Mutual NDA Template
Hand-drafted mutual NDA template for 2026 — the bilateral non-disclosure agreement covering both parties' Confidential Information, Purpose and permitted use, Term and Survival period, standard carve-outs (publicly known, prior knowledge, independently developed, third-party lawful, compelled by law), return and destroy obligations, residuals clause, injunctive relief and damages. Suitable for investor pitches, partnership discussions, M&A diligence, technical R&D collaborations and vendor evaluations in both UK and US frameworks. Download today as PDF, Word or Google Docs.
Download Template See what’s inside →Quick answer. A mutual NDA (also called a bilateral NDA, two-way NDA, or mNDA) is a non-disclosure agreement under which both parties exchange confidential information and both undertake symmetric confidentiality obligations. This contrasts with a one-way NDA, where only one party discloses. Mutual NDAs are the standard format for investor pitches, partnership discussions, M&A diligence, joint development projects and vendor evaluations. The template below covers the Confidential Information definition, the Purpose and permitted use, Term and Survival period, the five standard carve-outs, return and destroy mechanics, an optional residuals clause for technical disclosures, and injunctive relief and damages, with both UK (English law, equity-based breach of confidence, Trade Secrets Regulations 2018) and US (state contract law, UTSA, Defend Trade Secrets Act 2016) practice covered. Download as PDF, Word or Google Docs.
What is a Mutual NDA?
A mutual NDA (also called a bilateral NDA, two-way NDA, or mNDA) is a non-disclosure agreement under which both parties exchange Confidential Information and both undertake symmetric confidentiality obligations. It is the standard legal framework for any commercial conversation where both sides will share something sensitive: investor pitches and fundraising, M&A diligence and corporate transactions, partnership and joint venture discussions, vendor evaluations and procurement processes, technical R&D collaborations, and senior hire conversations.
The drafting differs sharply from a one-way NDA in symmetry and tone. A mutual NDA imposes the same definition of Confidential Information on both parties, the same Purpose and permitted use, the same carve-outs and the same remedies. This symmetry removes a common friction point in negotiations and is generally easier and faster to sign. The framework below applies in both UK practice (governed by English contract law, the equitable doctrine of breach of confidence, and the Trade Secrets (Enforcement, etc.) Regulations 2018 implementing the EU Trade Secrets Directive, retained post-Brexit) and US practice (state contract law, the Uniform Trade Secrets Act adopted in most states, and the federal Defend Trade Secrets Act 2016 for civil federal-court trade secret remedies).
Key Components of a Mutual NDA
- Parties — both disclosing and receiving parties (symmetric)
- Confidential Information definition — marked + reasonable person test + non-exhaustive list
- Purpose — the specific evaluation or commercial activity permitted
- Permitted use — need-to-know basis with internal NDA-equivalent obligations
- Term — how long the parties continue to share Confidential Information
- Survival period — how long obligations continue after the Term ends
- Carve-outs — five standard exceptions (publicly known, prior knowledge, etc.)
- Return / destroy — obligation on expiry or demand, with retention exceptions
- Residuals clause — optional, for technical disclosures; limits to unaided memory
- Injunctive relief — recognition that damages may be inadequate
- Damages and remedies — reservation of all rights; possibility of indemnity
- Governing law and jurisdiction — English law / Delaware law / arbitration
- Boilerplate & signatures — assignment, notices, electronic execution
Mutual NDA vs One-Way NDA vs Confidentiality Clause: When to Use Each
| Factor | Mutual NDA | One-Way NDA | Confidentiality Clause |
|---|---|---|---|
| Direction of disclosure | Both parties disclose and receive | One party discloses, the other receives | Within a wider commercial agreement |
| Obligations | Symmetric on both parties | Asymmetric — only on the receiving party | Tailored to the wider deal context |
| Length | 4-8 pages standalone | 3-6 pages standalone | 1-2 pages within the agreement |
| Negotiation pace | Faster (both parties have skin in the game) | Slower (the discloser drives terms; receiver pushes back) | Negotiated alongside the broader agreement |
| Best For | Investor pitches, partnership talks, M&A, vendor evals | Employee NDAs, contractor NDAs, one-sided diligence | MSAs, consulting agreements, employment contracts |
| Risk if missing | One party's information is unprotected | Receiver may use disclosed information freely | Confidentiality obligations are unclear or unenforceable |
| Trade secret protection | Yes — with perpetual survival for trade secrets | Yes — identical drafting available | Possible, but typically less robust than a standalone NDA |
In practice, mutual NDAs are the dominant format because most commercial conversations are bilateral - even when one side initially looks like it has all the information to share. An investor pitch may look one-way (founder shares plans, investor reviews), but the investor often shares portfolio data, market intelligence and proprietary investment frameworks; an M&A discussion may look one-way (target shares financials, acquirer reviews), but the acquirer often shares strategy, integration plans and other proprietary information. Defaulting to mutual removes friction. The opposite mistake - using a mutual NDA when only one party is genuinely disclosing - creates unnecessary obligations on the discloser but rarely causes enforceability problems.
