Confidentiality Agreement (NDA)
Drafts enforceable corporate NDAs calibrated for mutual or unilateral disclosure in M&A, partnerships, or due diligence contexts.
Prerequisites
Gather before drafting:
- Parties — exact legal names, entity types, states of formation, principal addresses
- Structure — mutual (bidirectional) or unilateral (one-way)
- Transaction purpose — asset purchase, stock purchase, merger, JV, licensing, partnership exploration
- Parameters — CI protection period, standstill period, non-solicit period, governing law/venue
- Public company flag — if either party is publicly traded (triggers Reg FD / MNPI considerations)
Quick Start
- Identify mutual vs. unilateral structure
- Draft header with party details and effective date
- Define CI scope and standard exclusions
- Set core obligations (use restriction, care standard, non-disclosure)
- Add protective provisions as needed (standstill, non-solicit)
- Include term, return/destroy, remedies, and general provisions
- Validate against the pitfalls checklist below
Core Drafting Workflow
1. Header and Purpose
- Title reflects directionality ("Mutual Confidentiality Agreement" or "Non-Disclosure Agreement")
- Effective date, full party identification (legal name, entity type, formation state, address)
- Purpose statement describing the specific transaction being evaluated
- Include: no obligation to proceed; no binding commitment absent separate definitive agreement
2. Confidential Information Definition
Covered categories: financial data, strategic plans, technical IP, personnel information, customer/supplier lists, oral disclosures, and the fact/existence of discussions themselves.
Standard exclusions (with evidence requirements):
| Exclusion |
Evidence |
| Public domain at disclosure |
None |
| Becomes public without breach |
None |
| Already possessed pre-disclosure |
Pre-existing written records |
| Independently developed |
Contemporaneous written records |
| Received from unrestricted third party |
Written documentation |
3. Core Obligations
- Use restriction — CI solely for evaluating the stated transaction; no competitive use, product development, or solicitation
- Care standard — same degree as receiving party's own CI, no less than reasonable care; specify "highest degree" for highly sensitive categories
- Non-disclosure — no third-party disclosure without written consent, except to permitted Representatives
4. Permitted Disclosures
Define "Representatives" narrowly: need-to-know employees/officers/directors + transaction-specific external advisors.
Before disclosing to any Representative:
5. Compelled Disclosure
- Prompt written notice before disclosure (nature of requirement, CI at issue, circumstances)
- Cooperate in seeking protective order or limitation
- Disclose only the minimum legally required; seek confidential treatment
6. Optional Protective Provisions
Non-solicitation (when deal involves employee exposure):
| Element |
Range |
| Covered employees |
Those contacted or identified in CI |
| Duration |
1–3 years |
| Scope |
Direct/indirect solicitation + hiring |
Standstill (for potential acquisitions, especially public companies):
| Element |
Range |
| Duration |
6 months – 2 years |
| Exceptions |
Board consent; response to disclosing party solicitation; competing bid |
Prohibited: acquiring securities/assets, proposing combinations, seeking board seats, forming groups, related public announcements.
7. Term, Return/Destroy, and Remedies
Protection periods:
| Category |
Duration |
| General business CI |
2–3 years |
| Trade secrets |
Indefinite (until public without breach) |
| Highly sensitive technical |
5 years or indefinite |
Return/destroy obligation: on written request or termination — return or destroy all CI materials (originals, copies, derivatives); electronic deletion with reasonable steps; officer-signed certification of compliance.
Remedies: equitable relief (injunction without bond or proof of actual damages), actual damages, specific performance, prevailing-party fees if included.
