NDA Explained in Plain English: What You're Actually Promising When You Sign

An NDA you sign at a job interview can outlast the job by twenty years.

You didn't take the role. You didn't see the slide deck. You spoke to a recruiter for forty minutes and signed something they emailed over before the call. A decade later, the company sues a competitor you happened to join, and your name shows up in a discovery request because the NDA you barely remember covers "any information conveyed in the course of recruiting communications, in perpetuity, in any medium."

This is what NDAs do when nobody asks what's in them. Roughly between a third and over half of US workers are bound by one, and most signed it without reading. Here's what you're actually promising.

TL;DR

• An NDA is a contract that defines what counts as confidential, who can hear it, for how long, and what happens if you talk.
• Two flavors: unilateral (one side shares, the other keeps quiet) and mutual (both sides share, both keep quiet). Mutual is usually fairer.
• The clauses that matter most: definition of confidential information, term, carve-outs, return of materials, and remedies on breach.
• The federal Speak Out Act of 2022 voids any pre-dispute NDA in cases of sexual harassment or sexual assault. No NDA can lawfully prevent you from reporting illegal conduct to a government agency.
• If the NDA you're signing is one-way, lasts forever, defines confidential information as "everything," and bans you from working in the industry, you're not signing an NDA. You're signing a non-compete with a different label.

What's in this guide

1. What an NDA actually is
2. Unilateral vs mutual NDAs
3. The "all information is confidential" trap
4. How long is forever, anyway
5. The carve-outs that should always be there
6. What the Speak Out Act voided
7. The "return or destroy" clause
8. The four redlines worth asking for
9. Frequently asked questions

What an NDA actually is

An NDA, or non-disclosure agreement, is a contract between two parties that says: I'm going to share information with you. You're going to keep it secret. If you don't, here's what happens.

Sometimes it's also called a confidentiality agreement (CA), a confidential disclosure agreement (CDA), or a proprietary information agreement (PIA). The labels are interchangeable. The structure is always the same. Someone is the "Disclosing Party." Someone is the "Receiving Party." There's a clause that defines what counts as confidential, a clause that says how long you have to keep it that way, and a clause that says what happens if you talk.

NDAs show up in five common places: job interviews, employment onboarding, vendor agreements, M&A due diligence, and freelance gigs where the client is showing you internal data. The same template often gets recycled across all five, which is how a forty-minute recruiting call ends up covered by a clause originally drafted for a $500 million acquisition.

Unilateral vs mutual NDAs

Medium risk if unilateral and you're the one signing

A unilateral NDA in a job interview:

Recipient acknowledges that, in connection with discussions regarding
potential employment, Company may disclose certain confidential information.
Recipient agrees to hold all such information in strict confidence and
not to use or disclose it for any purpose other than such discussions.

What it means: Information flows one way. The company shares; you stay quiet. You haven't promised them anything they have to keep secret in return.

A mutual NDA flips this. Both sides exchange confidential information, and both sides agree to keep it confidential. For an interview where you're describing your prior work, a mutual NDA is appropriate. For an interview where the company is describing their roadmap and you're listening, a unilateral NDA is what you'll be handed.

Push back: ask for it to be mutual. Even at an interview, you're describing things about prior employers, your portfolio, and your unreleased side projects. Mutual costs the company nothing if they truly aren't asking you about anything sensitive, and it costs them real exposure if they are. Most companies say yes when asked, because the answer is rarely worth fighting over.

The "all information is confidential" trap

High risk

A common confidentiality definition:

"Confidential Information" means any and all information disclosed by
Company to Recipient, whether disclosed orally, in writing, electronically,
or by any other means, whether or not marked or identified as confidential
at the time of disclosure, including without limitation business plans,
financial information, strategies, processes, methodologies, and any
other information of a confidential or proprietary nature.

What it means: Everything is confidential. Public information is confidential. Things you already knew are confidential. Things mentioned in passing on a walk are confidential. The phrase "whether or not marked or identified as confidential at the time of disclosure" is the trap. It removes any way for you to know what's covered until the company decides, after the fact, that it was.