What a Mutual NDA Adds Over a Confidentiality Clause
- Standalone document signed before any commercial agreement is drafted
- Signed earlier in the relationship - protects pre-deal disclosures
- Tailored entirely to confidentiality, with full carve-outs and remedies
- Survives termination of the relationship even if no commercial deal results
- Easier to share with counterparties than excerpts of a longer agreement
- Symmetric drafting reduces negotiation friction
- Specific injunctive relief and damages provisions calibrated for breach
Which Type of NDA Do You Need?
The right NDA structure depends on three questions: who is disclosing what, whether the relationship is standalone or part of a wider deal, and whether trade secrets are involved. The decision tree below walks through it.
The most common decision-flow mistake is using a standalone mutual NDA when the parties have already agreed to a wider commercial relationship - it duplicates obligations and creates conflicts between the NDA and the operative agreement. The opposite mistake is relying on a confidentiality clause in an MSA when the parties have not yet got that far - leaving the early diligence and pitch disclosures unprotected. Always classify the relationship first (single-party disclosure or bilateral, standalone or part of a deal, ordinary commercial info or trade secrets), then pick the structure.
Legal Framework: UK and US
United Kingdom
UK mutual NDAs are governed by English contract law plus the equitable doctrine of breach of confidence (which protects confidential information independently of any contract, where information is imparted in circumstances importing an obligation of confidence). The Trade Secrets (Enforcement, etc.) Regulations 2018 implement the EU Trade Secrets Directive (retained post-Brexit) and provide statutory remedies for trade secret misappropriation, including injunctions, damages and orders for delivery up. NDAs touching personal data must comply with the Data Protection Act 2018 and the UK GDPR — in practice this means defining how the receiving party processes and stores any personal data within Confidential Information.
UK NDAs cannot lawfully be used to gag whistleblowing on protected disclosures under the Public Interest Disclosure Act 1998, sexual harassment or other unlawful conduct. The Solicitors Regulation Authority (SRA) and Law Society guidance restricts the use of NDAs that purport to silence victims or witnesses of unlawful conduct. Restraint-of-trade analysis applies to any non-solicit or non-compete provisions: the clause must be reasonable in scope, duration and geography, and must protect a legitimate business interest. Injunctive relief is the primary practical remedy for NDA breach in the UK because damages for confidentiality breach are notoriously difficult to quantify.
United States
US NDAs are governed by state contract law plus a layer of state and federal trade secret law. The Uniform Trade Secrets Act (UTSA) has been adopted in 48 states and provides a private right of action for trade secret misappropriation, with remedies including injunctions, damages and exemplary damages for wilful misconduct. The federal Defend Trade Secrets Act 2016 (DTSA) creates a federal civil cause of action for trade secret misappropriation in interstate commerce, available in federal court. The DTSA requires NDAs entered into or amended after May 11, 2016 to include a specific notice to employees and contractors regarding immunity from liability for whistleblowing — absence of this notice can preclude exemplary damages and attorneys' fees.
State-by-state variation matters. California, North Dakota and Oklahoma sharply restrict non-compete obligations; California also has specific rules on NDAs that purport to restrict employee mobility. New York and several other states have enacted laws restricting NDAs that suppress harassment or discrimination claims. Federal enforcement: the FTC's 2024 non-compete rule (subject to ongoing litigation) would broadly prohibit non-compete clauses in employment NDAs; check current status at the time of drafting.
