How to Review a Non Disclosure Agreement: A Clause-by-Clause Checklist

How do you review an NDA quickly and safely? Read an NDA against a fixed checklist, clause by clause, and ask one question of each clause: does this protect me, bind me, or both, and for how long? An NDA (also called a confidentiality agreement) looks short and harmless, but a few words in the definition or the term can quietly turn a routine conversation into a years-long obligation. The fastest safe review is not reading faster. It is knowing exactly which clauses carry the risk and checking each one in order. This is a practical review checklist, not legal advice. For a high-value deal or an unusual term, have a qualified lawyer in your jurisdiction review the final document. ## The 12-point NDA review checklist Work through these in order. For each, the "green" column is what you want to see and the "watch for" column is the common trap. | # | Clause | What good looks like | Watch for |

|---|--------|----------------------|-----------| | 1 | Parties | Correct legal names, entities, and "affiliates" defined | A one-way NDA when the deal is really two-way | | 2 | Definition of Confidential Information | Clear, reasonable scope; marked or clearly confidential | "All information disclosed" with no limits | | 3 | Exclusions | Public, already-known, independently developed, lawfully received | No exclusions at all | | 4 | Purpose | Narrow, named purpose for use | "For any business purpose" | | 5 | Obligations | Reasonable care, need-to-know sharing | Duty to protect at a standard you cannot meet | | 6 | Term and survival | Fixed term; survival tied to sensitivity | Perpetual confidentiality on ordinary data | | 7 | Return or destruction | On request or at the end, with a backup carve-out | Must delete backups you legally must keep | | 8 | Permitted disclosure | Allowed if law or a court compels it, with notice | No carve-out for legally required disclosure | | 9 | No licence | States no IP or licence is granted | Silent, leaving ownership arguable | | 10 | Remedies | Injunction plus actual damages | Fixed penalty amounts that look punitive | | 11 | Governing law and forum | A place you can realistically litigate in | A foreign court with no connection to you | | 12 | Boilerplate | Assignment, notices, entire agreement, no waiver | Hidden non-solicit or non-compete riders | ## Which clauses deserve the most attention? Definition of Confidential Information. This is the heart of the NDA. The ideal definition covers information that is marked confidential or that a reasonable person would treat as confidential, tied to the actual subject of your talks. Be wary of "any and all information" with no limit, because it can later be read to cover things you never meant to protect or be bound by. Exclusions. A fair NDA always says it does not cover information that is public through no fault of yours, that you already knew, that you develop independently without using the disclosed material, or that you lawfully get from a third party. If exclusions are missing, you could be accused of breaching confidentiality over information you were free to use. Term and survival. Separate the term of the agreement from how long the confidentiality duty lasts. Two to five years is common for ordinary commercial information. A perpetual duty can be reasonable for genuine trade secrets, but it should not apply to everything. Flag any NDA that binds you forever on routine data. Obligations and standard of care. Most NDAs ask you to use "reasonable care" or the same care you use for your own confidential information. That is fair. Push back on an absolute duty to prevent any disclosure, because no one can guarantee that. ## Red flags that should stop the signature - One-way when it should be mutual. If both sides will share secrets, a one-way NDA that only binds you is unbalanced. Ask for a mutual version.

• No exclusions. Discussed above. This is the single most common unfair term.
• Perpetual confidentiality on everything. Fine for trade secrets, not for ordinary information.
• Overbroad purpose. "Any purpose" lets the other side use your information well beyond the deal you are discussing.
• Hidden non-compete or non-solicit. Some NDAs smuggle in a clause stopping you from hiring staff or working with similar clients. These are separate commitments and, in several jurisdictions, their enforceability varies. Do not sign them by accident.
• Penalty clauses. A fixed sum "per breach" may be an unenforceable penalty in some systems and a real liability in others. Treat any liquidated amount with care.
• One-sided indemnity. Watch for a clause making you cover the other side's losses for any breach while giving you nothing in return. ## How does jurisdiction change an NDA review? The structure of an NDA is similar worldwide, but enforceability differs. Governing law and the available remedies vary by country, so a clause that is standard in one place may be read differently in another. Injunctions, the treatment of penalty clauses, and the enforceability of restrictive riders such as non-competes all depend on local law. The practical rule when you review: confirm the governing law is somewhere you can actually enforce or defend, and treat restrictive riders as jurisdiction-specific. This varies by jurisdiction, so do not assume one country's rule applies everywhere. ## A fast three-pass method 1. Scope pass. Read only the parties, the definition of Confidential Information, the exclusions, and the purpose. If these four are fair, the deal is probably safe in principle.

2. Duration pass. Read the term, survival, and return or destruction clauses. Decide how long you are really bound.
3. Risk pass. Read remedies, indemnity, governing law, and the boilerplate at the end, hunting for hidden non-compete, non-solicit, and penalty terms. If all three passes are clean, you can sign with confidence. If any clause fails, mark it, propose a specific edit, and send it back. Most NDA negotiation is a few tracked changes, not a rewrite. ## Where a contract workspace helps The review you just did by hand, opening the NDA, hunting for the risky definition, checking whether exclusions exist, remembering when the term ends, is exactly the work an AI contract workspace can do in one place. Instead of scanning for red flags yourself, you see each position marked favourable, neutral, or unfavourable to your company, with the missing exclusions and the perpetual term called out, and you edit a clause in plain English and get a clean diff back. One such workspace is Adira, which keeps drafting, per-clause risk review, version history, and renewal tracking together and tunes its reading to how your company contracts. The point is simply that a repeatable checklist becomes far easier when the contract, its risks, and its deadlines live in one workspace rather than scattered across email and your memory. Use the checklist above on your next NDA and keep it next to you. A consistent review beats a fast one every time.