Non-Disclosure Agreement Template 2026

Mutual and one-way NDA templates with a comprehensive guide. Learn what an NDA is, how to scope confidential information correctly, choose the right term and jurisdiction, and download a template designed by legal experts for commercial discussions, partnerships, and employment.

Download Mutual NDA Download One-Way NDA

What is a Non-Disclosure Agreement?

Professional non-disclosure agreement for commercial discussions and partnerships

A non-disclosure agreement (also called a confidentiality agreement, NDA, or CDA) is a legally binding contract in which one or more parties agree to keep specified information confidential and not to use it for any purpose beyond the one defined in the agreement. NDAs are the entry-level commercial contract for almost every business conversation that involves sensitive information: pitch meetings with investors, vendor evaluations, partnership discussions, M&A diligence, employment relationships, and contractor engagements.

An NDA performs three jobs at once. First, it puts the recipient on notice that information shared during the relationship is commercially sensitive. Second, it creates a documented, enforceable obligation to handle that information carefully and only for the agreed purpose. Third, it gives the disclosing party a clear path to remedies, including injunctive relief, if the information is misused. Without a written NDA, the disclosing party is left to rely on the general law of confidence, which is enforceable but materially harder to invoke and slower to remedy.

Key Components of an NDA

  • Definition of Confidential Information: What counts as confidential, in what form, and how it must be marked
  • Standard Exclusions: Carve-outs for information that is public, independently developed, or lawfully obtained
  • Permitted Purpose: The specific purpose for which the information may be used
  • Permitted Recipients: Who within the receiving party may see the information
  • Term and Survival: How long the obligations last, including post-termination survival
  • Return or Destruction: What happens to the information at the end of the relationship
  • Remedies: Injunctive relief, damages, and account of profits for breach
  • Governing Law and Jurisdiction: Which courts apply and which law governs

Types of NDAs and When to Use Each

Choosing the right type of NDA matters more than most people realise. The three most common types differ in who has confidentiality obligations and in how heavily the agreement is negotiated. Picking the wrong type can leave one party over-exposed or make the agreement so adversarial that it slows down the underlying deal.

Type Who is Bound Common Use Typical Term
Mutual NDA Both parties Reciprocal partnerships, M&A discussions, joint ventures 2 to 5 years
One-Way NDA The receiving party only Vendor evaluation, contractor engagement, investor pitch 2 to 5 years
Multilateral NDA Three or more parties Multi-party consortia, syndicated deals, working groups 3 to 7 years
Employee NDA Employee, often perpetual Embedded in employment contract Term of employment plus survival

Mutual NDAs

A mutual NDA imposes confidentiality obligations on both parties, on the basis that each will share confidential information with the other. Mutual NDAs are the default for two-sided commercial conversations such as M&A discussions, joint ventures, channel partnerships, and reciprocal API integrations. Because both parties have skin in the game, mutual NDAs are typically negotiated more efficiently than one-way NDAs and tend to be shorter in length.

One-Way (Unilateral) NDAs

A one-way NDA only restricts the receiving party because the disclosing party is the only side sharing confidential information. One-way NDAs are common when engaging contractors, consultants, freelancers, or evaluating a vendor. They are also commonly used by founders pitching investors. One-way NDAs from the disclosing party's side tend to be drafted more aggressively because the disclosing party bears all the risk; receiving parties (especially institutional investors) often refuse to sign them.

Multilateral NDAs

A multilateral NDA binds three or more parties simultaneously, typically in consortia, syndicated deals, multi-party R&D collaborations, or working groups. They are harder to draft because each party may share information with the others, and the document must address how confidentiality flows in every direction. Multilateral NDAs often need a defined "Disclosing Party" and "Receiving Party" status that varies depending on which information is being shared.

