The three NDA tiers
- Free/cheap template ($0-$49): Rocket Lawyer, LegalTemplates, Nolo, or free PDFs from bar associations. Good for: pitching ideas, early-stage business conversations, hiring a freelancer, routine vendor relationships. Bad for: trade secrets, high-value IP, M&A, anything you'd sue over.
- Online service ($79-$299): LegalZoom, ZenBusiness, Rocket Lawyer Pro. Customizable fill-in-the-blanks with some attorney review. Middle ground — better than free templates, worse than dedicated attorney. Good for: routine business contracts, small-stakes relationships.
- Attorney-drafted ($500-$2,500): Licensed attorney drafts from scratch or modifies firm template for your specific situation. Good for: trade secrets, technology licensing, M&A/due diligence, investor conversations, any situation where the downside of leak is $100K+.
When to use which tier
- Freelancer graphic designer: Free template is fine. Contract value is small; trade secret exposure minimal.
- Pitching an idea to a potential co-founder: Most investors and co-founders won't sign NDAs. Use a "mutual understanding" letter or just keep key differentiators to yourself.
- Sharing customer list with a sales consultant: LegalZoom or template — moderate risk, common scenario.
- Discussing acquisition with potential buyer: Attorney-drafted mutual NDA with reps, warranties, and definition of evaluation materials. M&A is too high stakes for templates.
- Technology licensing discussions: Attorney-drafted with IP-specific carve-outs and residual rights clauses.
- Employee signing confidentiality agreement: Should be part of employment agreement drafted by employment attorney. Not a generic NDA.
- Clinical trial or research collaboration: Specialized attorney familiar with HIPAA, FDA regs, or university IP policies.
The 10 clauses every NDA needs
- Definition of confidential information. Specific categories (technical data, financial info, customer lists) — not "everything disclosed."
- Exclusions from confidential. Standard carve-outs: (a) already known, (b) publicly available, (c) independently developed, (d) received from third party without confidentiality duty, (e) required by law to disclose.
- Permitted uses. The specific purpose for which info can be used (evaluate partnership, perform services, etc.). Any other use is breach.
- Standard of care. Receiving party uses at least the same care it uses for its own confidential info, and no less than reasonable care.
- Duration. Specific years; indefinite duration only for trade secrets (if applicable).
- Return/destruction of information. At termination, receiving party returns or certifies destruction of all confidential info and copies.
- Remedies. Injunctive relief explicitly available (not just damages); "irreparable harm" recital.
- Governing law and jurisdiction. Usually state where disclosing party is located.
- DTSA whistleblower notice. Federal Defend Trade Secrets Act of 2016 requires this in all NDAs signed after May 11, 2016.
- No license granted. Disclosure doesn't grant any rights to use, patent, or exploit the information beyond the permitted purpose.
Red flags when signing someone else's NDA
You're asked to sign an NDA. Watch for:
- Non-compete disguised as NDA. Clauses like "Recipient agrees not to engage in similar business" — not a confidentiality obligation.
- Perpetual duration. "Forever" on routine business info is unenforceable but you still signed it.
- Residual clause abuse. Some NDAs let recipient use "residuals" (unaided memory) — but carefully read definition of "residual."
- Reverse engineering prohibition. Preventing you from reverse-engineering legally obtained products extends too far.
- Broad "confidential" definition. Includes publicly known info, puts you in breach just for talking about general industry knowledge.
- No exclusions. Standard NDA has 5 exclusions (above). Missing exclusions = trap.
- Signing away future ideas. Some employer NDAs claim ownership of inventions made "at any time" — check state law (California Labor Code 2870 limits this).
- One-way with unequal stakes. You sign but get no protection in return; fine if stakes match.
- Jurisdiction in inconvenient forum. Forcing you to sue in a state thousands of miles away.
- Liquidated damages too high. $100,000 per breach on a $500 contract = unconscionable.
Most NDAs are never enforced. Here's why.
The dirty secret: most NDAs exist for deterrence, not enforcement. Actual litigation is rare because:
- Hard to detect. If someone steals your idea and uses it internally, you may never know.
- Hard to prove. You have to prove (a) specific info was confidential, (b) they received it, (c) they used or disclosed it, (d) caused specific damages.
- Expensive to litigate. Trade secret cases run $500K-$3M through trial. Most companies won't spend that unless damages are $5M+.
- Damages hard to calculate. What's the value of a leaked idea? Hard to quantify; courts are skeptical of speculative damages.
- Employees move. If ex-employee shares your secrets at a new job, the new employer often has its own lawyers ready to argue "general skills and knowledge."
This doesn't mean NDAs are worthless. Deterrence matters. Having a signed NDA dramatically reduces the likelihood of leak. And when leak does happen, the NDA is the foundation of your legal claim.
Free template sources that are actually usable
- Y Combinator Safe Form NDA: Short, plain-English mutual NDA drafted by Cooley LLP. Available free on Y Combinator website. Industry-respected.
- California State Bar sample NDAs: Attorney-reviewed samples in various California practice guides.
- Cooley Go document library: Free templates from one of Silicon Valley's top law firms.
- Docracy / OpenContracts: Crowd-sourced NDA templates with community review.
- SEC EDGAR: Publicly filed NDAs from public companies in M&A deals. Free, real-world language.