What Is an NDA? Non-Disclosure Agreements Explained

What is an NDA? Short for non-disclosure agreement, an NDA is a legally binding contract in which one or more parties agree to keep specific information private. When you sign one, you accept a legal obligation not to share what is covered with anyone outside the agreement. Breaking that obligation counts as a breach of contract, and the other party can seek damages, injunctions, or both. NDAs are standard across EU, UK, and Swiss business practice wherever sensitive information changes hands.

What Does an NDA Actually Do?

An NDA does one thing well: it creates a legal consequence for disclosing specified information to unauthorised parties. Before anyone signs, sharing a business idea or financial projection carries no contractual risk for the recipient. After signing, it does. That shift in legal exposure is what makes NDAs useful.

In practice, NDAs come up when two companies discuss a potential partnership and need to share pricing models or technology details. They appear when a founder pitches investors before a product launch. They are standard in employment contracts for roles with access to proprietary systems, client databases, or trade secrets. The document itself does not protect the information; it creates recourse if the information is later mishandled.

One point that surprises people: an NDA only works for information shared after it is signed. If you disclosed your business model in a first meeting and sent the NDA the following week, what you said in that meeting is not covered. In practice, this means keeping details high-level until the agreement is in place.

Mutual vs. Unilateral: Which Type Do You Have?

Most NDAs fall into one of two categories, and the distinction matters before you sign.

A unilateral NDA is signed by one party who agrees not to disclose information shared by the other. This is the most common setup when a company brings in a contractor, a consultant, or a new hire. The company shares sensitive information; the other party agrees to protect it.

A mutual NDA (also called a bilateral NDA or MNDA) requires both parties to keep each other's information confidential. This structure appears in merger discussions, joint ventures, or any negotiation where both sides are sharing proprietary information simultaneously. A mutual NDA is not inherently stronger; it simply reflects the symmetry of the disclosure.

If you receive an NDA described as standard, check which type it is before signing. A company may send a unilateral NDA that protects only their information, even in a context where you are also disclosing proprietary data. In that case, you are accepting obligations without receiving the same protections in return.

The Clauses That Determine Whether Your NDA Has Any Teeth

Not all NDAs provide the same level of protection. These are the sections worth reading carefully.

Definition of confidential information. This clause controls what is actually protected. A broad definition ("all information disclosed by the disclosing party") can include almost anything. A narrow one may leave critical data unprotected. You want the definition specific enough to be enforceable but broad enough to cover what you care about. Courts in Germany, Austria, and Switzerland have historically required reasonable specificity: a clause protecting "all information of any kind" is harder to enforce than one that names categories.

Exclusions. Every NDA includes carve-outs: information that is already public, that the receiving party already knew before signing, that they developed independently, or that they received from a third party without restriction. These are standard and legitimate. Read them to understand what your NDA does not cover.

Duration. NDAs can last two years, five years, indefinitely, or until the information enters the public domain. For trade secrets under EU Directive 2016/943, protection is not time-limited as long as the information remains secret. For standard business information, a three-to-five year term is typical. A very short term may be insufficient; an indefinite term on non-trade-secret information may be challenged as unreasonably broad.

Obligations of the receiving party. This section specifies how the receiving party must handle information in practice: whether they can share it with employees, whether they must use specific security measures, whether they are required to return or destroy documents on request. These obligations are the operational core of the agreement.

Remedies. Most NDAs include a provision stating that breach causes irreparable harm and that the disclosing party may seek injunctive relief without proving specific financial damages. This clause is particularly important in EU and Swiss jurisdictions where interim injunctions are available on an expedited basis.

Skywork is an AI workspace for document creation, annotation, and review. If you need to mark up an NDA, compare two versions of a contract side by side, or organise your confidentiality documentation before a signing session, it handles document work without requiring a full office suite. Free to start, Pro from approximately $12/mo (code BEYROUTI = -20%).

When You Actually Need an NDA (and When You Don't)

NDAs make sense when the information you are disclosing would be genuinely harmful if it reached competitors, customers, or the public. Business model details before a product launch, client lists, pricing structures, proprietary code, and manufacturing processes are the kinds of information that justify a confidentiality agreement.