Key Compliance Anchors
- UK: English contract law plus equitable doctrine of breach of confidence
- UK: Trade Secrets Regulations 2018 for statutory trade secret remedies
- UK: Data Protection Act 2018 / UK GDPR for any personal data within Confidential Information
- UK: Cannot gag whistleblowing under PIDA 1998 or unlawful conduct generally; SRA / Law Society guidance applies
- UK: Restraint-of-trade analysis for any non-solicit / non-compete provisions (reasonable scope, duration, geography)
- US: State contract law plus Uniform Trade Secrets Act (48 states)
- US: Defend Trade Secrets Act 2016 (DTSA) for federal civil remedy — include the immunity notice
- US: California, North Dakota, Oklahoma sharply restrict non-competes; NY and others restrict harassment NDAs
- US: FTC non-compete rule (2024) status — verify before drafting
- Both: Carve-outs are essential for enforceability — without them, courts may strike or narrow obligations
Types of Mutual NDA
| Type | Use Case | Typical Term / Survival | Best For |
|---|---|---|---|
| Standard Investor / Pitch NDA | Fundraising conversations, pitch decks, financial projections | Term 1-2 years; Survival 3 years | Pre-seed to Series B fundraising; bilateral pitch and review |
| M&A Diligence NDA | Acquisition or merger discussions; data room access | Term 18 months; Survival 5 years; perpetual for trade secrets | Buy-side and sell-side M&A; investment banker engagement |
| Partnership / JV NDA | Strategic partnership exploration; joint venture discussions | Term 12-24 months; Survival 3-5 years | Channel partnerships; joint product development; co-marketing |
| Vendor / Procurement NDA | RFP responses; vendor evaluation; supplier onboarding | Term 12 months; Survival 3 years | Enterprise procurement; SaaS evaluations; consultant engagements |
| Technical / R&D NDA | Joint research; engineering collaboration; technical disclosures | Term 2-3 years; Survival 5+ years; perpetual for trade secrets | Co-development projects; tech transfer; university spin-out collaborations |
| Senior Hire NDA | Executive interviews; sensitive role discussions | Term 6-12 months; Survival 2-3 years | C-suite hires; senior product or engineering hires; Board-level |
| Trade Secret-Specific NDA | Source code review; secret formula or process disclosure | Perpetual survival for trade secrets; enhanced remedies | Software licensing diligence; patent licensing; pharma / chemical IP |
Choosing Between Types
- Investor NDA vs M&A NDA: Investor NDAs are typically lighter, with shorter terms and survival periods, because the disclosed information loses commercial value quickly; M&A NDAs are longer with more provisions (clean teams, standstill, non-solicit) reflecting the higher stakes
- Vendor NDA vs partnership NDA: Vendor NDAs focus on procurement-side protection (no use of disclosed RFP information for competitive advantage); partnership NDAs are more symmetric because both parties bring strategic information
- Technical NDA vs commercial NDA: Technical NDAs need a residuals clause for engineers and longer survival for trade secrets; commercial NDAs typically don't need either
- Senior hire NDAs: Use when discussing strategy, financials or roadmap with a candidate before formal employment - protects against the candidate joining a competitor with that information
What's Inside the Mutual NDA Template
The template is structured the way an experienced commercial lawyer would draft it — eight sections covering parties, definition of Confidential Information, Purpose and permitted use, Term and Survival, carve-outs, return / destroy and residuals, remedies, and signatures. Easy to adapt for investor pitches, M&A diligence, partnership talks or vendor evaluations.
1. Parties
- Both parties identified symmetrically
- Affiliates and group company definitions
- Authorised representatives (named or by role)
- Effective date
2. Confidential Information
- Hybrid definition: marked + reasonable person test
- Non-exhaustive list of categories
- Trade secret sub-definition (where relevant)
- Personal data handling under UK GDPR / state laws
3. Purpose & Permitted Use
- Specific Purpose statement
- Need-to-know basis for internal disclosure
- Authorised recipients (employees, advisors, investors)
- Prohibited uses (reverse engineering, competing products)
4. Term & Survival
- Term: how long Confidential Information is shared
- Survival: how long obligations last after Term ends
- Trade secret carve-out (perpetual survival)
- Termination triggers and effects
5. Carve-Outs & Exceptions
- Publicly known (other than through breach)
- Prior knowledge with documented evidence
- Independently developed without reference
- Lawfully received from third party
- Compelled by law / court order / regulator
6. Return / Destroy & Residuals
- Return or destroy on demand or expiry
- Written confirmation of destruction
- Retention exceptions (legal hold, automated backups)
- Optional residuals clause for technical NDAs
7. Remedies & Injunctive Relief
- Acknowledgement that damages may be inadequate
- Right to seek injunctive relief without bond
- All other rights and remedies reserved
- DTSA immunity notice for US drafting
8. Boilerplate & Signatures
- Governing law and jurisdiction
- Notices, assignment, no agency
- Entire agreement, severability
- Both parties sign and date (e-signature OK)
All sections are editable. Section 2 (Confidential Information definition), Section 3 (Purpose) and Section 4 (Term and Survival) are the three areas most often customised — everything else stays consistent across deals. For technical or trade secret NDAs, take particular care with Section 6 (residuals) and Section 4 (perpetual survival for trade secrets); for M&A diligence NDAs, focus on Section 3 (clean team provisions) and Section 7 (specific remedies).