Employee Confidentiality Agreements

Employee NDAs are usually embedded in the employment contract rather than executed as a standalone document. They cover confidential business information, customer data, source code, and trade secrets, and they typically survive termination of employment for a defined period. Employee NDAs cannot lawfully prevent disclosures protected by whistleblower legislation such as the UK Public Interest Disclosure Act 1998 or equivalent regimes elsewhere.

When to Use a Mutual NDA Instead of One-Way

  • Both parties will share commercially sensitive information
  • The relationship is reciprocal in nature (partnership, JV, M&A)
  • You want to avoid an adversarial negotiation tone
  • The receiving party has bargaining power and is unlikely to accept a one-way document
  • You expect ongoing exchange of information over a multi-year relationship

Essential NDA Components

A well-drafted NDA balances breadth of protection with usability. Each of the following components is non-negotiable in any commercial NDA.

Definition of Confidential Information

The most important clause in any NDA defines what counts as confidential information. The definition should be broad enough to cover all sensitive information shared during the relationship, but narrow enough to be enforceable. Best practice is to include a non-exhaustive list of categories (business plans, financials, customer lists, technical specifications, source code, commercial terms) and to capture both information marked confidential and information that would reasonably be understood to be confidential given its nature or the circumstances of disclosure. Avoid definitions that are circular ("Confidential Information means information that is confidential") or that depend solely on marking, which leaves disclosing parties exposed if marking is missed.

Standard Exclusions

Every NDA should expressly exclude five categories of information from the confidentiality obligations: (1) information that is or becomes public through no breach by the receiving party; (2) information already known to the receiving party prior to disclosure; (3) information independently developed by the receiving party without reference to the confidential information; (4) information lawfully obtained from a third party not bound by confidentiality; and (5) information required to be disclosed by law, court order, or regulatory authority, subject to advance notice where legally permitted.

Permitted Purpose and Permitted Recipients

The NDA should state the specific purpose for which the confidential information may be used (for example, "evaluating a potential commercial partnership" or "performing the services under the underlying agreement"). It should also identify the permitted recipients within the receiving party's organisation. The standard formulation is "employees, officers, professional advisers, and named subcontractors who have a need to know and who are bound by confidentiality obligations no less protective than this Agreement."

Term and Survival

NDAs should have an explicit term during which the relationship is active, and a survival period during which obligations continue after termination. Two to five years is the typical term for ordinary commercial information. Trade secrets often warrant indefinite or longer survival under English law and the EU Trade Secrets Directive, while time-limited commercial discussions may justify shorter survival periods.

Return or Destruction

At the end of the relationship the receiving party should be required to return or, at the disclosing party's choice, destroy all copies of the confidential information, including copies held by permitted recipients, and to provide written certification of destruction. A standard carve-out preserves copies retained for legal, regulatory, or backup purposes, with continued confidentiality obligations.

Remedies and Injunctive Relief

The NDA should expressly acknowledge that money damages may be inadequate for a breach and that the disclosing party is entitled to seek injunctive relief without needing to prove irreparable harm or post a bond. This clause materially strengthens the disclosing party's ability to obtain quick interim relief in court.

Governing Law and Jurisdiction

The NDA should specify the governing law and the courts of exclusive (or non-exclusive) jurisdiction. For UK businesses the default is England and Wales with the courts of England and Wales having exclusive jurisdiction. For cross-border NDAs, parties often pick a neutral law and venue (English law and London courts, or New York law and federal courts in the Southern District of New York) and consider whether arbitration under LCIA or ICC rules is appropriate.

Common NDA Pitfalls

  • Vague definitions: "Confidential information includes everything we tell you" is unenforceable. Be specific about categories.
  • Missing carve-outs: Without standard exclusions the receiving party is technically in breach the moment they read a public news article on the subject.
  • Unenforceable non-competes: Bundling broad non-compete clauses into NDAs can render the entire agreement unenforceable in jurisdictions that disfavour restraint of trade.
  • Conflicting jurisdiction: Choosing a forum that has no connection to either party can lead to enforcement difficulties.
  • No survival clause: Without a defined survival period, obligations may evaporate with the underlying agreement.
  • Missing residuals clause negotiation: A poorly drafted residuals clause can let the receiving party walk away with everything in their head.