Push back: ask for "Confidential Information" to be limited to information that is either (1) marked or identified as confidential at the time of disclosure, or (2) for oral disclosures, summarized in writing within 30 days. This forces the discloser to actually flag what they consider sensitive, which is the whole reason you're signing the agreement in the first place.

How long is forever, anyway

High risk if the term is "perpetual" or "indefinite"

A typical term clause:

Recipient's obligations under this Agreement shall continue in
perpetuity, regardless of the termination of any underlying business
relationship between the parties.

What it means: Your obligation never ends. If a court enforces this clause as written, your great-grandchildren can be sued for something the company told you over coffee in 2025.

In practice, courts tend to look at perpetual NDAs skeptically and read in a "reasonable" duration if the obligation is open-ended and the information has lost commercial value. But you don't want to litigate that question; you want it not to be a question.

Push back: a defined term, with separate clocks for general confidential information and trade secrets. The market-standard structure is:

Recipient's obligations with respect to Confidential Information shall
continue for three (3) years from the date of disclosure, except that
Recipient's obligations with respect to information constituting a
trade secret under applicable law shall continue for so long as such
information remains a trade secret.

Three years for general info, with a longer tail for actual trade secrets. The longer tail makes sense; the perpetual blanket doesn't.

The carve-outs that should always be there

Medium risk if missing

Standard NDA carve-outs:

The obligations of confidentiality shall not apply to information that:
(a) is or becomes publicly known through no fault of Recipient;
(b) was rightfully known by Recipient prior to disclosure;
(c) is rightfully obtained by Recipient from a third party not under
    a confidentiality obligation;
(d) is independently developed by Recipient without use of or
    reference to Confidential Information; or
(e) is required to be disclosed by law or court order, provided that
    Recipient gives Company prompt notice and an opportunity to seek
    a protective order.

What it means: These five exceptions are standard. They cover the cases where pretending information is secret would be absurd: it's already public, you already knew it, you got it from someone else legitimately, or a court is making you talk.

Push back: if any of these five are missing, ask for them. They're not aggressive; they're industry-standard. An NDA without them is unusually one-sided. Add a sixth: that the Recipient may disclose to government agencies in connection with reporting illegal conduct, without prior notice to the Company. This is required by federal law in many cases anyway, but courts split on whether NDAs need to spell it out.

What the Speak Out Act voided

In December 2022, Congress passed the Speak Out Act with bipartisan support: 100-0 in the Senate, 315-109 in the House. It does one specific, important thing.

The operative text:

With respect to a sexual assault dispute or sexual harassment dispute,
no nondisclosure clause or nondisparagement clause agreed to before
the dispute arises shall be judicially enforceable in instances in
which conduct is alleged to have violated Federal, Tribal, or State law.

What it means: Any pre-dispute NDA or non-disparagement clause that would otherwise silence you about workplace sexual harassment or sexual assault is unenforceable. Pre-dispute means signed before the conduct happened. The clause in your onboarding paperwork from five years ago can't stop you from talking about something that happened last month. The settlement agreement you sign after a complaint is filed is still enforceable; the standing onboarding NDA is not.

The Act applies to incidents on or after December 7, 2022. It works alongside the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act of 2022, which makes pre-dispute arbitration agreements unenforceable in those same disputes at the employee's option.

Together, these two federal statutes are the only narrow carve-out federal law has imposed on NDAs in recent years. Outside that carve-out, NDA enforceability is a state-by-state question, similar to the enforceability map for non-competes.

The "return or destroy" clause

Low risk but easy to overlook

In most NDAs:

Upon termination of this Agreement or upon Company's written request,
Recipient shall promptly return or destroy all Confidential Information
in Recipient's possession, including all copies, notes, summaries, and
derivative works, and shall provide written certification of such
return or destruction.

What it means: When the deal is over, you have to give back or delete everything you have. The "including all copies, notes, summaries, and derivative works" part is broad. Notes you made during a meeting count. The Slack DM where someone shared a file counts. The screenshot you took counts.