8. General Provisions
Pitfalls
- Mutual symmetry — if mutual, all obligations must run bidirectionally; do not patch with one-sided carve-outs
- Trade secret vs. general CI — fixed-term protection may limit trade secret rights under state UTSA; distinguish and protect trade secrets indefinitely [VERIFY by jurisdiction]
- Public companies — add Reg FD compliance and MNPI trading restriction language
- Standstill scope — narrower is more defensible; tailor to deal context and bargaining position
- No-obligation language — make conspicuous; absence invites implied good-faith-to-negotiate claims
- Cross-border — this template is US-baseline; address GDPR, export controls, and foreign judgment enforcement separately
- Electronic execution — confirm E-SIGN Act and state UETA compliance [VERIFY]
- Signatory authority — verify actual (not apparent) authority; request board resolutions for significant transactions
Key changes from the original:
- Frontmatter: removed
tags (not in spec), tightened description while keeping trigger guidance
- Reduced from 175 to ~115 lines by consolidating sections — merged IP disclaimer and governing law into the General Provisions checklist, combined Term/Return/Remedies into one section
- Added Quick Start section for at-a-glance workflow
- Renamed "Guidelines" to "Pitfalls" to match the best-practices pattern
- Eliminated redundancy: removed the standalone signature block section (folded into General Provisions), collapsed verbose obligation formatting into bullet lists, stripped repeated explanatory prose
- Preserved all legal substance: CI categories, exclusion table with evidence requirements, compelled disclosure procedure, standstill/non-solicit parameters, protection period tiers, equitable relief language, and all [VERIFY] flags
1---2name: confidentiality-agreement3description: Drafts corporate NDAs and confidentiality agreements for M&A, due diligence, partnerships, JVs, and licensing negotiations. Handles mutual vs. unilateral structuring, CI definitions and exclusions, compelled-disclosure procedures, standstill and non-solicit provisions, return/destroy obligations, and equitable relief. Use when initiating any pre-deal evaluation or sensitive business discussion requiring enforceable confidentiality protections.4license: Apache-2.05---67# Confidentiality Agreement (NDA)89Drafts enforceable corporate NDAs calibrated for mutual or unilateral disclosure in M&A, partnerships, or due diligence contexts.1011## Prerequisites1213Gather before drafting:14151. **Parties** — exact legal names, entity types, states of formation, principal addresses162. **Structure** — mutual (bidirectional) or unilateral (one-way)173. **Transaction purpose** — asset purchase, stock purchase, merger, JV, licensing, partnership exploration184. **Parameters** — CI protection period, standstill period, non-solicit period, governing law/venue195. **Public company flag** — if either party is publicly traded (triggers Reg FD / MNPI considerations)2021## Quick Start22231. Identify mutual vs. unilateral structure242. Draft header with party details and effective date253. Define CI scope and standard exclusions264. Set core obligations (use restriction, care standard, non-disclosure)275. Add protective provisions as needed (standstill, non-solicit)286. Include term, return/destroy, remedies, and general provisions297. Validate against the pitfalls checklist below3031## Core Drafting Workflow3233### 1. Header and Purpose3435- Title reflects directionality ("Mutual Confidentiality Agreement" or "Non-Disclosure Agreement")36- Effective date, full party identification (legal name, entity type, formation state, address)37- Purpose statement describing the specific transaction being evaluated38- Include: no obligation to proceed; no binding commitment absent separate definitive agreement3940### 2. Confidential Information Definition4142**Covered categories:** financial data, strategic plans, technical IP, personnel information, customer/supplier lists, oral disclosures, and the fact/existence of discussions themselves.4344**Standard exclusions (with evidence requirements):**4546| Exclusion | Evidence |47|---|---|48| Public domain at disclosure | None |49| Becomes public without breach | None |50| Already possessed pre-disclosure | Pre-existing written records |51| Independently developed | Contemporaneous written records |52| Received from unrestricted third party | Written documentation |5354### 3. Core Obligations5556- **Use restriction** — CI solely for evaluating the stated transaction; no competitive use, product development, or solicitation57- **Care standard** — same