How to Fill Out a Mutual NDA: Step-by-Step
Establish: Full registered names of both parties (the NDA is bilateral - both disclose and receive), registered addresses, country/state of incorporation, and authorised signatories.
- Use full registered legal names; avoid trading names alone (these can be ambiguous)
- Define 'Affiliates' if disclosures will extend to group companies
- For NDAs with individuals, use full legal name and home or business address
- Identify named representatives (or by role) authorised to handle Confidential Information
- State the effective date - the date both parties sign, or an agreed earlier date if pre-signature disclosures occurred
Specify: The hybrid definition (marked + reasonable person test) plus a non-exhaustive list of categories.
- Default: information marked as confidential at disclosure AND information a reasonable person would understand to be confidential given context
- List specific categories: business plans, financial info, customer lists, technical specs, source code, product roadmaps, pricing, employee info, supplier terms
- For technical NDAs: explicitly include trade secrets sub-definition with statutory references
- For NDAs touching personal data: include UK GDPR / state privacy law treatment
- Avoid the marked-only trap (excludes oral disclosures) and the catch-all trap ('all information' is unenforceable)
Define the scope: The specific Purpose limits how the receiving party may use the Confidential Information.
- Purpose: 'to evaluate a potential investment' / 'to discuss a possible commercial partnership' / 'to conduct due diligence on a proposed acquisition'
- Authorised recipients: employees, advisors, investors, professional advisers (each under confidentiality obligations)
- Need-to-know basis: only those who need access for the Purpose
- Prohibited uses: reverse engineering, decompilation, use to develop competing products
- For M&A: consider clean-team provisions for highly sensitive competitive information
Distinguish two concepts: Term (how long disclosures continue) vs Survival (how long obligations last after Term ends).
- Investor NDAs: Term 1-2 years, Survival 3 years
- M&A diligence NDAs: Term 18 months, Survival 5 years; perpetual for trade secrets
- Partnership NDAs: Term 12-24 months, Survival 3-5 years
- Vendor NDAs: Term 12 months, Survival 3 years
- Technical NDAs: Term 2-3 years, Survival 5+ years; perpetual for trade secrets
- Always include the trade secret carve-out: 'except for Trade Secrets, where obligations survive for as long as the information remains a trade secret'
Include the five standard carve-outs: Without them, the NDA is unenforceable in most jurisdictions.
- Information that is or becomes publicly known (other than through breach by the receiving party)
- Information already known to the receiving party at disclosure (with documented evidence pre-dating receipt)
- Information independently developed without reference to the disclosing party's information
- Information lawfully received from a third party without confidentiality obligations
- Information required to be disclosed by law, court order or regulatory authority (with prompt notice where lawful)
- Optionally: residuals - general knowledge retained in unaided memory by receiving party's personnel
Include: Return / destroy obligations, optional residuals clause, injunctive relief and damages provisions.
- Return or destroy on Purpose completion or written demand
- Written confirmation of destruction (signed by an officer)
- Retention exceptions: legal hold, automated backups, regulatory retention requirements (with continued confidentiality)
- Residuals (technical NDAs only): general concepts retained in unaided memory permitted; specific technical details, source code excluded
- Acknowledgement that monetary damages may be inadequate
- Right to seek injunctive relief without proving actual loss or posting bond
- For US drafting: include the DTSA whistleblower immunity notice (mandatory for post-2016 NDAs)
- All other rights and remedies (damages, accounting of profits, indemnity) reserved
Execute: Both parties sign and date; deliver copies; archive securely.