How to Fill Out a Non-Disclosure Agreement: Step-by-Step Guide

Filling out an NDA correctly takes about thirty to forty-five minutes the first time and considerably less once you have a working template. The following steps walk through the process in order.

1
Identify the Parties and the Type of NDA

Capture the legal name, registered address, and entity type of every party (limited company, LLP, partnership, sole trader, individual). Confirm registration numbers from Companies House, the equivalent registry in the relevant jurisdiction, or HMRC. Decide whether the NDA is one-way, mutual, or multi-party. Get this wrong and the entire document needs to be redrawn.

2
Define the Confidential Information

List the specific categories of information that will be shared (business plans, financials, customer data, technical specifications, source code, commercial terms, employee data). Decide whether the definition should rely on marking, the nature of the information, or both. Add the standard exclusions (publicly known, independently developed, lawfully obtained from third parties, required to be disclosed by law).

3
Set the Permitted Purpose and Permitted Recipients

State the specific purpose for which the information may be used. "Discussing a potential commercial partnership" is acceptable; "any business purpose" is not. Identify the permitted recipients: typically employees, officers, professional advisers, and named subcontractors with a need to know, all bound by equivalent confidentiality obligations.

4
Choose the Term and End-of-Term Obligations

Select a term length appropriate to the sensitivity of the information. Two to three years is the default for commercial discussions; five years for M&A or strategic partnerships; longer or indefinite for trade secrets. Capture the return-or-destroy obligation, with a carve-out for legal retention requirements (HMRC records, audit logs, regulatory backups).

5
Pick Governing Law, Jurisdiction, and Remedies

For UK-based parties, default to English law and the exclusive jurisdiction of the courts of England and Wales. For cross-border NDAs, consider whether a neutral law and venue is appropriate and whether to use arbitration. Expressly preserve the right to seek injunctive relief without proving irreparable harm or posting a bond.

6
Execute and Store the Signed Copy

Sign electronically (DocuSign, Adobe Sign, HelloSign) or in counterparts. Both methods are valid in most jurisdictions. Store the executed copy in a contracts management system or secure shared drive, tagged with the parties, term, and renewal date. Set a calendar reminder thirty days before the term expires so you can renew, replace, or wind down the relationship as needed.

When Negotiation Will Take Longer

Standard NDAs are usually signed within a few days. Negotiation timelines stretch when one party insists on a residuals clause, when the term exceeds five years, when the agreement includes non-compete or non-solicitation clauses, when the governing law is in a jurisdiction that one party's counsel does not regularly handle, or when the underlying transaction involves regulated industries (healthcare, defence, financial services). For high-value or complex deals, expect one to two weeks of negotiation.

Frequently Asked Questions

Two to three years is the default for ordinary commercial discussions. Five years is appropriate for M&A diligence, joint ventures, and strategic partnerships. Trade secret information often warrants indefinite or longer survival under English law and the EU Trade Secrets Directive. Time-limited bidding processes may justify shorter terms of six to twelve months. The right answer depends on the commercial half-life of the information rather than a fixed default.

Yes. Sophisticated investors, large enterprises, and most law firms routinely refuse to sign NDAs in exploratory discussions because they review hundreds of similar opportunities and cannot afford to be tainted on every adjacent topic. If a counterparty refuses to sign, the disclosing party should adjust how much sensitive information is shared verbally and in slides, and reserve detailed disclosure for after a term sheet or letter of intent is signed.

A residuals clause permits the receiving party to use information that becomes lodged in the unaided memory of its personnel, even after the formal end of the relationship. It is common in NDAs proposed by larger companies and software vendors. Disclosing parties typically push back on residuals clauses, especially for technical know-how, but accepting a tightly drafted residuals clause is sometimes the price of doing business with a sophisticated counterparty. If you accept one, narrow it to specific named individuals and exclude trade secrets and source code.

