Most business owners sign non-disclosure agreements regularly, often quickly and without detailed review. The counterparty sends over an NDA, it looks standard, everyone is eager to get the conversation started, and the NDA gets signed without serious scrutiny. This approach creates real risk. NDAs vary substantially in the obligations they create and the protections they provide, and the difference between a well-drafted NDA and a problematic one is rarely visible from a quick skim of the title page. This guide provides a structured framework for reviewing any NDA before you sign it, so that you understand precisely what you are committing to and what you are and are not getting in return.

Why Careful Review Matters More Than You Think

There is a common assumption that NDAs are interchangeable — that one NDA is essentially the same as another and that reviewing them carefully is an unnecessary investment of time. This assumption is wrong and can be costly. NDAs differ in ways that significantly affect your legal position: some create perpetual obligations while others expire in two years; some define confidential information so broadly that they essentially prevent you from discussing anything related to the counterparty’s business, while others are precisely scoped; some include non-solicitation or non-compete provisions buried in the boilerplate that go far beyond pure confidentiality; some specify unfavorable dispute resolution terms that would require you to litigate in a distant jurisdiction at enormous expense.

Taking twenty to thirty minutes to read an NDA carefully before signing is almost always time well spent, particularly when the business relationship it governs involves genuinely sensitive information or significant commercial stakes. The habit of careful NDA review also makes you a better negotiator — you are far more likely to identify and push back on problematic provisions when you are reading for substance rather than just looking for the signature line.

Step 1: Identify the Parties and the Direction of the Agreement

The first thing to verify when reviewing any NDA is that the parties are correctly identified. Confirm that the agreement names the correct legal entities — not just informal trade names or individual names when the contracting party should be a business entity. If you are signing on behalf of your LLC or corporation, make sure the agreement names the entity, not you personally, unless you specifically intend to assume personal obligations.

Next, determine the structure of the agreement: is it unilateral (one party is the disclosing party and one is the receiving party) or mutual (both parties are both disclosing and receiving)? If the NDA is unilateral, identify which role you are playing. If you are the receiving party in a unilateral NDA, you are taking on all the obligations with none of the protection — which may be entirely appropriate if you are genuinely only receiving information, but which means you should scrutinize the obligations provisions carefully since you are the one bound by them. If you are the disclosing party in a unilateral NDA, you want to ensure the agreement adequately protects the information you are sharing.

If the agreement is mutual but the actual information flow in your situation is one-directional, note this and consider whether the mutual structure appropriately reflects the reality of the exchange. Signing a mutual NDA when you are the only disclosing party does not hurt you, but it may create unexpectedly binding obligations on your ability to discuss anything that the other side characterizes as their confidential information.

Step 2: Read the Definition of Confidential Information Carefully

The definition of confidential information is the most important substantive provision in the agreement, and it deserves the most careful reading. As the receiving party, you need to understand with precision what you are agreeing to keep secret. As the disclosing party, you need to confirm that everything you intend to protect is actually covered.

Ask yourself several specific questions as you read this provision. First, is the definition specific enough that you would know, in any given situation, whether a particular piece of information is covered? Vague definitions like “any information disclosed by either party” without limiting principles create obligations you cannot practically manage. Second, does the definition cover the information you actually care about? If you are disclosing source code, does the definition specifically cover code? If you are sharing financial projections, are financial data explicitly included? Third, does the definition cover the formats in which information will actually be shared — oral, electronic, written, demonstrated? If the NDA only covers written materials and most of your discussions will be verbal, there is a gap. Fourth, does the definition require any formalities like marking documents as confidential or confirming oral disclosures in writing? If so, are those formalities practical in the context of how you actually operate?

Step 3: Verify the Standard Exclusions Are Present

Every professionally drafted NDA should include the five standard exclusions from confidentiality: publicly known information, previously known information, information that becomes public through no fault of the receiving party, information received from entitled third parties, and independently developed information. If any of these exclusions are absent, the agreement may be overreaching — and depending on which exclusions are missing, it may be difficult or impossible to comply with.

Pay particular attention to the independent development exclusion if you are a service provider who works with multiple clients in the same industry. If this exclusion is absent or narrowly drafted, you may be agreeing to confidentiality obligations that would prevent you from developing similar solutions for other clients based on your own general knowledge and expertise, which could significantly affect your business.

Also look for the compelled disclosure provision — the clause that addresses what happens if you receive a court order or subpoena requiring you to produce confidential information. This provision should allow you to comply with legal obligations but should require you to notify the disclosing party in advance (if legally permitted) so they can seek a protective order. If this provision is absent and you are later served with legal process requiring disclosure of information covered by the NDA, you may face a conflict between your legal obligations and your NDA obligations without a clear resolution mechanism.

Step 4: Understand the Permitted Use Provision

The permitted use provision defines the specific purpose for which you are authorized to use the confidential information. This is distinct from — and often more important than — the non-disclosure obligation. Read this provision carefully and make sure the stated purpose accurately reflects how you will actually need to use the information. If the purpose is drafted too narrowly, you may find yourself in breach simply by using the information for a purpose that is entirely within the spirit of the relationship but falls slightly outside the literal language of the permitted use.

Conversely, if the purpose is extremely broad — “evaluating any potential business opportunity” — the agreement provides weaker protection from the disclosing party’s perspective because the receiving party could claim that virtually any use of the information is within the broad permitted purpose. A well-balanced purpose provision is specific enough to give the agreement real teeth, but not so narrow that it creates a trap for reasonable use.

