What is a non-disclosure agreement (NDA)? A guide for startups

Startups often share sensitive information with business partners, software agencies, employees and potential customers. A non-disclosure agreement (NDA) is a legal document used to limit unauthorised use or disclosure of that information. In this guide we cover what an NDA is, its types, core clauses, when to use one and its limits. This content is for general information; always have a lawyer review your contracts.

What is an NDA?

An NDA is a contract in which one or both parties commit that confidential information shared will be used by the other side only for a set purpose and not disclosed to third parties. Trade secrets, technical information, customer lists, financial data, product plans and source code are typical examples.

Types of NDA

• One-way NDA: Only one party shares information (for example a startup gives product details to an agency).
• Mutual NDA: Both parties share information (for example two companies discuss a partnership).
• Employee confidentiality clauses: Usually inside the employment contract.

Core clauses

1. Parties: The parties and their authorised representatives.
2. Definition of confidential information: What counts as confidential; neither too broad nor too narrow.
3. Exclusions: Public information, information the other side already knew or developed independently, information required to be disclosed by law.
4. Purpose: The purpose for which the information may be used (e.g. "evaluating a collaboration").
5. Obligations: Protecting the information, sharing only with those who need it, not copying.
6. Term: How long the confidentiality obligation lasts (may be longer for trade secrets).
7. Return or destruction of information: When the relationship ends.
8. Breach and remedies: Damages or a penalty clause for breach.
9. Governing law and jurisdiction.

When to use an NDA

• When sharing product details with a software agency or freelancer
• When discussing technical or commercial details with a potential partner
• When giving a supplier a proprietary design or formula
• In acquisition or merger talks
• For employees and interns (within the employment contract)
• In corporate pilot projects; see pilot projects with corporates

Why do investors usually not sign NDAs?

Most early-stage investors decline to sign NDAs in first meetings. They meet many startups and encounter similar ideas; signing an NDA for each creates legal risk and workload. Asking for one can also give an impression of inexperience. So in the pitch deck, tell the opportunity and traction rather than your trade secrets. Confidentiality for sensitive information can be discussed at due diligence. See the pitch deck guide and funding rounds.

Limits of an NDA

• An NDA does not protect the idea itself; it only limits use of shared information.
• Proving a breach and recovering damages can be hard and costly.
• Public or independently developed information is outside scope.

For long-term protection, consider IP tools such as trademarks, patents and copyright; see the IP guide and trademark registration.

Practical tips

1. Prepare a standard template and have a lawyer adapt it; do not write from scratch every time.
2. Share confidential information only as much as truly needed.
3. Mark shared documents "confidential" and keep a record.
4. Before signing the other side's NDA, check for one-sided and overly restrictive clauses (a non-compete may be hidden).
5. If personal data is shared, regulate data-processing terms separately; see the data protection checklist.

Founders and employees

Founders' agreements and employment contracts should include confidentiality and IP-assignment provisions; see the founders' agreement and the legal checklist.

Common mistakes

• Asking for an NDA in every meeting, even from investors
• Using a template from the internet without adapting it
• Defining confidential information too broadly (it becomes unenforceable)
• Not stating term and exclusions
• Relying on the NDA and sharing more than needed

FAQ

Does an NDA need a notary to be valid? Usually being written and signed is enough; confirm your country's law with a lawyer.

Is an e-signed NDA valid? In many cases yes; check the legal conditions.

What happens if an NDA is breached? The contract's remedies and general law apply; litigation may be needed.

Conclusion

In the right situations, an NDA is a simple, effective way to protect a startup's sensitive information, but it does not protect the idea itself and is not needed in every meeting. Use a standard, balanced template and keep shared information to the necessary level. For a broader view, our how to find a business idea article discusses the value of sharing ideas.