How to Use a Non-Disclosure Agreement: A Practical Guide
A non-disclosure agreement (NDA) is a written promise: one party agrees not to share or misuse the other party’s confidential information. Businesses use them constantly, with freelancers, suppliers, job candidates, investors, and potential partners. The NDA doesn’t create trust; it creates consequences for breaking trust, and it forces both sides to be clear about what “confidential” actually covers.
This guide explains how to use the Non-Disclosure Agreement Template, when you need one, what each section does, and the mistakes that make NDAs worthless. It is not legal advice. An NDA is a binding contract, and whether it holds up depends on the law where you operate. For anything involving genuinely valuable information, have a lawyer review the agreement before you rely on it.
Important: contract law varies by jurisdiction. What counts as enforceable, how broad the definition of “confidential” can be, how long obligations can last, what remedies are available, differs from place to place. Always check your local requirements or get legal advice before using an NDA for anything significant.
When to Use This
Use an NDA before sharing sensitive information with anyone outside your organisation: trade secrets, client lists, financial figures, product plans, pricing, unpublished designs, or merger discussions. The key word is before, the agreement must be signed before the confidential conversation happens, not after.
Use a mutual NDA (both sides bound) when both parties will share sensitive information, as in partnership talks or joint ventures. Use a one-way NDA when only one side is disclosing, as with a job candidate or a contractor who’ll see your systems.
Don’t use an NDA as a substitute for judgement. It won’t stop a determined bad actor, it gives you a legal basis to act after the fact. And don’t slap an NDA on trivial or public information; overusing them trains people to treat them as meaningless paperwork.
How to Fill It Out
Section 1: The parties. Full legal names of the disclosing party and the receiving party. For businesses, use the registered entity name, not the trading name or brand, “Acme Holdings Ltd”, not “Acme”. Include addresses and, for companies, the registration details the template asks for. Getting the party names wrong can make the agreement unenforceable against the right entity.
Section 2: Definition of confidential information. This is the heart of the NDA. Describe what’s covered specifically enough to be meaningful: business plans, customer data, technical designs, financial information, and so on. Vague definitions (“all information disclosed”) are harder to enforce in many jurisdictions.
Pay attention to the marking requirement. Many NDAs require confidential information to be marked “confidential” in writing, with verbal disclosures confirmed in writing shortly afterwards. If your agreement has this clause and you never mark anything, you may have no protection at all. Decide upfront whether you’ll actually follow a marking discipline, if not, use a version without it.
Also note the exclusions, which are standard: information that becomes public through no fault of the receiver, information the receiver already knew, information developed independently, and information the receiver is legally required to disclose (e.g., a court order).
Section 3: Obligations of the receiving party. What the receiving party must and must not do: no disclosure to third parties, no use except for the stated purpose, reasonable care to protect the information, and limiting access to people who genuinely need to know (and binding those people to the same obligations). Read this section from the other side’s perspective too, if you’re the one receiving, make sure the obligations are practical for how you work.
Section 4: Purpose limitation. The NDA covers information shared for a specific purpose, evaluating a partnership, performing contracted work, considering an investment. State that purpose clearly. It prevents the receiving party from using your information for anything else, and it defines the boundary of the whole agreement.
Section 5: Duration. Two time periods matter: the term of the agreement (how long information may be shared under it) and the confidentiality period (how long the obligations last after disclosure). General business information is commonly protected for two to five years; genuine trade secrets may be protected indefinitely where local law allows. Don’t pick a duration at random, it should reflect how long the information actually stays sensitive.
Section 6: Return or destruction of materials. When the discussions end or the agreement terminates, the receiving party must return or destroy confidential materials and confirm this in writing. Without this clause, copies of your information sit on other people’s systems indefinitely.
Section 7: Signatures and governing law. Both parties sign and date. The governing law clause says which jurisdiction’s law applies, this matters enormously if there’s ever a dispute, so don’t leave it blank or copy it from another template without thought. For cross-border NDAs, get advice on this clause specifically.
Common Mistakes
1. Treating a downloaded template as automatically enforceable. An NDA is a contract, and contracts live or die under local law. A template gives you structure; it doesn’t guarantee enforceability in your jurisdiction. For anything valuable, a lawyer’s review is not optional.
2. Defining confidential information too broadly. “Everything we ever tell you is confidential” sounds protective but can backfire, courts in many places won’t enforce obligations they consider unreasonable. A focused, realistic definition protects you better than a sweeping one.
3. Sharing before signing. The most common NDA failure isn’t a bad clause, it’s timing. The pitch meeting happens, the designs are shown, and the NDA gets signed a week later “for the file.” Information disclosed before signing usually isn’t covered. Sign first, talk second.
4. No system for tracking NDAs. Signed NDAs scattered across email inboxes are useless when you need them. Keep a simple register: counterparty, date signed, what was disclosed, expiry of obligations. When a dispute arises in year three, you’ll need to find the agreement fast.
Who Needs to Sign Off
The person requesting the NDA (the manager or deal lead) initiates it, but legal counsel should review every NDA covering material information before it’s sent, particularly the definition of confidential information, duration, and governing law. For routine, low-risk NDAs (a standard contractor onboarding), a pre-approved company template with manager sign-off is usually sufficient. Both parties must sign; an unsigned NDA protects no one. File the executed copy centrally, not in someone’s inbox.
How Often to Review and Update
Review the NDA template annually with legal counsel, or sooner if relevant laws change. Review individual NDAs when the business relationship changes, a contractor becoming a partner, a pilot project becoming a full engagement, or discussions expanding beyond the original purpose may need a new or amended agreement. Set reminders for confidentiality periods expiring on your most sensitive NDAs.
Download the free Non-Disclosure Agreement Template.
Disclaimer: this guide is general information, not legal advice. Non-disclosure agreements are contracts governed by laws that vary by jurisdiction. Always check your local requirements and get legal advice before relying on an NDA for valuable or sensitive information.