Yes. Electronic signatures are valid for NDAs in the United Kingdom under the Electronic Communications Act 2000 and the Law Commission's 2019 confirmation, in the European Union under eIDAS, and in the United States under the ESIGN Act and UETA. DocuSign, Adobe Sign, HelloSign, and similar platforms produce admissible signed copies. The exception is for documents requiring a deed (which require additional formalities) and certain land transactions, neither of which applies to standard commercial NDAs.

Available remedies typically include injunctive relief to stop ongoing disclosure or misuse, monetary damages for actual loss, account of profits where the breaching party benefited financially, return or destruction of materials, and in some jurisdictions exemplary damages. Breaches may also trigger separate causes of action for breach of fiduciary duty, breach of the underlying commercial contract, or trade secret misappropriation under statutory regimes such as the EU Trade Secrets Directive or the US Defend Trade Secrets Act.

No. NDAs cannot lawfully prevent employees from making protected disclosures about wrongdoing under whistleblower legislation, reporting matters to regulators or law enforcement, or speaking to medical professionals about their own health. In the UK this is covered by the Public Interest Disclosure Act 1998. NDAs that purport to override these protections are unenforceable to that extent and may expose the employer to additional liability and reputational damage.

The duty of confidence exists in English law independently of any written agreement, but enforcing it without a written NDA is materially harder. The disclosing party must prove that the information had the necessary quality of confidence, that it was disclosed in circumstances importing an obligation of confidence, and that there was unauthorised use to its detriment. A written NDA short-circuits these evidentiary hurdles by documenting all three elements upfront.

An NDA can include narrow, time-limited non-solicitation clauses for employees and customers, and short-duration non-compete clauses where genuinely necessary to protect highly sensitive information. However, broad non-compete clauses bundled into NDAs are increasingly being struck down as unenforceable restraints of trade in the UK, EU, and US. It is generally cleaner to keep NDAs focused on confidentiality and address competitive restrictions in a separate, properly considered restrictive covenant or shareholders' agreement.

Risk and Enforcement Considerations

Risk and enforcement considerations for non-disclosure agreements

Operational Risks

Legal and Procedural Risks

Demonstrating Breach

To enforce an NDA the disclosing party typically needs to show: (1) the information met the contractual definition of confidential information; (2) it was shared under the NDA; (3) the receiving party used or disclosed it outside the permitted purpose or recipients; and (4) the disclosing party suffered loss or the receiving party gained a benefit. Documentary evidence (email trails, access logs, forensic analysis of devices, employee testimony) is decisive in most cases, which is why disclosing parties should keep clear records of what was shared, when, and to whom.

Remedies in Practice

Critical Enforcement Considerations

The single biggest determinant of NDA enforceability is the quality of the contemporaneous record. Courts give weight to clear evidence of when information was shared, what was marked confidential, who had access, and how the receiving party used it. Disclosing parties that operate without proper records find that even well-drafted NDAs are slow and expensive to enforce. Investing in a contracts management system and disciplined access logging materially improves the practical value of every NDA you sign.

International and Cross-Border Considerations

UK Law and the Common Law of Confidence

Under English law, confidential information is protected through a combination of contractual obligations (the NDA itself) and the common law equitable duty of confidence established in Coco v A. N. Clark (Engineers) Ltd [1969] and developed through subsequent case law. The Trade Secrets (Enforcement, etc.) Regulations 2018 transposed the EU Trade Secrets Directive into UK law and provide additional remedies for trade secret misappropriation. UK courts are generally pro-enforcement of well-drafted NDAs and routinely grant interim injunctions to prevent imminent disclosure.

EU Trade Secrets Directive

The EU Trade Secrets Directive 2016/943 harmonises trade secret protection across the European Union. To qualify for protection, information must be secret in the sense that it is not generally known, have commercial value because it is secret, and have been subject to reasonable steps to keep it secret. NDAs are a key piece of evidence of "reasonable steps" and are required for cross-border EU enforcement.