They are less useful in a few situations. An NDA cannot protect an idea that is not specific enough to be identified later. If you are pitching a broad concept without implementation details, the NDA may be enforceable in principle but difficult to use in practice; proving what was disclosed and that it was subsequently misused is the claimant's burden. Venture capital investors across the EU and the US frequently decline to sign NDAs at early-stage pitch meetings, citing the volume of similar concepts they encounter. That does not mean they are free to misuse information; it means the NDA may not be the right instrument at that stage.

NDAs also do not replace intellectual property protection. If you have patentable technology or copyrightable software, the appropriate protection starts with IP registration. The NDA is a complement to those protections, not a substitute.

What Happens If Someone Breaks an NDA?

A breach of NDA is a breach of contract, which opens several legal avenues. The injured party can seek damages for lost profits caused by the disclosure, an injunction preventing further disclosure or use, the return or destruction of the disclosed information, and in some EU jurisdictions, disgorgement of profits derived from the misuse.

In practice, NDA litigation is expensive and outcomes are uncertain. Proving that specific information was disclosed, that the receiving party was the source of any subsequent leak, and that financial harm resulted requires substantial evidence. This is one reason why NDAs function primarily as deterrents: their main role is to make disclosure costly enough that it does not happen.

If you believe an NDA has been breached, document what was shared, when, and to whom, along with any evidence of subsequent disclosure, before contacting the other party. Collecting that record with legal counsel before taking action gives you a stronger position.

TicNote is an AI meeting recorder that generates structured notes, action items, and a written summary from calls and video meetings. When NDA negotiations happen remotely, TicNote creates a timestamped record of what was discussed, including what information was shared and when the agreement was confirmed. Free up to 300 minutes per month, paid from approximately $15/mo.

Drafting Mistakes That Weaken an NDA

Several problems appear repeatedly in NDAs that fail to deliver the intended protection.

Signing after disclosure is the most common. Information shared informally before a document is signed is not covered by the NDA, regardless of retroactive language. This happens frequently in early sales conversations and informal introductory meetings where details come out before anyone thinks to formalise the arrangement.

Vague definitions create disputes. An NDA that protects "proprietary information" without defining what that means gives the receiving party room to argue that specific items were not covered. The more precisely the confidential information is described, the easier any dispute is to resolve.

Including a non-compete inside an NDA is a separate matter. In EU and Swiss law, non-compete clauses have specific requirements, including reasonableness of scope, duration, and geographic reach, that are distinct from confidentiality obligations. Bundling them in a single NDA without addressing those requirements may create enforceability issues for both provisions.

NDAs signed under time pressure deserve extra attention. If you receive a document with a short deadline and limited room to negotiate, at minimum read the definition of confidential information, the duration, and the remedies clause before signing.

Wegic lets you build and manage a website by chatting with AI. For freelancers and small businesses that regularly receive NDAs from clients, having a clean professional page with your contact details, service terms, and confidentiality policy reduces friction at the start of each engagement. Free for one site, from $9/mo for additional projects.

Three Things to Check Before You Sign

If you review only three parts of an NDA before signing, make them these.

First, read the definition of confidential information carefully. If it is very broad, you may be accepting obligations for information you receive through ordinary business channels unrelated to the current discussion.

Second, check the term. A five-year NDA is a five-year obligation. An indefinite term on general operational business information (not trade secrets) is worth negotiating, and in some EU jurisdictions courts may limit it regardless.

Third, verify the governing law and jurisdiction. An NDA governed by a non-EU legal system may be harder to enforce or defend in a Swiss, Austrian, or German court. For EU-based businesses, a familiar jurisdiction reduces friction if a dispute ever arises.

Before any signature, it is worth asking: what specific information am I protecting, for how long, and what do I have to do if something goes wrong? Those three questions cover most of what matters in a standard NDA.

This article is for informational purposes only and does not constitute legal advice. For matters relating to your specific agreements, consult qualified legal counsel in your jurisdiction.