NDA template: what a fair mutual non disclosure agreement says

A mutual NDA template protects both parties without locking either side into open-ended obligations. If you are sending a non disclosure agreement to a vendor, contractor, or potential partner, the focus is balance. A one-sided confidentiality agreement can bind you to secrecy about information you never meant to protect, while a mutual version shares the duty fairly. This article walks through what a fair NDA agreement should say, clause by clause, and what to ask the other side to change.

Key takeaways

• A mutual NDA template binds both parties to protect each other's confidential information.
• Keep the term at two to three years for ordinary business information.
• Limit use of confidential information to the stated purpose of the discussions.
• Include standard exclusions and a required-notice exception for legal compulsion.
• Choose your home jurisdiction or a neutral venue for any dispute.

What should a mutual NDA template cover?

A fair non disclosure agreement defines what is protected, who is bound, how long the duty lasts, and what happens when the relationship ends. It should apply the same standard of care to both parties and should not let either side use the other's information to compete. If only one side shares sensitive data, a one-sided NDA may be appropriate, but label it clearly so you do not accidentally accept one-way restrictions on your own team.

How do you define confidential information?

Start with what the NDA actually covers. A fair mutual non disclosure agreement contract defines confidential information on both sides. It should cover business plans, customer lists, pricing, technical data, and anything marked confidential or that a reasonable person would treat as secret. It should not cover information already public, information received from a third party without a duty of secrecy, information developed independently, or information required by law or a regulator to be disclosed.

Real wording to watch for:

"Confidential Information means any and all information disclosed by either party, in any form, regarding the other party's business."

That is too broad. It can sweep in casual conversations and old ideas. Imagine you chat with a vendor about your product roadmap over coffee, then later hire a different vendor who builds a similar feature. A broad clause could let the first vendor claim you leaked their secrets or that you are bound by their ideas. A better version limits coverage to information disclosed for a stated purpose, such as evaluating a vendor relationship or discussing a project.

What to ask for:

Ask for a written definition that covers only information shared for the specific purpose of the discussion, plus standard exclusions for public domain, third-party sources, independent development, and legal compulsion.

Should the obligations be mutual?

A fair NDA agreement template is mutual when both parties share information and both promise to protect it. If only one side is bound, the document is not mutual and the other side can use your information while you cannot use theirs. Look for language that applies the same standard of care to both parties, typically reasonable care or at least the same care each party uses for its own confidential information.

Real wording to watch for:

"Recipient shall protect Discloser's Confidential Information using no less than reasonable care."

Check whether that duty applies to both sides or only to the party receiving information from the other. If it flows one way, ask for a mirror clause. Picture this: you share your pricing and customer list with a consultant, but their NDA only binds you to protect their data. Six months later they launch a competing service using your list. You have no recourse because the duty was one-way.

What to ask for:

Ask for mutual obligations with the same standard of care and the same exceptions for both parties. If you are the only one sharing sensitive data, a one-sided NDA may be appropriate, but label it clearly so you do not accidentally accept one-way restrictions on your own team.

How should permitted use be limited?

The NDA should say each party may use confidential information only for the stated purpose, such as evaluating a SaaS vendor, discussing a contractor engagement, or exploring a partnership. It should not allow the recipient to use your information to compete with you or to develop a similar product.

Real wording to watch for:

"Recipient may use Confidential Information for any business purpose."

That phrase is dangerously open. It could let a vendor learn your pricing and then sell the same service to your competitors. Say you show a potential partner your customer acquisition costs during talks. Under that clause, they could use those numbers to undercut your bids in the same market next quarter.

What to ask for:

Limit use to the specific purpose of the discussions. Add a sentence that the recipient may not use the information to compete with you or to build a competing product.

How long should an NDA last?

This is where many NDAs go wrong. A fair non disclosure and confidentiality agreement lasts two to three years for ordinary business information. Perpetual confidentiality is a trap. It can bind you forever to information that loses value quickly, and it can create disputes long after the relationship ends.

Real wording to watch for:

"These obligations survive indefinitely."