US Defend Trade Secrets Act

The US Defend Trade Secrets Act 2016 (DTSA) provides a federal cause of action for trade secret misappropriation, available alongside state law claims under the Uniform Trade Secrets Act. Importantly, the DTSA requires employers to provide whistleblower notice in NDAs and confidentiality agreements with employees and contractors. Failure to provide this notice can bar exemplary damages and attorney fees in DTSA actions.

China and the NNN Agreement

For commercial relationships involving Chinese counterparties, a standard NDA is generally insufficient. The recommended document is an NNN agreement (Non-Use, Non-Disclosure, Non-Circumvention), drafted in Chinese, governed by Chinese law, and enforceable in Chinese courts. Western-drafted NDAs governed by foreign law are slow and expensive to enforce in China.

Choice of Law and Jurisdiction

International NDA Best Practices

  • Confirm whether your counterparty is a "trade secret" jurisdiction with statutory protection beyond contract
  • Pick a governing law that has a meaningful connection to at least one party
  • For high-value cross-border deals, consider arbitration in a neutral seat (London, Singapore, New York, Stockholm)
  • Translate the NDA into the local language where local enforcement is likely
  • For China-facing deals, use an NNN agreement rather than a standard NDA
  • Document the data flow path so transfers comply with UK GDPR, EU GDPR, and applicable cross-border restrictions

Post-Signing Lifecycle Management

Storage and Retrieval

An NDA you cannot find when you need it has no value. Store the executed copy in a contracts management system or secure shared drive, tagged with the counterparty name, signing date, term, renewal date, and the underlying transaction it supports. For organisations that sign more than ten NDAs a year, consider a contract lifecycle management platform that surfaces obligations and alerts on key dates.

Tracking the Term

Set a calendar reminder thirty days before the term expires so you can decide whether to renew, replace with a new agreement, or let the relationship wind down. Track the survival period separately because confidentiality obligations often outlast the active relationship.

Information Hygiene During the Term

End-of-Term Actions

Signs of a Healthy NDA Process

  • You can locate any executed NDA within ninety seconds
  • You know the term and survival period of every active NDA
  • Your team marks confidential information consistently
  • Permitted recipients lists are current and accurate
  • End-of-term return-or-destroy obligations are actioned within thirty days
  • You have a standard mutual NDA and a standard one-way NDA that 80% of counterparties will accept without negotiation

Download Your Non-Disclosure Agreement Template

Download professional non-disclosure agreement template

Our NDA templates include all the essential provisions you need to properly scope and document confidential commercial relationships. Both the mutual and one-way templates are professionally drafted to align with English law and best practice in the UK, EU, US, and most Commonwealth jurisdictions, and can be customised for specific counterparties, transactions, or industries.

What's Included in Our Templates:

Template Features

  • Covers all standard NDA provisions for commercial use
  • Includes both mutual and one-way structures in a single download
  • Professional legal drafting with clear language and tested clauses
  • Customisable for specific counterparties, transactions, and industries
  • Aligned with the EU Trade Secrets Directive, the UK Trade Secrets Regulations 2018, and the US DTSA
  • Compatible with electronic signature platforms (DocuSign, Adobe Sign, HelloSign)
Download Mutual NDA Template Download One-Way NDA Template

Important Legal Disclaimer

This template is provided for informational purposes only and does not constitute legal advice. Non-disclosure agreements are influenced by jurisdiction-specific case law on the duty of confidence, restraint of trade, whistleblower protections, and trade secret regimes. Every commercial relationship is unique and may require specific legal, regulatory, or industry-specific provisions. While our templates are professionally prepared and aligned with current best practice, we strongly recommend consulting with a qualified solicitor or attorney before using the template for any high-value, cross-border, or industry-regulated relationship.