Alex is Sprintlaw's co-founder and a legal technology leader. He holds law and media degrees from the University of Sydney and has been recognized by Australasian Lawyer, Lawyers Weekly and the Sydney Young Entrepreneur Awards for his work building Sprintlaw and improving access to business legal support.
As your US startup or growing business begins to share sensitive information with investors, contractors, or potential partners, you will likely encounter one-way non-disclosure agreements (NDAs). These contracts are designed to protect your confidential information, but many founders and operators sign them without fully understanding the risks or negotiation points involved. Common mistakes include overlooking the agreement's scope, missing state-specific rules, or failing to plan for enforcement if a breach occurs. This guide explains what a one-way NDA is, why they project, and the key points US businesses should check before signing or presenting one.
What Is a One-Way Non-Disclosure Agreement?
A one-way non-disclosure agreement is a contract in which only one party (the disclosing party) shares confidential information, and the other party (the recipient) promises to keep it secret. This is different from a mutual NDA, where both sides share and protect each other's information. One-way NDAs are common when a business is pitching to investors, hiring contractors, or sharing sensitive information with vendors or service providers who are not disclosing their own confidential information.
For example, if you are a founder sharing your business plan with a potential investor, you may want the investor to sign a one-way NDA before you reveal your financials, customer lists, or proprietary technology. The investor, on the other hand, is not sharing confidential information, so a mutual NDA is not necessary.
In a typical one-way NDA, the recipient agrees not to use or disclose the confidential information for any purpose other than what is specified in the agreement. The NDA will usually outline:
- What information is considered confidential
- The permitted use of the information
- How long the confidentiality obligation lasts
- What happens if there is a breach
There is no single federal law governing NDAs. Instead, contract law is generally a project of state law. This means the enforceability and interpretation of your NDA can depend on which state's law applies. Some states, such as California, have unique rules about NDAs, especially regarding employment, trade secrets, and public policy. It is important to know which law governs your agreement and whether your industry is subject to additional regulations.
Why Use a One-Way NDA?
One-way NDAs are practical when your business is the only party sharing confidential information. Common scenarios include:
- Pitching to investors: Investors may want to hear your business plan but do not want to be bound by obligations to protect their own information.
- Hiring contractors or freelancers: You may need to share code, designs, or customer data with someone building your product or providing a service.
- Engaging with vendors or suppliers: You might need to disclose proprietary processes or pricing information to get a quote or proposal.
- Discussing a potential acquisition: Sharing sensitive financials or trade secrets with a potential buyer before a deal is finalized.
Using a one-way NDA helps set clear expectations and legal obligations for the recipient. It can also make negotiations smoother, as the recipient is only agreeing to protect your information, not theirs. However, it is still important to review the terms carefully and negotiate where needed. Even if an NDA is labeled "standard," the details can vary widely.
Some common reasons founders and operators use one-way NDAs include:
- Protecting trade secrets, business plans, or customer lists
- Maintaining leverage during negotiations or due diligence
- Reducing the risk of information leaking to competitors
It is important to remember that an NDA is only as strong as its terms and your willingness and ability to enforce it. Not all confidential information is automatically protected, and some disclosures may fall outside the agreement's scope.
Key Negotiation Points in a One-Way NDA
Before signing or sending a one-way NDA, consider these key negotiation points. Each of these can have a major impact on your business if not handled carefully:
- Definition of Confidential Information: Check how "confidential information" is defined. Does it cover only written materials, or does it include oral disclosures, emails, prototypes, and business strategies? For example, if you discuss your business plan in a meeting, is that covered? A narrow definition may leave important information unprotected, while an overly broad one could be hard to enforce or may even deter the recipient from signing.
- Purpose and Permitted Use: The NDA should specify why the information is being shared and how the recipient can use it. For instance, "solely to evaluate a potential investment." This limits the risk of misuse. If the NDA is silent on purpose, the recipient could argue for a broader use.
- Duration of Obligation: How long must the recipient keep the information confidential? Some NDAs last for a set period (such as two or five years), while others may require confidentiality "indefinitely." Consider what is reasonable for your industry and the type of information shared. For example, trade secrets may require longer protection than marketing plans.
- Exclusions: Most NDAs exclude information that is already public, independently developed, or lawfully obtained from another source. Make sure these exclusions are clear and not overly broad. For example, if the recipient already knows certain information, they should not be bound to keep it secret.
- Return or Destruction of Information: What happens to the information at the end of the relationship? The NDA should require the recipient to return or destroy all confidential materials upon request or at the end of the agreement. This is especially important if you are sharing physical prototypes or sensitive data.
- Remedies and Liability: Consider what happens if the NDA is breached. Some NDAs specify that the disclosing party can seek an injunction (court order to stop the breach) or damages. Check if there are any limits on liability or special procedures for resolving disputes. For example, some NDAs may cap damages or require arbitration.
