using NDAs with staff in more than one state should have them reviewed for each state.

Trade secret law works alongside the NDA

The NDA is a contract. Trade secret law is a separate source of protection: the federal Defend Trade Secrets Act and state trade secret statutes, most of which are based on the Uniform Trade Secrets Act. Trade secret claims generally require that the information derive value from being secret and that the owner took reasonable measures to protect it. An NDA helps prove those reasonable measures, but you also need practical controls such as access restrictions and marking.

Step by step: drafting and signing an NDA

1. 1Decide what you will actually share. List the categories of information, and ask whether all of it needs to be shared at this stage. Sharing less is the easiest protection.
2. 2Choose one-way or mutual. If both sides will disclose, use a mutual NDA so each party's obligations are the same.
3. 3Identify the parties precisely. Use full legal names and confirm the person signing has authority to bind a business.
4. 4Write a specific purpose. Describe the deal or project in one sentence so the use restriction has teeth.
5. 5Define confidential information by category, add a reasonable catch-all, and decide on marking.
6. 6Include the standard exclusions and the legally required disclosure clause.
7. 7Add protected-rights language and, for employees or contractors, the DTSA immunity notice.
8. 8Set the time periods for disclosures and for the confidentiality duty, with separate treatment for trade secrets.
9. 9Cover return or destruction, no license, remedies, governing law, and venue.
10. 10Sign before sharing anything sensitive. Collect signatures from both sides, keep the executed copy, and keep a log of what you disclose under it.

If you would rather work through those decisions one field at a time, the iRunDocs NDA generator walks you through each clause with a live preview of the finished PDF.

Worked example: a product company and a manufacturer

Here is a simplified illustration with fictional businesses.

The situation. Harbor Lane Goods LLC, a small company in Oregon, has designed a new insulated food container. It wants quotes from Brightline Molding Inc., a manufacturer in Ohio. To quote accurately, Brightline needs the CAD files, material specifications, and target unit cost. Brightline will not be sharing anything sensitive of its own beyond its pricing, which it considers confidential as well.

The choice of NDA. Because both sides will share something confidential (designs one way, pricing the other), they use a mutual NDA.

The purpose. "To evaluate and discuss Brightline's potential manufacture of Harbor Lane's insulated container product line." That sentence matters later: Brightline cannot use Harbor Lane's mold design to make containers for another customer, because that use is outside the purpose.

The definition. The NDA lists product designs, CAD files, material specifications, unit cost targets, supplier identities, and pricing as examples of confidential information, plus a reasonable-person catch-all. The parties agree that oral disclosures in calls will be summarized by email within a week.

The time periods. Disclosures are covered for one year. The confidentiality duty lasts three years after the last disclosure, except that the product designs, which Harbor Lane treats as trade secrets until launch, stay protected for as long as they qualify as trade secrets.

Practical steps. Harbor Lane shares the CAD files through a link that expires, labels each file "Confidential - Harbor Lane Goods," and keeps a simple log of what it sent and when. When negotiations end without a deal, Harbor Lane sends a written request under the return-or-destruction clause, and Brightline confirms in writing that it deleted the files except for automatic backups.

What the example shows. The NDA did not have to be long. What made it effective was a specific purpose, a concrete definition, sensible time periods, and disciplined behavior around the contract.

Common NDA mistakes

• Defining confidential information as "everything." Overbroad definitions invite disputes and can look unreasonable to a court.
• Leaving out the purpose. Without it, the use restriction is weak.
• Forgetting the standard exclusions. Their absence makes the agreement look one-sided and can complicate enforcement.
• No end date and no trade secret distinction. Some courts are skeptical of indefinite confidentiality periods for ordinary business information, while trade secrets may need protection beyond a fixed term.
• Using an NDA to block competition. If you need a non-compete or non-solicitation clause, draft one deliberately and check your state's rules.
• Trying to silence protected reports. Clauses that forbid reporting to agencies or discussing harassment can be unenforceable and can draw regulatory attention.
• Skipping the DTSA notice for employees and contractors. It costs a paragraph, and leaving it out can forfeit certain remedies.
• Signing after the information is shared. Get the signature first, or at least cover prior disclosures expressly.
• Wrong party names. An NDA signed by an individual when the business is the real recipient, or naming a trade name instead of the legal entity, can create enforcement problems.
• No record of what was shared. Without a log or marked documents, proving that specific information was covered becomes much harder.

When to involve an attorney

A generator-built NDA is a solid fit for routine vendor, contractor, and early deal discussions. Bring in a lawyer when the information is core to the value of your business, when the other side is a much larger company with its own heavily negotiated form, when the NDA is part of employment or a settlement agreement, when parties are in different countries, or when you are actually trying to restrict competition or solicitation. A lawyer can also help you build the practical side of trade secret protection, which matters as much as the contract.

Frequently asked questions

Is an NDA legally binding?

Generally yes, if it meets ordinary contract requirements: an agreement between parties with capacity, consideration, and terms definite enough to enforce. Courts may refuse to enforce provisions that are unreasonably broad or that conflict with law or public policy.

How long should an NDA last?

It depends on how long the information stays valuable. For ordinary business information, a few years after disclosure is common. For trade secrets, many agreements protect the information for as long as it remains a trade secret. Pick a period you can justify if challenged.

What is the difference between a mutual NDA and a one-way NDA?

In a one-way NDA, only one party discloses and only the other party takes on obligations. In a mutual NDA, both parties disclose and both are bound by the same terms.

Do NDAs need to be notarized?

Generally no. NDAs are ordinary contracts, and they are typically valid when signed by the parties, including with electronic signatures.

Can an NDA stop someone from reporting illegal activity?

No. Federal law and many state laws protect reports to government agencies and certain other disclosures, and an agreement cannot waive those rights. Including a protected-rights carve-out is the standard approach.

What happens if someone breaks an NDA?

The disclosing party can bring a breach of contract claim and may ask a court for an injunction to stop further use or disclosure. If the information is a trade secret, trade secret claims may also be available. Results depend heavily on the evidence of what was shared and how it was misused.

Should I ask investors to sign an NDA before a pitch?

Many professional investors decline to sign NDAs for early pitches. A common approach is to share a non-confidential summary first and reserve truly sensitive details for later stages, when an NDA is more customary.

Does an NDA need consideration?

Like other contracts, an NDA generally needs consideration. In business deals, the mutual exchange of information or the opportunity to evaluate a transaction usually serves. For employees, rules vary by state, especially for restrictive covenants, so check local law.

Can I write my own NDA?

Yes. Many businesses use well-built templates or generators for routine NDAs. The key is choosing the right type, defining the information and purpose clearly, and including the exclusions and protected-rights language described above.

Official sources worth checking

For current primary sources, look at the federal Defend Trade Secrets Act (18 U.S.C. section 1836 and the immunity provision in section 1833(b)), the federal Speak Out Act, the Securities and Exchange Commission's whistleblower rules, the National Labor Relations Board's published guidance on confidentiality and non-disparagement terms, and your state's trade secret statute and employment laws. Laws and agency positions change, so read the current versions rather than relying on any summary, including this one.

Putting it together

The best NDAs are short, specific, and realistic. Decide what you are sharing and why, choose one-way or mutual, define the information by category, include the standard exclusions and protected-rights language, set sensible time periods, and sign before anything sensitive changes hands. When you are ready, create your NDA on iRunDocs and preview it free before you download. For a shorter overview of protecting business secrets, see our NDA guide.

Not legal advice: this article provides general information about non-disclosure agreements and does not create an attorney-client relationship. Laws change and your facts matter, so consult a licensed attorney for advice about your situation.