NDA Review: What to Check Before You Sign Anything

You're about to start a new client engagement, job, or business partnership. Before anything begins, they send over an NDA — a non-disclosure agreement — and ask you to sign. Most people do. Most people don't read it carefully first. This guide fixes that: here's exactly what to check in an NDA review, why each clause matters, and how to push back on terms that are unfair.

The goal of an NDA isn't just to protect the other party's secrets. A well-written NDA also protects you — your existing knowledge, your career options, and your right to do future work. A poorly written NDA can follow you for years.

What Is an NDA and Why Does It Matter?

A non-disclosure agreement (NDA) — also called a confidentiality agreement — is a contract where one or both parties agree to keep certain information secret. NDAs are used across business relationships: before job offers, during vendor negotiations, in freelance engagements, and ahead of potential acquisitions.

The problem is that NDAs are often presented as formalities — standard documents that everyone signs without question. But the terms inside vary enormously. An NDA that defines "confidential information" too broadly, or that never expires, can limit your professional freedom long after the relationship ends.

Check 1: The Definition of Confidential Information

This is the most important clause in any NDA. It defines what you're actually agreeing to keep secret — and it needs to be specific.

Red flag language: "All information disclosed in connection with this engagement" or "any information the Disclosing Party designates as confidential." These definitions are dangerously broad — they can cover publicly available information, general industry knowledge, and skills you develop while working on the project.

What good language looks like: A proper definition of confidential information covers trade secrets, proprietary processes, client data, financial information, and specifically identified categories of business information — with explicit carve-outs for information that is already public, information you already knew before the engagement, and information you develop independently without reference to the disclosed information.

Check 2: Duration — How Long Does It Last?

NDAs should have an expiration date. The duration clause tells you how long you're bound by the confidentiality obligation after the relationship ends.

Standard practice: 1 to 3 years is reasonable for most business NDAs. Trade secrets involving genuine long-term competitive advantages may warrant longer periods. But a perpetual NDA — one with no expiration date — is excessive for most engagements and worth pushing back on.

Why it matters: You might work with this client for six months, but an NDA with no expiration means you could theoretically be bound for the rest of your career. Time-limit your obligations to a reasonable period tied to the nature of the information being protected.

Check 3: One-Sided vs. Mutual Obligations

An NDA can be unilateral (only you are bound) or mutual (both parties are bound). Many NDAs presented by clients, employers, or larger companies are one-sided — they protect the other party's information while giving you no protection for yours.

When one-sided is acceptable: If you're receiving confidential information and not sharing any of your own — for example, a job applicant reviewing a company's financial projections — a one-sided NDA makes sense.

When to push for mutual terms: If you're sharing your own proprietary methods, pricing structures, client lists, or business processes as part of the engagement, you should have the same protection the other party is demanding. Ask for a mutual NDA — it's a reasonable request in any genuine business relationship.

Check 4: Hidden Non-Compete Language

This is the most dangerous thing to miss in an NDA. Some non-disclosure agreements include a clause that restricts who you can work with or what kind of work you can do after the engagement — not just what information you can share. That's not an NDA; that's a non-compete hidden inside one.

Warning signs: Language about "competing businesses," restrictions on working in the same "industry vertical," or limitations on soliciting the other party's clients or employees. These restrictions belong in a separate non-compete agreement — not buried in confidentiality language — and they deserve their own negotiation.

What to do: If you see any restriction on future work inside an NDA, flag it. If the other party insists it stay, make sure the scope is narrow (specific named competitors, not entire industries), the duration is short (6 months for a short engagement), and it's proportionate to the actual relationship.

Check 5: Penalty Clauses and Breach Consequences

Some NDAs specify financial penalties for breach — sometimes shockingly large amounts. While it's reasonable for an NDA to address consequences of a breach, the penalties should be proportional to the actual potential damage, not arbitrary deterrents designed to intimidate.

What to look for: Are breach penalties proportional to the value of the relationship? Is there a cure period — a chance to correct a breach before penalties kick in? Are the penalties limited to actual damages, or are they liquidated damages (fixed amounts regardless of real harm)?

An NDA for a $5,000 freelance project should not expose you to $500,000 in penalties. If the numbers feel disproportionate, they probably are — and that's negotiable.

Check 6: Permitted Disclosures

Any well-drafted NDA should include carve-outs — situations where you're allowed to disclose confidential information without being in breach. Without these carve-outs, you could technically violate an NDA simply by cooperating with a legal investigation.

Essential permitted disclosures: Disclosure required by law, court order, or regulatory authority (with notice to the other party where legally permitted). Disclosure to your own legal counsel or accountants on a need-to-know basis. Information that becomes publicly available through no fault of your own.

If the NDA doesn't include these standard carve-outs, add them. No legitimate counterparty should object to these exceptions.

Check 7: Residuals Clause (Watch for This in Tech NDAs)

Common in technology and software contexts, a residuals clause allows a party to use "residual information" — ideas or concepts retained in the unaided memories of personnel — even after the NDA ends. For the receiving party, residuals clauses are extremely favorable (they protect employees who naturally retain general knowledge). For the disclosing party, they can undermine the whole point of the NDA.

What to do: If you're disclosing your own trade secrets or proprietary processes, make sure there is no residuals clause, or that it's narrowly scoped. If you're the receiving party signing a strict NDA, a residuals clause gives you important protection.

How to Negotiate NDA Terms

Most people assume NDAs are non-negotiable. They're not. Here's a practical approach to negotiating the terms you want:

First, mark up the specific clauses that concern you — don't just say "I'm not comfortable with the NDA." Be specific: "The definition of confidential information in Section 1 is too broad — I'd like to add carve-outs for publicly available information and independently developed knowledge." Specific redlines get faster responses than vague objections.

Second, offer alternatives rather than just rejections. If the duration is perpetual, propose three years. If it's one-sided, propose mutual obligations. If there's a hidden non-compete, propose removing it or limiting it to six months and direct competitors only.

Third, pay attention to how a counterparty responds to NDA negotiations. A company that refuses to make any reasonable modifications to an NDA is showing you something about how they operate generally.

Use AI to Catch What You Miss

NDA review is one of the best use cases for AI contract analysis. NDAs are short enough that manual review is possible, but the specific language that creates problems is subtle — it's easy to read a definition clause and not immediately recognize that it's structured in a way that eliminates your standard carve-outs.

PactScout does NDA-specific analysis — it knows what a standard confidentiality definition looks like, flags overly broad scopes, identifies missing permitted disclosures, and catches hidden non-compete language that doesn't belong in a confidentiality agreement. Upload the NDA and get a risk score in under a minute before deciding whether to sign, negotiate, or escalate to a lawyer.

The Bottom Line

An NDA protects legitimate secrets — and when it's written fairly, it protects both sides equally. Before you sign, confirm the definition of confidential information is specific, the duration is reasonable, the obligations are mutual if they should be, and there are no hidden non-compete provisions tucked inside the confidentiality language.

The 15 minutes you spend on a proper NDA review can prevent years of professional restrictions you never intended to accept.