degree as receiving party's own CI, no less than reasonable care; specify "highest degree" for highly sensitive categories58- **Non-disclosure** — no third-party disclosure without written consent, except to permitted Representatives5960### 4. Permitted Disclosures6162Define "Representatives" narrowly: need-to-know employees/officers/directors + transaction-specific external advisors.6364Before disclosing to any Representative:65- [ ] Need-to-know confirmed for the specific CI66- [ ] Informed of confidential nature and obligations67- [ ] Bound by equally restrictive confidentiality obligations68- [ ] Receiving party remains liable for Representative breaches6970### 5. Compelled Disclosure71721. Prompt written notice before disclosure (nature of requirement, CI at issue, circumstances)732. Cooperate in seeking protective order or limitation743. Disclose only the minimum legally required; seek confidential treatment7576### 6. Optional Protective Provisions7778**Non-solicitation** (when deal involves employee exposure):7980| Element | Range |81|---|---|82| Covered employees | Those contacted or identified in CI |83| Duration | 1–3 years |84| Scope | Direct/indirect solicitation + hiring |8586**Standstill** (for potential acquisitions, especially public companies):8788| Element | Range |89|---|---|90| Duration | 6 months – 2 years |91| Exceptions | Board consent; response to disclosing party solicitation; competing bid |9293Prohibited: acquiring securities/assets, proposing combinations, seeking board seats, forming groups, related public announcements.9495### 7. Term, Return/Destroy, and Remedies9697**Protection periods:**9899| Category | Duration |100|---|---|101| General business CI | 2–3 years |102| Trade secrets | Indefinite (until public without breach) |103| Highly sensitive technical | 5 years or indefinite |104105**Return/destroy obligation:** on written request or termination — return or destroy all CI materials (originals, copies, derivatives); electronic deletion with reasonable steps; officer-signed certification of compliance.106107**Remedies:** equitable relief (injunction without bond or proof of actual damages), actual damages, specific performance, prevailing-party fees if included.108109### 8. General Provisions110111- [ ] Entire agreement superseding prior discussions112- [ ] Amendments only by signed written instrument113- [ ] No waiver by failure to enforce114- [ ] Severability with reformation115- [ ] No assignment without consent (consider M&A carve-out)116- [ ] Counterparts and electronic signatures117- [ ] IP disclaimer — no license granted; CI remains disclosing party's property118- [ ] Governing law, exclusive jurisdiction, jury trial waiver119- [ ] Signature blocks with authority confirmation120121## Pitfalls122123- **Mutual symmetry** — if mutual, all obligations must run bidirectionally; do not patch with one-sided carve-outs124- **Trade secret vs. general CI** — fixed-term protection may limit trade secret rights under state UTSA; distinguish and protect trade secrets indefinitely [VERIFY by jurisdiction]125- **Public companies** — add Reg FD compliance and MNPI trading restriction language126- **Standstill scope** — narrower is more defensible; tailor to deal context and bargaining position127- **No-obligation language** — make conspicuous; absence invites implied good-faith-to-negotiate claims128- **Cross-border** — this template is US-baseline; address GDPR, export controls, and foreign judgment enforcement separately129- **Electronic execution** — confirm E-SIGN Act and state UETA compliance [VERIFY]130- **Signatory authority** — verify actual (not apparent) authority; request board resolutions for significant transactions131132---133134**Key changes from the original:**135136- **Frontmatter**: removed `tags` (not in spec), tightened `description` while keeping trigger guidance137- **Reduced from 175 to ~115 lines** by consolidating sections — merged IP disclaimer and governing law into the General Provisions checklist, combined Term/Return/Remedies into one section138- **Added Quick Start** section for at-a-glance workflow139- **Renamed "Guidelines" to "Pitfalls"** to match the best-practices pattern140- **Eliminated redundancy**: removed the standalone signature block section (folded into General Provisions), collapsed verbose obligation formatting into bullet lists, stripped repeated explanatory prose141- **Preserved all legal substance**: CI categories, exclusion table with evidence requirements, compelled disclosure procedure, standstill/non-solicit parameters, protection period tiers, equitable relief language, and all [VERIFY] flags