Or:

"The receiving party's obligations continue for as long as the information remains confidential."

The second version is effectively perpetual because trade secrets can remain confidential for decades. Ask for a fixed term.

What to ask for:

Ask for a term of two to three years for ordinary business information. Trade secrets may deserve longer protection, but that should be a separate, narrow clause, not the default for everything shared.

What exclusions should every NDA include?

Every fair NDA agreement template needs standard exclusions. Information is not confidential if it is already public, becomes public through no fault of the recipient, was known to the recipient before disclosure, is received from a third party without a duty of secrecy, or is developed independently without using the discloser's information. There should also be an exception for disclosures required by law, court order, or regulator, usually with prompt notice to the disclosing party so they can seek a protective order.

Real wording to watch for:

"Confidential Information does not include information in the public domain."

Check whether that means public at the time of disclosure or public at any time. A fair version covers information that becomes public through no breach by the recipient.

What to ask for:

Keep the standard exclusions. Add a requirement that the recipient notify you quickly if they are compelled by law or a regulator to disclose your information, so you can object or seek a protective order.

What should happen to information after the relationship ends?

At the end of the relationship, the NDA should say what happens to the information. A fair version lets each party return or destroy confidential information and certify that it has done so. It should not require destruction of backups, archives, or legal-hold records where deletion is impractical or illegal.

Real wording to watch for:

"Upon request, Recipient shall destroy all Confidential Information and all copies, including backups and archives."

That can be impossible for cloud systems and email backups. It can also create liability if a routine backup survives. Say you end a six-month pilot with a software vendor and ask them to destroy your data. Their nightly server backups still hold your customer list for thirty days. A strict destruction clause puts them in breach through no fault of their own.

What to ask for:

Ask for return or destruction of active files, with an exception for backups and archives kept in the ordinary course or required by law. Add a certification option so you can confirm compliance in writing.

Should you watch for hidden non-solicits?

Some NDAs slip in a non-solicit clause that stops you from hiring the other side's employees or contacting their customers. That is a separate restriction and should not hide inside a confidentiality agreement. If you see it, treat it as a negotiation point, not a standard NDA term.

Real wording to watch for:

"Recipient shall not solicit or hire any employee or customer of Discloser for the term of this agreement and for two years after."

That is a non-solicit, not an NDA term. It can limit your ability to hire or work with people you need. Imagine you sign an NDA to discuss a project with a design shop, only to find the clause bars you from hiring their lead designer for two years, even though the project never happened.

What to ask for:

Remove it from the NDA or negotiate it separately with clear limits, such as named employees or customers and a short time period.

How should remedies and dispute resolution work?

A fair NDA should not threaten automatic injunctions or massive penalties for every slip. Look for language that allows a court to order relief if there is a real breach, but does not presume irreparable harm for minor mistakes. Governing law and venue should be your home jurisdiction or a neutral one. A dispute in another state can cost more than the claim is worth.

Real wording to watch for:

"Discloser shall be entitled to immediate injunctive relief without posting a bond."

That makes it easy for the other side to get a court order against you before you can respond.

What to ask for:

Ask for mutual injunctive relief only for material breaches, with the right to oppose it. Choose your home state or a neutral venue for disputes.

When should you get a lawyer?

A simple mutual NDA between two startups often does not need a lawyer. Get one if the NDA is paired with a personal guarantee, if the money involved is material to your business, if the term is five years or more, or if the other side insists on negotiating lawyer to lawyer. AxiomRisk can help you spot the risky sentences in your file before you sign, so you walk into the conversation knowing which clauses matter.

What should you ask the other side?

Before you send or sign an NDA template, send back a short list of changes. Ask for a two to three year term, standard exclusions, mutual obligations, use limited to the stated purpose, return or destruction with a backup exception, and your home jurisdiction for disputes. If the other side refuses, decide whether the relationship is worth the risk. A non disclosure agreement contract should protect your ideas, not trap you in obligations you did not mean to accept.

Next step

Check your contract free at /signup