What Actually Belongs in an NDA? A Practical Guide for 2026

Why almost every business conversation starts with an NDA

Whether you're evaluating a partnership, bringing on a contractor, or discussing a potential acquisition, the first document that usually gets exchanged is a Non-Disclosure Agreement (NDA). Its job is simple: let two parties share sensitive information without either side losing control of it. But a surprising number of NDAs in circulation are missing basic protections, or are so generic they don't actually cover the situation at hand.

Mutual vs. one-way — pick the right shape first

The first decision is structural: is this a one-way NDA, where only one party discloses confidential information (e.g. you're sharing your business plan with a potential investor), or a mutual NDA, where both sides will share sensitive information with each other (e.g. two companies exploring a joint venture)? Using a one-way NDA when the relationship is actually mutual leaves one party's information unprotected — always match the structure to the real flow of information.

The clauses that actually do the work

Definition of confidential information

This clause sets the boundary of what's protected. Vague definitions ('anything discussed') tend to be hard to enforce; specific-but-broad language covering business plans, financials, customer data, technical specifications, and source code tends to hold up better.

Standard exclusions

Every reasonable NDA excludes information that: was already public, was already known to the receiving party before disclosure, was independently developed without reference to the disclosed information, or was rightfully received from a third party. Without these exclusions, the agreement can accidentally restrict information the receiving party already legitimately had.

Obligations of the receiving party

This is the operational core — what the receiving party must actually do: keep the information confidential, use it only for the stated purpose, limit internal access to people who need it, and notify the disclosing party of any unauthorized use they discover.

Term and duration

How long do the obligations last? Options typically range from a fixed number of years (2, 3, or 5 is common) to indefinite. Longer terms make sense for trade secrets that won't lose value over time; shorter terms are often more appropriate — and easier to negotiate — for time-sensitive business information.

Remedies for breach

Because monetary damages are often hard to calculate for a confidentiality breach (how do you price a leaked business plan?), most NDAs include language allowing the non-breaching party to seek injunctive relief — a court order stopping further disclosure — in addition to any damages.

Governing law

Left blank in a template, filled in before signing: which jurisdiction's laws govern the agreement, and where disputes will be resolved.

A template is a starting point, not a finished contract

Generating a structured draft that already includes these standard clauses saves significant time compared to starting from scratch — but it's still a template. High-value disclosures, cross-border relationships, or anything with real litigation risk should always go through a lawyer before signature. Think of a generated NDA template as the first draft that gets your negotiation 80% of the way there, not the final word.