Non-Disclosure Agreement (NDA)
What an NDA actually protects, when you need one, and why signing the wrong one can cost you more than not having one at all.
An NDA is a contract that creates a legal obligation to keep specific information confidential. One party shares something valuable, the other party agrees not to disclose or misuse it. What makes the difference between an NDA that protects you and a piece of paper you sign and forget is what it says and whether it was actually signed before anything sensitive changed hands.
The NDA is the most widely used legal tool in business, which also makes it one of the most misunderstood. Founders tend to think they need NDAs for everything or don’t need them at all. The answer is more specific.
When You Actually Need One
An NDA is the right tool when you’re sharing valuable, non-public information with someone who has no existing obligation to keep it confidential.
Before sharing your formula with a contract manufacturer. This is the most important NDA a beauty or skincare founder will ever sign. When you approach a lab or manufacturer with your formula, your ingredient percentages, or your product specifications, you’re handing over your most valuable asset. Every manufacturer you approach should sign an NDA before seeing anything. Sara Blakely did exactly this when she was developing Spanx: every factory she contacted signed an NDA before she showed them what she was building. That discipline is why competitors didn’t know what she was building until she launched.
Before discussing an idea with potential co-founders. These conversations happen before any formal agreement exists, which is exactly when ideas are most exposed. An NDA at the co-founder exploration stage creates a legal record of what was shared and when, which matters if the relationship doesn’t work out.
Before pitching to potential partners or licensees. A licensing conversation requires you to reveal enough about your product to make it interesting. That disclosure needs to be protected.
Before hiring employees with access to trade secrets. An NDA in an employment agreement is standard. It should cover what counts as confidential information, the employee’s obligations while employed and after they leave, and the duration of those obligations.
Before working with outside contractors, consultants, or agencies. A freelance designer who sees your unreleased product line, a consultant who reviews your financials, a PR agency that gets early access to your launch strategy: all of them should sign before accessing anything sensitive.
Unilateral vs. Mutual NDAs
A unilateral NDA flows one direction. You share confidential information, the other party agrees not to disclose or misuse it. This is what you use with manufacturers, contractors, and service providers.
A mutual NDA goes both directions. Both parties share confidential information, both agree to protect it. This is appropriate for co-founder discussions, joint venture negotiations, or partnership conversations where both sides are disclosing sensitive material.
Using a mutual NDA when you only need a unilateral one isn’t a disaster, but it creates obligations on your side you may not have thought through. If the manufacturer later claims you shared their confidential information, the mutual NDA gives them standing they wouldn’t have had otherwise.
What a Good NDA Includes
Definition of confidential information. This determines what’s actually protected. A definition that covers only “formulas” leaves out your supplier relationships, pricing, and product roadmap. A definition written to cover any non-public business information shared in connection with the relationship is much stronger. Most template NDAs are too narrow here.
Exclusions from confidentiality. Information that was already publicly known before you shared it isn’t protected. Information the receiving party can prove they developed independently isn’t protected. Information they received from a third party with no confidentiality obligation isn’t protected. These exclusions are standard and reasonable. Watch for any exclusion written so broadly it swallows the protection you thought you had.
Permitted use. The NDA should specify that confidential information can only be used for the purpose of the specific relationship. A manufacturer who signs your NDA should be prohibited from using your formula insights to improve their offering to your competitors.
Duration. For general business information, 2 to 5 years is standard. For trade secrets, the obligation should be indefinite, or explicitly tied to how long the information qualifies as a trade secret. A 2-year term on a formula NDA means the manufacturer is legally free to talk after that window closes.
Remedies. The receiving party should acknowledge that a breach would cause irreparable harm that money alone can’t fix, and that you’d be entitled to injunctive relief. This matters when you need to go to court immediately to stop someone from disclosing your formula before the damage is permanent.
Governing law. NDAs are governed by state law. Specify which state’s law applies. This affects enforceability, especially for non-compete provisions included in employment NDAs.
What NDAs Can’t Do
An NDA doesn’t protect information that doesn’t qualify as a trade secret. Calling something confidential in a contract doesn’t make it legally protected if it’s already public or has no competitive value from being secret. The NDA creates a contractual obligation. It doesn’t create intellectual property rights that don’t otherwise exist.
An NDA doesn’t prevent someone from using general skills and knowledge. Courts distinguish between confidential information and the skills an employee develops over time. An NDA can prevent a chemist from disclosing your specific formulas. It cannot prevent them from being a chemist. Courts will not enforce NDAs that effectively block someone from working in their field.
An NDA doesn’t stop whistleblowing. Under the Defend Trade Secrets Act, employment agreements and NDAs are required to include a notice that disclosures to government investigators, when reporting potential violations, are not covered by the confidentiality obligation. An NDA that doesn’t include this notice is missing a mandatory clause.
