How to Negotiate an NDA (2026)

A non-disclosure agreement (NDA), also called a confidentiality agreement, is usually the first contract two companies sign before they explore a deal, a partnership or a sale. Because it comes early and feels like boilerplate, people often sign it without reading it, or argue over the wrong things and waste a week on a document that should take a day. This guide explains the terms that actually matter, how to negotiate them, and where to land so you can move on to the real deal. It is general information, not legal advice. ## One-way or mutual? The first question is whether information flows one way or both. A one-way (unilateral) NDA protects only one side's information, which suits a situation where only one party is sharing, for example a company giving a potential investor its financials. A mutual (bilateral) NDA protects both sides and is the right default whenever both will share anything sensitive, which is most commercial discussions. If you are handed a one-way NDA but you will also be sharing, ask for a mutual version. It is a fair request and usually accepted quickly. ## The terms that actually matter Definition of confidential information. This is the heart of the NDA. Too narrow (only information marked "confidential") and you lose protection for things said in a meeting; too broad (everything, forever) and it becomes unworkable. A sensible definition covers information disclosed in any form that is either marked confidential or that a reasonable person would understand to be confidential from its nature or the circumstances. Beware definitions that try to capture information you already knew or that is public. The standard exclusions. Almost every NDA excludes information that: was already known to the recipient before disclosure; is or becomes public through no fault of the recipient; is received lawfully from a third party without a confidentiality duty; or is independently developed without using the disclosed information. These exclusions are standard and fair. If they are missing, add them, because without them you could be bound to keep secret something you already knew or that everyone can read. Permitted use. The NDA should say the recipient may use the information only to evaluate or pursue the stated purpose, and for nothing else. Watch for vague purpose statements. A tight purpose ("to evaluate a possible supply agreement between the parties") is far safer than a loose one ("for business purposes"). Who can see it. The recipient should be able to share the information only with those who need it (employees, advisers, affiliates) and who are themselves bound to keep it confidential. Make the recipient responsible for its people's breaches. Term and survival. Two time periods matter: how long the NDA runs (during which new disclosures are covered) and how long the confidentiality duty lasts after that. Two to five years is common for ordinary business information. Trade secrets often get indefinite protection, which is reasonable because a trade secret loses value once public. Avoid an indefinite duty on all information, which is hard to manage and sometimes unenforceable. Return or destruction. On request or at the end, the recipient returns or destroys the information and confirms it. A sensible carve-out lets each side keep one archival copy for legal and compliance records, and lets automatic IT backups expire naturally. Required disclosure. If the recipient is legally compelled to disclose (by a court or regulator), it should be allowed to, provided it gives notice where lawful so the discloser can object. ## The terms not worth fighting over To sign fast, concede the points that rarely matter: the governing law (within reason), the notices clause, the "no obligation to proceed" statement (which just confirms the NDA does not commit either side to a deal), and the "no licence" statement (confirming sharing information grants no IP rights). Spending political capital here slows the real deal for no gain. ## A fallback ladder 1. Best: mutual NDA, balanced definition with standard exclusions, tight purpose, confidentiality duty of 3 years (indefinite for trade secrets), return or destruction with an archival-copy carve-out, notice before compelled disclosure. 2. Accept a longer duration (up to 5 years) in exchange for a tighter purpose and clear exclusions. 3. Accept a one-way NDA if you genuinely will not be sharing anything sensitive; otherwise push for mutual. 4. Accept a broad definition if the exclusions and the permitted-use limit are solid, because together they contain the risk. 5. Walk-away: refuse an indefinite blanket confidentiality duty on all information with no exclusions, or a non-compete or non-solicit smuggled into the NDA that restrains your business beyond confidentiality. ## Watch for clauses that do not belong NDAs sometimes carry riders that go well beyond confidentiality: a non-compete, a non-solicitation of staff or customers, an exclusivity obligation, or a broad assignment of IP. These are real commercial commitments that deserve their own negotiation and should not ride along in a "standard" NDA. If you see one, flag it and decide whether it belongs here at all. ## Common mistakes to avoid - Signing a one-way NDA when you will also be disclosing.

• Accepting a definition with no standard exclusions, binding you to keep secret what you already knew or what is public.
• Agreeing an indefinite confidentiality duty on all information, not just trade secrets.
• Leaving the permitted purpose vague, so the recipient can use your information broadly.
• Overlooking a non-compete, non-solicit or exclusivity clause hidden in the NDA.
• Forgetting the required-disclosure carve-out, leaving the recipient exposed if a court orders disclosure. ## Managing a pile of NDAs NDAs multiply fast. A company in active business development can sign dozens a year, each with a different term, a different duration of the confidentiality duty, and a different return-or-destroy obligation. The quiet risk is losing track of which are still live, when each duty expires, and what you promised to return. Keeping NDAs in one connected workspace, with their key dates and obligations tracked and each one reviewable against your standard position, turns that pile into something you can actually manage. Adira is built around that idea, on frontier AI, so your confidentiality obligations and their deadlines sit together rather than scattered across inboxes. If you cannot quickly list your live NDAs and when they expire, that is the gap worth closing. More at Adira. The negotiation points above work with any tool. ## Bottom line An NDA should be quick to sign if you focus on the few terms that matter: mutual or one-way, a balanced definition with standard exclusions, a tight purpose, a sensible duration, and clean return-or-destroy and required-disclosure clauses. Concede the boilerplate, refuse indefinite blanket duties and smuggled-in non-competes, and you can protect your information without holding up the deal. For anything high-stakes, have a qualified lawyer review it before signing.