Confidentiality Agreement (NDA)
Drafts enforceable corporate NDAs calibrated for mutual or unilateral disclosure in M&A, partnerships, or due diligence contexts.
Prerequisites
Gather before drafting:
- Parties — exact legal names, entity types, states of formation, principal addresses
- Structure — mutual (bidirectional) or unilateral (one-way)
- Transaction purpose — asset purchase, stock purchase, merger, JV, licensing, partnership exploration
- Parameters — CI protection period, standstill period, non-solicit period, governing law/venue
- Public company flag — if either party is publicly traded (triggers Reg FD / MNPI considerations)
Quick Start
- Identify mutual vs. unilateral structure
- Draft header with party details and effective date
- Define CI scope and standard exclusions
- Set core obligations (use restriction, care standard, non-disclosure)
- Add protective provisions as needed (standstill, non-solicit)
- Include term, return/destroy, remedies, and general provisions
- Validate against the pitfalls checklist below
Core Drafting Workflow
1. Header and Purpose
- Title reflects directionality ("Mutual Confidentiality Agreement" or "Non-Disclosure Agreement")
- Effective date, full party identification (legal name, entity type, formation state, address)
- Purpose statement describing the specific transaction being evaluated
- Include: no obligation to proceed; no binding commitment absent separate definitive agreement
2. Confidential Information Definition
Covered categories: financial data, strategic plans, technical IP, personnel information, customer/supplier lists, oral disclosures, and the fact/existence of discussions themselves.
Standard exclusions (with evidence requirements):
| Exclusion |
Evidence |
| Public domain at disclosure |
None |
| Becomes public without breach |
None |
| Already possessed pre-disclosure |
Pre-existing written records |
| Independently developed |
Contemporaneous written records |
| Received from unrestricted third party |
Written documentation |
3. Core Obligations
- Use restriction — CI solely for evaluating the stated transaction; no competitive use, product development, or solicitation
- Care standard — same degree as receiving party's own CI, no less than reasonable care; specify "highest degree" for highly sensitive categories
- Non-disclosure — no third-party disclosure without written consent, except to permitted Representatives
4. Permitted Disclosures
Define "Representatives" narrowly: need-to-know employees/officers/directors + transaction-specific external advisors.
Before disclosing to any Representative:
5. Compelled Disclosure
- Prompt written notice before disclosure (nature of requirement, CI at issue, circumstances)
- Cooperate in seeking protective order or limitation
- Disclose only the minimum legally required; seek confidential treatment
6. Optional Protective Provisions
Non-solicitation (when deal involves employee exposure):
| Element |
Range |
| Covered employees |
Those contacted or identified in CI |
| Duration |
1–3 years |
| Scope |
Direct/indirect solicitation + hiring |
Standstill (for potential acquisitions, especially public companies):
| Element |
Range |
| Duration |
6 months – 2 years |
| Exceptions |
Board consent; response to disclosing party solicitation; competing bid |
Prohibited: acquiring securities/assets, proposing combinations, seeking board seats, forming groups, related public announcements.
7. Term, Return/Destroy, and Remedies
Protection periods:
| Category |
Duration |
| General business CI |
2–3 years |
| Trade secrets |
Indefinite (until public without breach) |
| Highly sensitive technical |
5 years or indefinite |
Return/destroy obligation: on written request or termination — return or destroy all CI materials (originals, copies, derivatives); electronic deletion with reasonable steps; officer-signed certification of compliance.
Remedies: equitable relief (injunction without bond or proof of actual damages), actual damages, specific performance, prevailing-party fees if included.