- Use DocuSign, Adobe Sign, HelloSign or similar - electronic signatures are valid for ordinary NDAs in UK and US
- For particularly sensitive disclosures (M&A clean team, defence-classified, government contracts), some parties prefer wet-ink and counterpart originals
- State the governing law: English law for UK / EU; Delaware or NY law commonly for US
- State the jurisdiction: English courts; Delaware Court of Chancery; or arbitration under LCIA / AAA / ICC rules
- Date the NDA on signature; do not retroactively cover pre-signature disclosures unless both parties expressly agree
- Archive in a central NDA register with key terms (parties, Purpose, Term, Survival, governing law)
Critical Success Factors
- Use the hybrid Confidential Information definition (marked + reasonable person test) to capture oral disclosures
- Always include the five standard carve-outs - their absence makes the NDA unenforceable
- Distinguish Term from Survival Period - they should be different durations
- For technical NDAs, include the residuals clause to avoid impossible compliance burdens on engineers
- Include perpetual survival for trade secrets, ordinary survival (3-5 years) for commercial information
- For US NDAs (post-2016), include the DTSA whistleblower immunity notice or lose exemplary damages and attorneys' fees
- Acknowledge that monetary damages may be inadequate and provide for injunctive relief without bond
Best Practices for Mutual NDAs
Drafting and Customisation
- One master template, deal-specific Purpose: Maintain a single mutual NDA template; vary the Purpose, Term and Survival per deal
- Plain English where possible: NDAs are signed by commercial people who need to understand their obligations - especially the Purpose and the carve-outs
- Symmetry discipline: Mutual NDAs must be symmetric - if one party gets stronger remedies or longer survival, it is no longer mutual and the negotiation slows down
- Trade secret-aware drafting: Always include the perpetual-survival-for-trade-secrets clause; it is a low-cost protection that matters at the moment it is needed
- Version control: Date every version of the template; never amend a signed NDA without a written amendment letter and counter-signature
Negotiation and Process
- Send your template first: Sending your template anchors the negotiation; receiving the counterparty's template means you negotiate on their drafting
- Standard mark-ups to expect: Term and Survival lengths, scope of carve-outs, residuals clause, jurisdiction. Most other clauses are uncontroversial
- Common counterparty objections: No residuals (insist for technical NDAs); shorter survival (acceptable for ordinary commercial info); explicit carve-outs (always include)
- Walk through with both parties' commercial teams: Lawyers can draft, but commercial people need to understand and own the obligations
- For M&A diligence: Add clean-team provisions for highly sensitive competitive information; consider standstill provisions for hostile situations
Storage and Compliance
- NDA register: Maintain a central register of all NDAs in and out, with key terms (counterparty, Purpose, Term, Survival, governing law)
- Survival diary: Track survival end-dates so you know when obligations expire; relevant for both internal training and external compliance
- Return / destroy diary: Diary the Purpose-completion date; trigger return-or-destroy review automatically
- Counter-party intelligence: Track which counterparties tend to mark up NDAs heavily so you can adjust pace and resourcing
- Pre-deal diligence: Most data rooms ask for a list of all material NDAs in due diligence; the NDA register is the evidence
Modern Practice in 2026
- NDA management platforms (Ironclad, ContractWorks, LinkSquares, Outlaw) for high-volume sales / BD intake
- Click-to-sign NDA portals embedded in investor data rooms (DocSend, Foundersuite, Affinity)
- AI-assisted contract review for inbound NDAs (Lawgeex, Spellbook, Robin AI)
- Standardised NDA frameworks (e.g., Common Paper) gaining adoption in B2B SaaS
- DTSA-compliant whistleblower immunity notice in all US-touching NDAs (mandatory)
- Post-Brexit dual-jurisdiction drafting (English law + Delaware) for cross-Atlantic deals
- Privacy-aware drafting for personal data within Confidential Information (UK GDPR + state privacy laws)
Common Mistakes to Avoid
Top 10 Mutual NDA Pitfalls
- Confidential Information defined as 'marked confidential' only: This excludes oral disclosures during meetings, which are often the most sensitive. Use the hybrid definition: marked + reasonable person test
- No carve-outs / exceptions: The NDA is unenforceable without them. Always include the five standard carve-outs (publicly known, prior knowledge, independently developed, third-party lawful, compelled by law)
- Term and Survival conflated into a single 'duration': Leads to either perpetual NDAs blocking ordinary commercial use, or 1-year NDAs leaking trade secrets. Always distinguish them
- No trade secret carve-out for survival: Trade secrets need perpetual protection (or until they enter the public domain); a 5-year survival is too short
- Vague Purpose: 'For business discussions' is too broad to be enforceable. Use specific Purpose: 'to evaluate a potential acquisition by [Acquirer] of [Target]'
- No residuals clause for technical NDAs: Engineers cannot 'unlearn' what they have seen. Without a residuals clause, technical disclosures create impossible compliance and litigation risks
- No return / destroy obligation: Without a return / destroy clause, the receiving party can retain Confidential Information indefinitely. Always include it, with retention exceptions for legal hold and backups
- No injunctive relief language: Damages for confidentiality breach are notoriously hard to prove and quantify. Express acknowledgement of inadequacy of damages plus right to injunctive relief is essential
- Missing DTSA whistleblower immunity notice (US): Required since May 2016 for any NDA covering employees or contractors; absence precludes exemplary damages and attorneys' fees in trade secret cases
- Non-compete clauses smuggled into the NDA: Non-competes are heavily regulated and often unenforceable (California, UK restraint of trade); putting them in the NDA can taint the whole agreement and is rarely the right vehicle
UK vs US Confidentiality Context
NDA drafting has converged in some areas (the five standard carve-outs are universal) and diverged in others (statutory remedies, employee mobility law, whistleblowing). Here is the side-by-side that matters when drafting.
