Is your NDA actually protecting you — or just paper?
Most NDAs look airtight until someone breaches them. Catch one-sided terms, residuals clauses, and missing remedies before you sign.
60-second analysis · No credit card · Your data stays yours
What NDA agreements hide in plain sight
The most common red flags we catch in this contract type.
You're bound; they aren't. Common when a large counterparty drafts the document.
Lets them use anything staff 'remember' — nullifying the confidentiality in practice.
No injunction right, no liquidated damages — a breach carries no real consequence.
Indefinite terms are aggressive and often unenforceable for information that eventually becomes public.
The three things that decide whether your NDA holds up
Most NDAs are theatre. They get signed, filed, and never re-read — until a dispute happens, at which point the parties discover the definition of 'confidential information' was so broad it captured public-domain material, or so narrow it excluded exactly what mattered. A well-drafted NDA does three things: it defines what is protected with precision, it names concrete carve-outs (public domain, independent development, legal compulsion), and it specifies a remedy that actually deters breach.
The residuals clause is the single most overlooked killer. It allows the receiving party to use anything their staff 'retain in unaided memory' — which in practice is almost everything worth protecting. Any NDA that includes a residuals clause and is being signed by the disclosing party should have it struck out or narrowed to unassisted individual memory only.
Injunctive relief matters more than damages. Money can't restore leaked strategy, source code, or a customer list. A well-drafted NDA acknowledges damages are inadequate and consents to injunctive relief without proving irreparable harm — which lets you get to court fast when it counts.
What ContractScan AI analyzes in your NDA
A dedicated playbook — built for this contract type only.
- Mutual vs one-way
Whether confidentiality runs both directions or only protects them.
- Confidential information definition
How broadly 'confidential information' is defined — and whether key carve-outs exist.
- Residuals clause
Whether staff can use what they 'remember' — a silent kill switch for the whole NDA.
- Term and duration
How long obligations last after the relationship ends.
- Permitted disclosures
Public domain, independently developed, required by law.
- Breach remedies
Injunctive relief, liquidated damages, and recovery of legal fees.
- Jurisdiction
Where you would actually have to fight a breach.
Red flags we see in real NDAs
Specific patterns to check for before you sign — with the fix for each.
If you'll disclose anything sensitive back, mutual is the only defensible structure.
Courts refuse to enforce NDAs whose definition of 'confidential' covers material already in the public domain.
Most jurisdictions treat perpetual NDAs on non-trade-secret material as unreasonable and refuse to enforce them.
Damages after a leak are almost impossible to prove. Injunctive relief is the real remedy.
How to negotiate a NDA
The concrete asks we recommend, in the order to raise them.
- 1Make it mutual whenever both sides may share
- 2Strike the residuals clause — or narrow it to unaided personal memory only
- 3Set a term of 3-5 years for commercial information; 'for so long as it remains a trade secret' for trade secrets
- 4Add explicit consent to injunctive relief without proving irreparable harm
- 5Add recovery of attorneys' fees and costs to the successful party
- 6Pick a jurisdiction you'd actually enforce in — not a neutral country you can't reach
Here's what your report looks like
Plain English. No legal jargon. Action you can take today.
You're bound; they aren't. Common when a large counterparty drafts the document.
Lets them use anything staff 'remember' — nullifying the confidentiality in practice.
No injunction right, no liquidated damages — a breach carries no real consequence.
A weak NDA costs you the deal you thought it protected. Investors walk with your model, potential acquirers walk with your data room, and vendors quietly hire your engineers. The damages case afterwards is almost impossible to win because you can't prove what was 'confidential' under an overbroad definition and you can't prove damages you never got a chance to make.
Who uses this
Make sure investors and partners can't walk away with your IP.
Catch one-sided terms that block you from working in your field.
Lock down what vendors can do with your data, customers, and roadmap.
Frequently asked questions
What's the difference between mutual and one-way NDA?
Mutual protects both parties. One-way only protects whoever sent it. If a client sends you a one-way NDA, only their information is protected.
How long should an NDA last?
2–5 years is standard. Indefinite NDAs are aggressive and often unenforceable for information that eventually becomes public.
Can I negotiate an NDA?
Yes. Push for mutual protection, reasonable duration, and a clear remedy clause if it's breached.
Ready to check your NDA?
Upload your contract and get an AI review in under a minute — written in plain English with one clear recommendation per clause.