Step 5: Check the Duration Carefully

Identify the term of the agreement and determine when it begins and when it ends. Some NDAs begin on the effective date; others begin running from the date of each disclosure. Some have a fixed term of one, two, or five years; others purport to run indefinitely. For the categories of information being protected, ask whether the stated duration is reasonable: is it long enough to cover the period during which the information will genuinely be sensitive, and not so long as to be unreasonable?

Be particularly attentive to NDAs that purport to be perpetual for all categories of information, not just trade secrets. Courts may decline to enforce indefinite obligations for information that eventually loses its commercial sensitivity, and you should push back on any obligation that asks you to keep information confidential forever without distinction between genuinely proprietary information and information that will become public or obsolete.

Also check whether the duration clause differentiates between trade secrets (which may appropriately have indefinite protection) and other confidential information (which should have a defined term). The most defensible NDAs make this distinction explicitly; an agreement that treats all information as subject to the same indefinite obligation is more likely to face an enforceability challenge.

Step 6: Identify Any Non-Compete or Non-Solicitation Provisions

One of the most important things to look for when reviewing an NDA — particularly one presented by a potential employer, a major commercial partner, or a larger company — is the presence of non-compete or non-solicitation provisions buried within what appears to be a straightforward confidentiality agreement. These provisions restrict your ability to compete with the other party or to contact their employees and customers, and they are substantively different from a pure confidentiality obligation.

Non-compete provisions in NDAs are subject to their own enforceability analysis that varies significantly by state. California, for example, broadly prohibits non-compete agreements, and including a non-compete in an NDA presented to a California resident or enforced under California law may render the provision — or in some cases, the entire agreement — unenforceable. Even in states that permit non-competes, they must be reasonable in scope, duration, and geographic reach to be enforced.

Non-solicitation provisions, which restrict your ability to hire the counterparty’s employees or contact their customers, are also sometimes embedded in NDAs. If you intend to hire in the same talent market as the counterparty, or if your customers and theirs overlap, a non-solicitation provision could materially restrict your business activities. Identify these provisions, understand what they restrict, and negotiate their removal or modification if they are broader than you can accept.

Step 7: Review the Remedies and Dispute Resolution Provisions

The remedies provisions tell you what happens if either party breaches the agreement. Verify that the agreement includes the standard acknowledgment of irreparable harm and the right to seek injunctive relief — this language is important for enforcement and should be present in any professionally drafted NDA. Also look for any limitations on remedies: some NDAs cap the disclosing party’s recovery at a fixed dollar amount or limit remedies to specific types of relief, which could significantly constrain your ability to recover adequate compensation if the agreement is breached.

The dispute resolution provision tells you where and how disputes will be resolved. Identify the governing law and forum. If the agreement specifies a jurisdiction that is distant or inconvenient for you, consider whether to negotiate for your preferred forum. If the agreement requires arbitration, understand what that means for your ability to seek emergency injunctive relief — and confirm whether the agreement preserves your right to seek such relief from a court on an expedited basis notwithstanding the arbitration clause.

Check whether the agreement includes a fee-shifting provision that entitles the prevailing party in any dispute to recover attorneys’ fees. If you are a smaller business agreeing with a much larger one, fee-shifting works in your favor if the larger party breaches, but it also creates financial risk for you if you bring a claim and do not prevail.

Step 8: Check the Return and Destruction Obligations

Review whether the agreement includes obligations to return or destroy confidential materials at the end of the relationship. If you are the receiving party, understand what you will be required to do with confidential materials at termination — including digital files, emails, and cloud-stored documents. If the agreement requires certification of destruction, make sure you have systems in place that would allow you to provide that certification accurately.

If you are the disclosing party and the agreement does not include a return-or-destroy provision, consider requesting one. Without it, the other party may retain copies of your sensitive information indefinitely after the relationship ends, creating ongoing risk.

Step 9: Look for Residuals Clauses

A residuals clause is a provision that allows the receiving party to use information retained in the unaided memories of its employees and representatives, even after the NDA term expires or the information is otherwise required to be returned or destroyed. Residuals clauses are common in NDAs presented by large technology companies and can significantly undermine the practical protection an NDA provides.

If someone attends a detailed technical briefing about your proprietary technology and then works on a competing product, a residuals clause could shield that person’s company from liability for using whatever they remembered from the briefing, as long as they did not directly consult any written notes or retained documents. For disclosing parties sharing genuinely sensitive technical information, a residuals clause is a significant concession that deserves careful consideration and, where possible, negotiation.

Step 10: Consider the Business Context Before Signing or Negotiating

After completing a substantive review of all provisions, step back and consider the NDA in the context of the business relationship it governs. Ask yourself whether the overall balance of obligations and protections is appropriate for the relationship. Is the information being protected genuinely sensitive? Is the duration appropriate for that information’s commercial lifespan? Are the obligations manageable within your normal business operations?

If you identify provisions that are problematic — too broad, too long, or that include restrictions beyond pure confidentiality — decide which ones warrant negotiation and which you can live with. Not every questionable provision is worth a negotiating battle; the cost of the negotiation needs to be weighed against the practical significance of the provision. Focus your negotiating energy on provisions that create real, material risks for your business rather than theoretical concerns about language that is unlikely ever to matter in practice.

If the stakes are significant — the NDA involves genuinely valuable trade secrets, a major commercial relationship, or provisions that could materially affect your ability to run your business — have an attorney review the agreement before you sign. The cost of a professional review is almost always justified when the downside of signing an unfavorable agreement is substantial. This guide is intended for educational purposes and does not constitute legal advice. For agreements involving significant commercial exposure, consult a qualified attorney in your jurisdiction.