An NDA doesn’t stop a determined infringer. An NDA is a legal mechanism, not a physical lock. It creates the basis for a lawsuit if someone breaches it. It doesn’t make it impossible to share information. Treat it as a deterrent, a legal foundation for claims if something goes wrong, and a signal to the other party that you take this seriously.
An overly broad NDA may not be enforceable. Courts in many states will refuse to enforce NDAs that are unreasonably broad in scope, duration, or the type of information they cover. An NDA that tries to protect everything forever sounds intimidating. It often means very little in court.
When Investors Won’t Sign One
Most professional venture capitalists will not sign an NDA before an initial pitch meeting. This is consistent practice across the industry, and it’s not negotiable from your side. VCs see hundreds of pitches a year, many in overlapping spaces. Signing NDAs for every meeting would create an unmanageable web of obligations and potential conflicts.
This doesn’t mean you’re unprotected. It means you should be deliberate about what you disclose before a term sheet exists. Describe your business, your traction, your model. Hold back the specific formula, the manufacturing process, and the technical details that constitute your actual trade secrets until you’re in due diligence and a mutual confidentiality agreement is in place. The pitch should be compelling without revealing the crown jewels.
Angel investors and strategic partners are different. Requesting an NDA in those conversations is reasonable, and most will sign.
What Happens When Someone Breaches It
A breach gives you a cause of action for breach of contract. If confidential information was disclosed but hasn’t yet been used, you can seek an injunction to stop further disclosure immediately. If you’ve already suffered economic harm, you can seek damages. If the breach involved trade secrets, you can also pursue claims under the Defend Trade Secrets Act or applicable state trade secret law, which add the possibility of exemplary damages for willful misappropriation.
The challenge with enforcement is proving what was shared, when, and what the damage was. Companies with well-documented protection measures (logs of who accessed what, watermarked documents, clear records of what was shared) are in a much stronger position than those with a signed NDA and no supporting documentation.
NDA cases that go to trial can cost $200,000 to $1 million in attorney fees. Most settle. The value of an NDA isn’t only in the lawsuit it enables. It’s in the conversation it prevents, the signal it sends that you take this seriously, and the leverage it gives you when you need to resolve something without going to court.
Frequently Asked Questions
Does an NDA need to be notarized?
No. Notarization isn’t required for enforceability. What matters is that both parties signed it, the terms are clear, and there was consideration on both sides (which in an NDA is typically the disclosure of information in exchange for the promise of confidentiality).
Can I use a free template NDA?
A reputable template is better than nothing for straightforward contractor or vendor relationships. The risk is that templates are often too generic: the definition of confidential information may be too narrow, the duration may not be appropriate for trade secrets, or the remedies clause may be missing entirely. For anything involving your core formula, manufacturing process, or major business relationships, have an attorney review it.
How long should an NDA last?
For general business information, 2 to 5 years is standard. For trade secrets, the obligation should be indefinite, or explicitly tied to how long the information retains trade secret status. An NDA with a fixed 2-year term on formula confidentiality is significantly weaker than one with perpetual obligations.
What’s the difference between an NDA and a non-compete?
An NDA restricts disclosure of specific information. A non-compete restricts what kind of work someone can do after leaving a company. They’re often included in the same document, especially for employees, but they do different things. Non-competes are much harder to enforce than NDAs: California doesn’t enforce them in employment contexts at all, and many other states have narrowed their enforceability significantly. Bobbi Brown sold her cosmetics brand to Estée Lauder in 1999, was bound by post-acquisition agreements, and didn’t launch a competing brand until Jones Road in 2020. That wasn’t an NDA at work. It was a non-compete as part of an acquisition deal, which is a different animal.
Should my co-founder sign an NDA?
Yes, before substantive conversations begin. A co-founder NDA isn’t about distrust. It’s about creating a clear record of what was shared and when, in case the relationship doesn’t work out. A co-founder who becomes an ex-co-founder with your product concept, your formula, and your business model is exactly the scenario an NDA is designed to address.
Does confidential information need to be labeled to be protected?
It depends on the NDA. Some agreements require information to be marked “CONFIDENTIAL” to receive protection. Others protect any information a reasonable person would understand to be confidential based on the nature of the disclosure. The second approach is better for founders, because not everything shared in a working conversation gets labeled in the moment. Your NDA should not require physical marking.
Sources
- U.S. Congress, “Defend Trade Secrets Act of 2016,” 18 U.S.C. § 1836. Whistleblower immunity carve-out requirements for employment NDAs.
- Uniform Law Commission, “Trade Secrets Act,” 1985 (amended 1986). State-level trade secret and NDA enforceability framework.
- USPTO, “Trade Secret Policy,” 2024. NDA use in trade secret protection context.
- Nolo, “Using Nondisclosure Agreements to Protect Business Trade Secrets”. Common NDA clauses, enforceability standards, and state law differences.
- Wilson Sonsini, “Should VC Firms Sign Nondisclosure Agreements?” 2007. VC practice on NDA signing and investor pitch disclosure norms.