The 5-minute NDA checklist before you sign

NDAs feel like a formality, and usually they are. But a minority smuggle in obligations that outlive the deal, sometimes by design, sometimes by sloppy templating from a form the other side barely reads either. Five checks catch nearly all of it.

1. Mutual or one-way? A one-way NDA only protects the party disclosing information. If you'll also share your own know-how, methods, rates, or client list during the conversation (which is common even in early sales calls), insist on a mutual NDA instead. It costs nothing to ask and protects you equally.

2. How long does it last? Two to five years is standard for most business information, since most business information stops being sensitive well before then. 'Perpetual' (no end date) should be reserved for genuine trade secrets (a proprietary formula or algorithm), not a pitch deck. If you see 'perpetual' attached to ordinary business information, ask for a defined term.

3. Is there hidden non-compete or non-solicit language? An NDA's job is to protect confidential information, not to stop you from working with competitors or hiring the other party's staff. Non-compete and non-solicit clauses sometimes get bundled into NDAs anyway, and courts in many jurisdictions are skeptical of them outside a proper commercial agreement, but you don't want to test that in litigation. If you find one, ask for it to be removed or moved into a separate, clearly negotiated agreement.

4. How is 'confidential information' defined? A fair definition excludes information that is already public, independently developed by you, already known to you before disclosure, or later received lawfully from someone else. Without these carve-outs, you could technically be restricted from using things you already knew or that anyone could find with a search engine.

5. Is there an IP assignment hiding in the boilerplate? Occasionally an NDA includes a clause assigning ownership of any ideas or feedback you share during discussions to the other party. That has nothing to do with confidentiality and everything to do with IP: read the definitions section carefully, not just the title of the document.

Bonus check: look for a return-or-destroy clause requiring you to delete or hand back confidential materials when the relationship ends, and confirm it has a reasonable deadline (30 days is typical) rather than an immediate, hard-to-verify obligation.

Five minutes, five checks, one bonus, then sign with confidence instead of just trusting that 'it's probably standard.'