United Kingdom
UK NDAs operate under English contract law plus the equitable doctrine of breach of confidence and the Trade Secrets (Enforcement, etc.) Regulations 2018 (statutory trade secret remedies including injunctions and damages). Personal data within Confidential Information must be processed in line with the Data Protection Act 2018 and UK GDPR. NDAs cannot be used to silence whistleblowing on protected disclosures under the Public Interest Disclosure Act 1998 or to suppress reporting of unlawful conduct — SRA and Law Society guidance restricts solicitors from drafting such NDAs. Restraint-of-trade analysis applies to non-solicit / non-compete clauses: reasonable scope, duration and geography, and a legitimate business interest. Injunctive relief is the primary practical remedy.
United States
US NDAs operate under state contract law plus the Uniform Trade Secrets Act (adopted in 48 states) and the federal Defend Trade Secrets Act 2016 (DTSA). The DTSA created a federal civil cause of action for trade secret misappropriation in interstate commerce, with remedies including injunctions, damages, exemplary damages and attorneys' fees. Critical drafting requirement: NDAs covering employees and contractors must include the DTSA whistleblower immunity notice (immunity for confidential disclosures to government, attorneys, in pursuit of whistleblowing) - absence of this notice precludes exemplary damages and attorneys' fees. State variation: California, North Dakota and Oklahoma sharply restrict non-competes. The FTC's 2024 non-compete rule (subject to ongoing litigation) would broadly prohibit employment non-competes - check current status.
Both jurisdictions
The substantive economics — what is confidential, how it can be used, how long obligations last, what carve-outs apply — are similar across both. The differences are in formalities (DTSA notice required in US, not UK), employee mobility law (heavily regulated in some US states, restraint-of-trade in UK), whistleblowing protections (PIDA + SRA guidance in UK; DTSA + state-specific harassment protections in US) and remedies (injunctions and damages in UK; injunctions, damages, exemplary damages and attorneys' fees under DTSA in US). The template uses jurisdiction-neutral drafting where possible and provides alternative clauses where the law differs — for example, the DTSA notice as an optional include for US-touching NDAs, and a UK-specific clause confirming the agreement does not affect protected disclosures under PIDA 1998.
What founders and in-house counsel say
Feedback from founders, in-house counsel and commercial lawyers who have used the mutual NDA template on real investor pitches, M&A diligence, partnership negotiations, vendor evaluations and technical R&D collaborations.
Scroll →
Used this template across an entire seed fundraise — 14 investor conversations and one final SPA. The hybrid Confidential Information definition (marked plus reasonable person test) and the carve-outs gave both us and our lawyers confidence to share roadmap and financials freely.
Used this for an M&A diligence process where we were both target and acquirer of different deals running in parallel. The split between Term and Survival Period is exactly right — and the residuals clause was critical for our engineering team participating in technical reviews.
Adopted as our portfolio-wide standard mutual NDA for vendor evaluations and partnership discussions. Wish there was a separate trade-secrets-specific variant with enhanced protections, but for ordinary commercial NDAs it is the cleanest template I have used.
Used this for a cross-border M&A diligence between our US entity and a UK target. The dual-jurisdiction governing law approach and the tested injunctive relief language meant we did not have to maintain two separate template versions.
As an in-house counsel running mass NDA intake from sales and BD, the most useful feature of this template is that it is drafted to be acceptable to both Magic Circle and Big Law counterparties — we get fewer mark-ups and faster turnaround on signature.
Solid foundational template for technical disclosures. We used it for a confidential R&D collaboration with a university spin-out — the residuals clause and the perpetual trade-secret survival made it work for both ordinary commercial information and patentable inventions.
Mutual NDA — Frequently Asked Questions
A mutual NDA (also called a bilateral NDA, two-way NDA, or mNDA) is a non-disclosure agreement under which both parties exchange confidential information and both undertake confidentiality obligations. This contrasts with a one-way NDA, where only one party discloses confidential information and only the other party has confidentiality obligations. Mutual NDAs are the standard format for investor pitches, partnership discussions, M&A diligence, joint development projects, vendor evaluations and any commercial conversation where both sides will share sensitive information. The drafting is symmetric: both parties have the same definition of Confidential Information, the same permitted use, the same exceptions and the same remedies.