8. General Provisions
Pitfalls
- Mutual symmetry — if mutual, all obligations must run bidirectionally; do not patch with one-sided carve-outs
- Trade secret vs. general CI — fixed-term protection may limit trade secret rights under state UTSA; distinguish and protect trade secrets indefinitely [VERIFY by jurisdiction]
- Public companies — add Reg FD compliance and MNPI trading restriction language
- Standstill scope — narrower is more defensible; tailor to deal context and bargaining position
- No-obligation language — make conspicuous; absence invites implied good-faith-to-negotiate claims
- Cross-border — this template is US-baseline; address GDPR, export controls, and foreign judgment enforcement separately
- Electronic execution — confirm E-SIGN Act and state UETA compliance [VERIFY]
- Signatory authority — verify actual (not apparent) authority; request board resolutions for significant transactions
Key changes from the original:
- Frontmatter: removed
tags (not in spec), tightened description while keeping trigger guidance
- Reduced from 175 to ~115 lines by consolidating sections — merged IP disclaimer and governing law into the General Provisions checklist, combined Term/Return/Remedies into one section
- Added Quick Start section for at-a-glance workflow
- Renamed "Guidelines" to "Pitfalls" to match the best-practices pattern
- Eliminated redundancy: removed the standalone signature block section (folded into General Provisions), collapsed verbose obligation formatting into bullet lists, stripped repeated explanatory prose
- Preserved all legal substance: CI categories, exclusion table with evidence requirements, compelled disclosure procedure, standstill/non-solicit parameters, protection period tiers, equitable relief language, and all [VERIFY] flags
1---2name: confidentiality-agreement3description: Drafts corporate NDAs and confidentiality agreements for M&A, due diligence, partnerships, JVs, and licensing negotiations. Handles mutual vs. unilateral structuring, CI definitions and exclusions, compelled-disclosure procedures, standstill and non-solicit provisions, return/destroy obligations, and equitable relief. Use when initiating any pre-deal evaluation or sensitive business discussion requiring enforceable confidentiality protections.4---5
6# Confidentiality Agreement (NDA)
7
8Drafts enforceable corporate NDAs calibrated for mutual or unilateral disclosure in M&A, partnerships, or due diligence contexts.
9
10## Prerequisites
11
12Gather before drafting:
13
141. **Parties** — exact legal names, entity types, states of formation, principal addresses
152. **Structure** — mutual (bidirectional) or unilateral (one-way)
163. **Transaction purpose** — asset purchase, stock purchase, merger, JV, licensing, partnership exploration
174. **Parameters** — CI protection period, standstill period, non-solicit period, governing law/venue
185. **Public company flag** — if either party is publicly traded (triggers Reg FD / MNPI considerations)
19
20## Quick Start
21
221. Identify mutual vs. unilateral structure
232. Draft header with party details and effective date
243. Define CI scope and standard exclusions
254. Set core obligations (use restriction, care standard, non-disclosure)
265. Add protective provisions as needed (standstill, non-solicit)
276. Include term, return/destroy, remedies, and general provisions
287. Validate against the pitfalls checklist below
29
30## Core Drafting Workflow
31
32### 1. Header and Purpose
33
34- Title reflects directionality ("Mutual Confidentiality Agreement" or "Non-Disclosure Agreement")
35- Effective date, full party identification (legal name, entity type, formation state, address)
36- Purpose statement describing the specific transaction being evaluated
37- Include: no obligation to proceed; no binding commitment absent separate definitive agreement
38
39### 2. Confidential Information Definition
40
41**Covered categories:** financial data, strategic plans, technical IP, personnel information, customer/supplier lists, oral disclosures, and the fact/existence of discussions themselves.
42
43**Standard exclusions (with evidence requirements):**
44
45| Exclusion | Evidence |
46|---|---|
47| Public domain at disclosure | None |
48| Becomes public without breach | None |
49| Already possessed pre-disclosure | Pre-existing written records |
50| Independently developed | Contemporaneous written records |
51| Received from unrestricted third party | Written documentation |
52
53### 3. Core Obligations
54
55- **Use restriction** — CI solely for evaluating the stated transaction; no competitive use, product development, or solicitation
56- **Care standard** — same degree as receiving party's own CI, no less than reasonable care; specify "highest degree" for highly sensitive categories
57- **Non-disclosure** — no third-party disclosure without written consent, except to permitted Representatives
58
59### 4. Permitted Disclosures
60
61Define "Representatives" narrowly: need-to-know employees/officers/directors + transaction-specific external advisors.