Push back: ask for an exception for backup tapes and archived emails that can't reasonably be deleted, with a continued obligation of confidentiality on those. Otherwise the clause is impossible to fully comply with, and that gap can become a basis for a claim later.

The four redlines worth asking for

If you only ask for four things in an NDA, ask for these:

What to ask for	Why
Make it mutual.	Information flows both ways in almost every relationship. The agreement should too.
Define "Confidential Information" by marking, not by default.	Otherwise everything is covered, including things that obviously shouldn't be.
Cap the term at three years for general info.	Trade secrets get a longer tail. Everything else has a clock.
Add the standard five carve-outs.	Public info, prior knowledge, third-party info, independent development, legal compulsion. These are industry-standard and should never be left out.

Most NDAs accept all four redlines, because they're so standard the lawyer drafting the template forgot to include them. The exceptions tell you something about the counterparty: a company that won't make the agreement mutual, won't define what's confidential, and wants you bound forever is sending a signal about how they intend to use the document. It's worth listening to.

Frequently asked questions

Is an NDA the same as a non-compete?

No. An NDA restricts what you can say. A non-compete restricts what you can do, who you can work for, or what business you can start. They show up together often, and aggressive NDAs sometimes try to do non-compete work by defining "Confidential Information" so broadly that any next job uses something covered. The non-compete clause guide covers the working-for-the-competition side.

Can my employer make me sign an NDA after I'm hired?

Yes, in most cases. Continued employment is generally enough consideration in most states. A few states require additional consideration, like a raise or a bonus, especially for new restrictions added mid-employment. Read what you're signing. The NDA you signed on day one is rarely the only one.

What happens if I break an NDA?

The company can sue for damages and, often more critically, for an injunction. An injunction is a court order telling you to stop doing whatever the company says is breaching the NDA. Damages are hard to prove for confidential information that hasn't yet caused a measurable loss. Injunctions are easier to get and can functionally end a project, a job, or a startup. Most NDA disputes are settled, not litigated, and the threat of an injunction is what drives the settlement.

Can an NDA stop me from reporting a crime?

No. Federal whistleblower protections, the Defend Trade Secrets Act of 2016, and the Speak Out Act of 2022 all override NDAs in specific reporting contexts. An NDA that purports to silence you from reporting illegal conduct to the SEC, the EEOC, or the DOJ is unenforceable in that respect, even if the rest of the NDA is fine. If the NDA you're being asked to sign doesn't say this, ask for a clause that does.

Should I sign an NDA before reading the company's pitch?

Usually no. A pitch deck is a sales document, not a trade secret. If a company won't show you what they're selling without an NDA, they're either confused about what's confidential or trying to lock you out of competing in the same space. The exception is genuine technical due diligence (looking at code, reviewing chemical formulas, walking through a manufacturing process) where an NDA is appropriate. Marketing decks rarely qualify.

What if I find a clause I don't like and the company says it's "standard"?

"Standard" is a negotiating word. The standard NDA at any given company is whatever their lawyer drafted in 2015 and nobody has revisited. Companies routinely accept changes when asked. The cost of asking is the email. The cost of not asking is signing something that lasts longer than your career.

Read the agreement before the secret

NDAs aren't villains. Real confidential information exists, and protecting it is reasonable. But the gap between what an NDA needs to do (protect actually-secret information for a defined time) and what an NDA template often does (lock you down forever on everything anyone in the company ever said) is where the risk lives.

Five clauses to read carefully every time: the definition of Confidential Information, the term, the carve-outs, the return-or-destroy provision, and the remedies. If those five are reasonable, the rest of the document usually is too.

Redline scans NDAs and tells you which of those five clauses are aggressive in your specific document. Photograph the page, paste the email attachment, or upload the PDF. It flags perpetual terms, all-encompassing confidentiality definitions, missing carve-outs, and one-way structures, and explains what to ask for instead. One scan, one dollar. Available on iOS and Android.