A one-way (unilateral) NDA imposes confidentiality obligations on only one party — the receiving party — because only one party is disclosing confidential information. Common scenarios: an employer disclosing trade secrets to a new employee, a company disclosing confidential information to a contractor, a target company disclosing financial information to a potential acquirer in early-stage discussions. A mutual NDA imposes the same obligations on both parties because both are disclosing. Practical guidance: if both parties will share anything sensitive (even if one shares more than the other), use a mutual NDA — it removes friction in negotiation and avoids arguments about who is the discloser. Most investor and partnership conversations are mutual by nature even when they look one-sided on paper.
Two distinct concepts: the Term (how long the parties continue to share Confidential Information) and the Survival Period (how long the confidentiality obligations continue after the Term ends). Standard practice: Term of 1-3 years for evaluation NDAs, with the Survival Period running 3-5 years post-Term for ordinary commercial information. For trade secrets, Survival should run for as long as the information remains a trade secret (potentially perpetual). Don't use a single 'duration' clause that conflates the two — it leaves either a perpetual NDA blocking ordinary commercial use, or a 1-year NDA leaking sensitive technical information. Investor NDAs and pitch NDAs commonly have shorter terms (12-24 months) because the relevance of pre-funding business information decays quickly; M&A NDAs and technical / R&D NDAs use longer terms (3-5 years for commercial info, perpetual for trade secrets).
Define Confidential Information broadly enough to capture what actually needs protection but with enough specificity to be enforceable. Standard practice covers: (a) information marked or identified as confidential at the time of disclosure; AND (b) information that a reasonable person would understand to be confidential given the context, even if not marked. Include a non-exhaustive list of categories: business plans, financial information, customer lists, technical specifications, source code, product roadmaps, pricing data, employee information, supplier terms, methods, processes, formulas, prototypes. Avoid two traps: requiring only 'marked confidential' (oral disclosures during meetings are rarely marked, so this excludes a huge category of real disclosures), and using only a generic catch-all like 'all information' (which is so broad it becomes unenforceable in practice). The hybrid approach (marked + reasonable person test + non-exhaustive list) is the durable formulation.
Five standard carve-outs exclude information from the confidentiality obligations: (a) information that is or becomes publicly known other than through breach by the receiving party; (b) information already known to the receiving party at the time of disclosure (with documented evidence pre-dating receipt); (c) information independently developed by the receiving party without reference to the disclosing party's information; (d) information lawfully received from a third party who is not under a confidentiality obligation; (e) information required to be disclosed by law, court order or regulatory authority (with prompt notice to the disclosing party where lawful, to allow the disclosing party to seek a protective order). Without these carve-outs, the NDA is unenforceable in most jurisdictions and creates impossible compliance burdens — for example, a receiving party could not respond to a regulatory subpoena, or could be technically in breach for using information that has since been published in a press release.
Yes, but with caution. Non-solicit clauses (a party agrees not to solicit the other party's employees or customers for a defined period) are commonly included in NDAs, particularly for vendor evaluations, M&A processes and partnership discussions where one party will see the other's people and customer base. Non-compete clauses (a party agrees not to compete in a defined market for a defined period) are much rarer in mutual NDAs and are subject to significant enforceability constraints in both UK and US jurisdictions — in the UK, restraint-of-trade analysis applies and the clause must be reasonable in scope, duration and geography; in some US states (notably California), non-competes are largely unenforceable except in very narrow contexts. If you want non-compete protection, consider whether it really needs to be in the NDA or whether it should be a separate, properly-negotiated commercial document. Always cap the duration at 12-24 months and define the protected scope precisely.
A residuals clause permits the receiving party to retain general knowledge, ideas, concepts, know-how and methods acquired in the course of the disclosure, even after the formal return or destruction of Confidential Information. The rationale: engineers, product managers and senior technical staff cannot 'unlearn' what they have seen during a disclosure, and pretending otherwise creates impossible compliance and litigation risks. Residuals clauses are common in technical NDAs, R&D collaboration NDAs and M&A diligence NDAs where engineers participate in technical reviews. Without a residuals clause, an engineer who saw a feature description in an NDA could be deemed to have breached if they later worked on something conceptually similar — even if independently developed. The clause is contentious because disclosers worry it allows licensees to copy ideas; the standard formulation limits residuals to information retained 'in unaided memory' (no notes, no copies) and only general concepts (not specific technical details, not source code).