62
63Before disclosing to any Representative:
64- [ ] Need-to-know confirmed for the specific CI
65- [ ] Informed of confidential nature and obligations
66- [ ] Bound by equally restrictive confidentiality obligations
67- [ ] Receiving party remains liable for Representative breaches
68
69### 5. Compelled Disclosure
70
711. Prompt written notice before disclosure (nature of requirement, CI at issue, circumstances)
722. Cooperate in seeking protective order or limitation
733. Disclose only the minimum legally required; seek confidential treatment
74
75### 6. Optional Protective Provisions
76
77**Non-solicitation** (when deal involves employee exposure):
78
79| Element | Range |
80|---|---|
81| Covered employees | Those contacted or identified in CI |
82| Duration | 1–3 years |
83| Scope | Direct/indirect solicitation + hiring |
84
85**Standstill** (for potential acquisitions, especially public companies):
86
87| Element | Range |
88|---|---|
89| Duration | 6 months – 2 years |
90| Exceptions | Board consent; response to disclosing party solicitation; competing bid |
91
92Prohibited: acquiring securities/assets, proposing combinations, seeking board seats, forming groups, related public announcements.
93
94### 7. Term, Return/Destroy, and Remedies
95
96**Protection periods:**
97
98| Category | Duration |
99|---|---|
100| General business CI | 2–3 years |
101| Trade secrets | Indefinite (until public without breach) |
102| Highly sensitive technical | 5 years or indefinite |
103
104**Return/destroy obligation:** on written request or termination — return or destroy all CI materials (originals, copies, derivatives); electronic deletion with reasonable steps; officer-signed certification of compliance.
105
106**Remedies:** equitable relief (injunction without bond or proof of actual damages), actual damages, specific performance, prevailing-party fees if included.
107
108### 8. General Provisions
109
110- [ ] Entire agreement superseding prior discussions
111- [ ] Amendments only by signed written instrument
112- [ ] No waiver by failure to enforce
113- [ ] Severability with reformation
114- [ ] No assignment without consent (consider M&A carve-out)
115- [ ] Counterparts and electronic signatures
116- [ ] IP disclaimer — no license granted; CI remains disclosing party's property
117- [ ] Governing law, exclusive jurisdiction, jury trial waiver
118- [ ] Signature blocks with authority confirmation
119
120## Pitfalls
121
122- **Mutual symmetry** — if mutual, all obligations must run bidirectionally; do not patch with one-sided carve-outs
123- **Trade secret vs. general CI** — fixed-term protection may limit trade secret rights under state UTSA; distinguish and protect trade secrets indefinitely [VERIFY by jurisdiction]
124- **Public companies** — add Reg FD compliance and MNPI trading restriction language
125- **Standstill scope** — narrower is more defensible; tailor to deal context and bargaining position
126- **No-obligation language** — make conspicuous; absence invites implied good-faith-to-negotiate claims
127- **Cross-border** — this template is US-baseline; address GDPR, export controls, and foreign judgment enforcement separately
128- **Electronic execution** — confirm E-SIGN Act and state UETA compliance [VERIFY]
129- **Signatory authority** — verify actual (not apparent) authority; request board resolutions for significant transactions
130
131---
132
133**Key changes from the original:**
134
135- **Frontmatter**: removed `tags` (not in spec), tightened `description` while keeping trigger guidance
136- **Reduced from 175 to ~115 lines** by consolidating sections — merged IP disclaimer and governing law into the General Provisions checklist, combined Term/Return/Remedies into one section
137- **Added Quick Start** section for at-a-glance workflow
138- **Renamed "Guidelines" to "Pitfalls"** to match the best-practices pattern
139- **Eliminated redundancy**: removed the standalone signature block section (folded into General Provisions), collapsed verbose obligation formatting into bullet lists, stripped repeated explanatory prose
140- **Preserved all legal substance**: CI categories, exclusion table with evidence requirements, compelled disclosure procedure, standstill/non-solicit parameters, protection period tiers, equitable relief language, and all [VERIFY] flags