NDA Review: What to Look For

Non-disclosure agreements look short and harmless. Many are neither. A poorly drafted NDA can restrict your future work, assign intellectual property by accident, or create perpetual duties you never intended.

When you review an NDA, decide four things first: Is it mutual or one-way? What counts as confidential? How long do duties last? What are you still allowed to use afterward? This guide walks through those questions and the clauses that deserve a slow read. It is informational only and not legal advice. For high-stakes deals, involve a qualified attorney.

You can also run a draft through the NDA analyzer or learn more about contract analysis workflows before you negotiate.

Mutual vs one-way NDAs

One-way (unilateral)

Only one party discloses; the other receives and protects. Common when a company shares product plans with a candidate, vendor, or contractor.

Watch for: one-way secrecy paired with broad IP assignment, non-solicit, or non-compete that goes beyond protecting disclosures.

Mutual (bilateral)

Both sides may disclose and both promise confidentiality. Common in partnership talks, M&A early diligence, and co-development discussions.

Watch for: “mutual” labeling with asymmetric definitions—e.g., their information is broadly protected while yours is narrowly defined, or only their residuals rights are preserved.

Which should you prefer?

If both sides will share sensitive information, mutual is usually cleaner. If only they disclose, one-way can be fine—provided it does not smuggle in extra restrictions. If only you disclose, do not sign a one-way NDA that protects only them.

What “Confidential Information” includes

Definitions drive everything else.

Healthy patterns

• Information marked confidential, or disclosed orally and confirmed in writing within a set period
• Specific categories: business plans, financials, customer lists, source code, product roadmaps
• Clear exclusions (carve-outs)

Risky patterns

• Everything you “learn,” “observe,” or “infer” while visiting their offices
• All information “related to the business,” including public demos and published materials
• Definitions that include information you already knew or developed independently—without a workable exclusion
• “Confidential” status for information they disclose to dozens of people without controls

Push for a definition tied to designated confidential materials plus clearly confidential categories, not an unbounded “everything” standard.

Standard carve-outs you should expect

Most balanced NDAs exclude information that:

1. Is or becomes public through no fault of the receiving party
2. Was already known to the receiving party without a duty of confidentiality
3. Is independently developed without use of the discloser’s confidential information
4. Is rightfully received from a third party without a confidentiality duty
5. Must be disclosed by law, regulation, or court order (ideally with notice to the discloser when legally permitted)

Red flags in carve-outs

• Missing independent-development carve-out
• Public-information carve-out that is narrower than it looks (“publicly available from the discloser” only)
• Required-disclosure clause with no permission to comply with lawful process
• Carve-outs that require written proof standards you cannot meet years later

If you are a founder or consultant with prior knowledge in the space, independent development and prior knowledge carve-outs are not optional niceties—they are how you stay able to work.

Duration: term of agreement vs confidentiality period

People confuse two clocks:

• Agreement term: how long the NDA framework lasts for new disclosures
• Confidentiality period: how long you must protect information after disclosure or after the agreement ends

Practical ranges

• Many commercial NDAs use 2–5 years for general business information
• Trade secrets may be protected as long as they remain trade secrets
• Perpetual confidentiality for all information is often overbroad for ordinary business discussions

Red flags

• Perpetual duties for all Confidential Information, including non-trade-secret business info
• Long terms with no distinction between trade secrets and ordinary confidential data
• Obligations that continue even for information that has become public

Ask to split the concept: general confidential info for a fixed period; trade secrets for so long as they qualify.

Purpose limitation and use restrictions

NDAs should say you may use confidential information only for a defined purpose—e.g., “evaluating a potential partnership.”

Check

• Is the purpose specific enough?
• Does “use” quietly expand into a license to their IP?
• Are you barred from developing competing products even without using their secrets?

Red flags

• Purpose so broad it covers any future business relationship forever
• Use restrictions that function as non-competes
• Language granting the discloser ownership of your feedback, ideas, or improvements without limits

Feedback clauses deserve special attention: some NDAs say any suggestion you make is assigned to them. If you might share product ideas, narrow or delete assignment-of-feedback language.

Residuals clauses

A residuals clause typically allows a receiving party to use residual knowledge that an unaided memory retains—general ideas, skills, know-how—not documents or tangible materials.

Why they matter

Engineers, designers, and executives cannot unlearn everything they hear. Residuals language can make mutual diligence more workable. Some disclosers hate residuals clauses because they fear leakage of valuable concepts.

How to review them

• Prefer residuals limited to unaided memory, excluding intentional memorization for circumvention
• Exclude source code, customer lists, and personally identifiable information from residuals where appropriate
• Make residuals mutual if the NDA is mutual
• Ensure residuals do not override trade-secret misappropriation law in a reckless way—get counsel on edge cases

Red flags

• One-sided residuals only for the larger party
• Residuals so broad they authorize use of detailed confidential compilations
• No residuals plus a vague ban on “using any knowledge derived from” discussions—this can chill ordinary work

Return or destruction of materials

At the end of discussions, NDAs often require return or destruction of confidential materials, sometimes with a written certification.