For ordinary investor pitches, vendor evaluations and routine partnership discussions, a well-drafted template is usually sufficient and both parties should review the key clauses (Confidential Information definition, Purpose, Term and Survival, carve-outs). Get commercial / IP counsel involved when: the disclosure includes trade secrets or patentable inventions (where defective drafting can affect later patent applications or trade secret protection); the NDA covers cross-border disclosures (different jurisdictions have materially different rules on enforceability and remedies); the NDA includes non-solicit or non-compete obligations (which are heavily regulated); the disclosure relates to regulated industries (healthcare, financial services, defence) where additional confidentiality regimes apply; the parties are exchanging genuinely sensitive M&A or competitive information, where bespoke clean-team and standstill provisions may be needed. The cost of an hour with commercial counsel is small compared to the cost of an unenforceable NDA when sensitive information later surfaces in a competitor's product.
Download the Mutual NDA Template
This mutual NDA template handles every standard bilateral confidentiality scenario: investor pitches and fundraising, M&A diligence and corporate transactions, partnership and joint venture discussions, vendor evaluations and procurement processes, technical R&D collaborations, senior hire conversations, and trade-secret-specific disclosures. Includes the hybrid Confidential Information definition (marked plus reasonable person test), the five standard carve-outs, distinct Term and Survival Period drafting, perpetual survival for trade secrets, return-and-destroy mechanics with retention exceptions, optional residuals clause for technical NDAs, injunctive relief and damages, the DTSA whistleblower immunity notice for US drafting, and dual-jurisdiction governing law — all aligned with current UK (English contract law, Trade Secrets Regulations 2018, breach of confidence) and US (state contract law, UTSA, DTSA 2016) confidentiality practice.
What's Included in Your Template
- Complete mutual NDA template in Word, PDF and Google Docs formats
- Variants for investor pitches, M&A diligence, partnership / JV, vendor evaluations, technical R&D, senior hires and trade-secret-specific NDAs in a single document
- Hybrid Confidential Information definition: marked + reasonable person test + non-exhaustive category list
- Five standard carve-outs: publicly known, prior knowledge, independently developed, third-party lawful, compelled by law
- Distinct Term and Survival Period drafting (avoids the conflated 'duration' trap)
- Perpetual survival carve-out for trade secrets, with statutory references
- Purpose and permitted use drafting with need-to-know basis and authorised recipients
- Prohibited uses: reverse engineering, decompilation, competing-product development
- Return / destroy obligations with retention exceptions (legal hold, automated backups, regulatory retention)
- Optional residuals clause for technical NDAs (limited to unaided memory, general concepts only)
- Injunctive relief language: acknowledgement of inadequacy of damages, right to seek injunction without bond
- DTSA whistleblower immunity notice (mandatory for US-touching NDAs covering employees / contractors)
- Dual-jurisdiction governing law (English law / Delaware law) and dispute resolution options
- Optional clean-team and standstill clauses for M&A diligence variants
Why Founders Choose This Template
- Hand-drafted: Written by founders for founders, with input from commercial / IP counsel in both jurisdictions
- Dual jurisdiction: Works for UK and US confidentiality without maintaining two separate templates
- 2026 current: Reflects current UK Trade Secrets Regulations 2018, DPA 2018 / UK GDPR, SRA / Law Society guidance and US UTSA, DTSA 2016, state-specific non-compete and harassment-NDA frameworks
- Magic Circle / Big Law-acceptable: Drafted to pass counterparty review with minimal mark-ups, accelerating signature
- Plain English: Drafted to be readable by commercial people; technical and legal language reserved for clauses where precision matters
- Founder-friendly pricing: One small fee for unlimited use, not per-NDA or per-counterparty
- Editable everything: Word, PDF and Google Docs — edit in whatever tool you use
This template is provided as a starting point and is not legal advice. NDA terms vary by disclosure context, jurisdiction, party type and the sensitivity of the information involved. For NDAs covering trade secrets or patentable inventions, cross-border disclosures, regulated industries (healthcare, financial services, defence), NDAs containing non-solicit / non-compete obligations, or M&A processes involving genuinely sensitive competitive information requiring clean-team or standstill provisions, have commercial / IP counsel review before signing. The drafting set in the NDA propagates through the entire engagement — a missing carve-out, a conflated Term / Survival, or absent injunctive relief language surface as enforcement disputes precisely when sensitive information has already leaked.