Non-disclosure agreements are usually treated as a rubber-stamp step before "the real negotiation" — you sign, then get to the actual deal terms. That's a mistake. NDAs create real, sometimes multi-year legal obligations, and the standard template your counterparty sends is rarely neutral.

1. Is it mutual or one-way?

A one-way NDA only obligates you to keep the other party's information confidential — it doesn't protect anything you disclose. If both sides are actually sharing information (which is true in most vendor, partnership, and M&A discussions), a one-way NDA is a signal the drafting party expects to extract more than they give.

What fair looks like: Mutual confidentiality obligations that run both directions, with matching definitions of "Confidential Information" for both parties.

2. How long does confidentiality last?

Watch for "in perpetuity" or terms exceeding 5 years. Confidential information — especially anything short of a genuine trade secret — usually loses commercial sensitivity well before that.

What fair looks like: 2-5 years post-termination, or an explicit trade-secret carve-out that survives indefinitely while everything else expires.

3. Is the definition of "Confidential Information" absurdly broad?

Some NDAs define confidential information as "any information disclosed by either party, in any form, whether or not marked confidential." That's so broad it's nearly impossible to comply with or enforce — and it can be used against you if you ever end up in a dispute.

What fair looks like: Information that is either marked/identified as confidential at the time of disclosure, or that a reasonable person would understand to be confidential given the context.

4. Are there standard carve-outs?

Every reasonable NDA excludes information that: was already known to the receiving party, becomes public through no fault of the receiving party, is independently developed, or is required to be disclosed by law/court order.

Red flag: An NDA with none of these carve-outs effectively asks you to promise not to use knowledge you already had.

5. Is there a "residuals" clause — and should there be?

A residuals clause lets the receiving party use information retained in unaided memory (not copied documents) after the engagement ends. This matters a lot if you're a consultant, engineer, or agency working with multiple clients in the same space — without it, you could theoretically be restricted from applying general knowledge and skills you'd have anyway.

6. What happens on a breach?

Look for injunctive relief language ("either party may seek injunctive relief without the need to post a bond") paired with liquidated damages that are wildly disproportionate to actual harm. Reasonable NDAs allow injunctive relief but don't pre-set punitive damages.

7. Does it restrict hiring (a hidden non-solicit)?

Some NDAs bury a non-solicitation clause — restricting you from hiring the other party's employees for a period after disclosure — inside what looks like a simple confidentiality agreement. That's a materially different obligation than "keep this information secret."

8. Governing law and venue

Same principle as any contract: an inconvenient venue raises the cost of enforcing your rights (or defending yourself) if there's ever a dispute.

9. Is there a term for the agreement itself vs. the confidentiality obligation?

These are often different — the NDA "term" (how long the agreement is active for new disclosures) and the confidentiality "survival period" (how long you must protect information already disclosed) should both be clearly stated and reasonable.

The bottom line

Most NDAs are boilerplate and mutual, low-risk, and fine to sign quickly. The ones worth slowing down for are one-way, indefinite in duration, or define confidential information broadly enough to cover things you already knew. Upload the NDA to Contract Watch and it will flag which of these nine patterns show up, in plain English, before you sign.