Practical points

• Keep archival copies if required by law or reasonable backup systems—ask for a standard IT carve-out
• Notes and derivatives should be addressed explicitly
• Destruction timelines should be realistic

Red flags

• Immediate destruction requirements incompatible with automated backups
• No exception for retained copies required by legal hold
• Obligation to delete residual memory knowledge (impossible—fix it)

Non-solicit, non-compete, and IP assignment inside “NDAs”

Some documents titled “NDA” include:

• Employee non-solicit
• Customer non-solicit
• Non-compete
• Broad invention assignment
• Exclusivity during negotiations

These may be legitimate in some deals, but they are not “just an NDA.”

What to do

• Rename the conversation: you are negotiating a broader restrictive agreement
• Strip extra covenants when the goal is only confidentiality for exploratory talks
• If extras remain, apply the same scrutiny you would in an employment contract or commercial MSA

For job-interview NDAs, be especially wary of invention assignment and non-competes before you are employed.

Residuals vs licenses vs assignments (do not mix them up)

• Confidentiality limits sharing and misuse
• License grants permission to use IP
• Assignment transfers ownership
• Residuals addresses remembered know-how

An NDA that quietly assigns your improvements or grants a perpetual license to your pre-existing IP is a different deal. Read ownership sections as carefully as secrecy sections.

Disclosure to employees, contractors, and advisors

You will often need to share information internally.

Healthy pattern

Permission to share with employees/contractors/advisors who need to know and are bound by confidentiality obligations at least as protective.

Red flags

• Prior written consent for every internal share
• Requirement that every advisor sign the discloser’s paper before a first call
• Personal liability for any affiliate misuse without practical control

Founders and freelancers should confirm they can brief counsel and essential collaborators.

Remedies, injunctions, and liability

NDAs commonly acknowledge that breach may cause irreparable harm and allow injunctive relief. That is standard. Still check:

• Are damages uncapped for ordinary confidentiality breaches?
• Is there fee-shifting (you pay their lawyers)?
• Are indemnities one-way and unlimited?
• Does governing law / venue force you into a distant forum for a small exploratory chat?

For early conversations, push for proportionality. For deep diligence with crown-jewel data, stronger remedies are expected.

A step-by-step NDA review checklist

1. Confirm mutual vs one-way matches the real information flow.
2. Read the Confidential Information definition and mark overbreadth.
3. Verify the five standard carve-outs (public, prior knowledge, independent development, third-party, legal compulsion).
4. Separate agreement term from confidentiality duration; avoid perpetual-all-info where possible.
5. Check purpose limitation and feedback/IP ownership language.
6. Evaluate residuals—present, mutual, and scoped.
7. Review return/destruction with IT reality in mind.
8. Strip or negotiate non-competes, non-solicits, and assignment clauses if not intended.
9. Confirm internal sharing rules for employees/advisors.
10. Note governing law, venue, and remedy extremes.
11. Save the final signed PDF with exhibits.
12. Calendar any residual obligations and destruction deadlines.

Negotiation scripts that stay professional

• “Can we make this mutual? We expect to share our roadmap as well.”
• “Please add standard carve-outs for independent development and prior knowledge.”
• “Can general confidential information sunset after three years, with trade secrets lasting while they remain secrets?”
• “We’ll need a residuals clause limited to unaided memory, mutual for both parties.”
• “This draft includes non-solicit/IP assignment. Can we remove those for a preliminary NDA?”

Short, specific asks work better than “this NDA is unfair.”

When an NDA is worth walking away from

Consider pausing if the other party refuses to:

• Match mutuality to mutual disclosure
• Add basic carve-outs
• Remove a pre-employment invention grab or non-compete from a simple interview NDA
• Limit perpetual obligations for non-trade-secret information

Walking away from a bad NDA is often cheaper than litigating ambiguity later.

FAQ

Is a mutual NDA always better?

It is better when both sides disclose. If only one side discloses, a fair one-way NDA can be appropriate. Mutual labeling does not guarantee balanced terms—read the definitions.

How long should NDA confidentiality last?

There is no universal number. Many commercial NDAs use a few years for ordinary confidential business information and longer protection for trade secrets. Perpetual duties for everything are often worth questioning.

What is a residuals clause in plain English?

It usually lets someone use general knowledge retained in unaided memory after discussions end, without using documents or intentional memorization to recreate confidential details. Drafting quality varies widely.

Can I sign an NDA before a job interview?

Often yes for protecting company secrets, but scrutinize extras: IP assignment, non-competes, and overbroad definitions. Interview NDAs should rarely rewrite your career rights.

Does AI help with NDA review?

As a first pass, yes. An NDA analyzer can highlight duration, carve-outs, residuals, and unusual add-on clauses so you know what to negotiate. It is not legal advice and does not replace a lawyer for consequential deals.

---

Disclaimer: This article is for general informational purposes only and does not constitute legal advice. Contract Analyzer and Kovacs Software Solutions are not a law firm. Confidentiality and trade-secret rules vary by jurisdiction. Consult a licensed attorney about your NDA.