- Governing Law and Jurisdiction: The NDA should state which state's law applies and where disputes will be resolved. This can affect your ability to enforce the agreement, especially if the parties are in different states. For example, California law may be less favorable to strict NDAs than Texas law.
- No Obligation to Proceed: Some NDAs clarify that sharing information does not require either party to move forward with a deal. This can help manage expectations and avoid misunderstandings.
As a founder or operator, it is important to read each section carefully and negotiate terms that fit your business needs. Do not assume that all NDAs are the same, even if they come from large companies or investors. If you need help, consider seeking support from a contracts professional familiar with one-way non-disclosure agreements.
Example: Suppose you are a SaaS founder sharing your product roadmap with a potential reseller. If the NDA only covers "documents marked confidential," your verbal explanation of future features may not be protected. You may want to expand the definition to include oral disclosures confirmed in writing within a set period.
State Law Issues and Industry Considerations
NDAs are generally governed by state contract law, which means the rules can vary depending on which state law applies. Some states have specific statutes or court decisions that affect how NDAs are enforced. Here are a few examples:
- California: California law limits NDAs that attempt to restrict employee mobility or cover up certain types of workplace misconduct. California courts may refuse to enforce overbroad NDAs, especially if they conflict with the state's strong public policy favoring employee movement and whistleblower protections. For example, an NDA that tries to prevent a former contractor from working for a competitor may be struck down.
- New York: New York generally enforces NDAs, but courts may scrutinize them for reasonableness in duration and scope. Overly broad or perpetual NDAs may be limited by a judge. For example, a New York court may reduce a 10-year confidentiality period to something more reasonable if the information is not a trade secret.
- Texas: Texas law recognizes NDAs but requires that they are supported by consideration (something of value exchanged) and are not overly broad. If your NDA is too vague or covers information that is already public, a Texas court may refuse to enforce it.
- Illinois: Illinois courts enforce NDAs that are reasonable in scope and duration, but may not enforce agreements that are overly restrictive or lack clear definitions.
Some industries, such as healthcare, finance, or defense, may have additional confidentiality requirements under federal or state law. For example, sharing patient information may trigger HIPAA rules, and financial data may be subject to Gramm-Leach-Bliley Act requirements. Always consider whether your NDA needs to reference or comply with specific regulations for your industry.
When negotiating an NDA, check which state law governs the agreement and whether your industry has special rules. If you are dealing with parties in different states, consider which jurisdiction is most favorable for enforcement. For example, if your business is in California but your contractor is in Texas, you may want to specify which state's law applies and where disputes will be resolved.
Practical tip: If you are unsure which law should apply, consider where enforcement would be most practical for your business. If you are likely to need to enforce the NDA in your home state, specify that state's law and courts in the agreement.
Common Mistakes When Using One-Way NDAs
Many US startups and small businesses make avoidable mistakes with one-way NDAs. Here are some of the most common, along with practical examples:
- Signing without review: Accepting an NDA "as is" without reading or understanding the terms can expose your business to unnecessary risk. For example, you may inadvertently agree to a perpetual confidentiality obligation or a jurisdiction that is inconvenient for you.
- Overbroad or vague definitions: If "confidential information" is defined too broadly or vaguely, it may be hard to enforce or could unintentionally restrict your own activities. For example, a definition that covers "all information disclosed" could prevent you from using your own ideas if you later forget what was shared.
- Unclear duration: NDAs that last forever may be unenforceable in some states, while too short a duration may not provide enough protection. For example, if you are sharing trade secrets, you may want a longer duration than if you are sharing a marketing plan.
- Ignoring state law differences: Not checking which state law applies can lead to surprises if you need to enforce the NDA. For instance, an NDA enforceable in Texas may not be enforceable in California.
- Missing exclusions: Failing to clearly exclude public or independently developed information can create confusion or disputes later. For example, if the recipient already knew the information, they should not be bound to keep it secret.
- Not planning for enforcement: Many businesses do not think about how they would actually enforce an NDA or what remedies are available if there is a breach. For example, if the NDA requires arbitration in another state, enforcement could be costly and impractical.
- Failing to address oral disclosures: If you share information verbally, make sure the NDA covers oral disclosures, or follow up in writing to confirm what was shared.
- Using the wrong type of NDA: Sometimes, a mutual NDA is more appropriate, especially if both parties will be sharing confidential information. Using a one-way NDA when both sides are disclosing can create confusion or leave one party unprotected.
To avoid these mistakes, create a checklist for reviewing NDAs and consider having a legal professional review the agreement, especially for high-stakes deals or if you are unsure about the terms. If you are considering a business sale, be sure your NDA is tailored to that context and covers the specific information you will be sharing.
Example: A founder signs an NDA with a potential acquirer that requires all disputes to be resolved in Delaware. When a breach occurs, the founder discovers that hiring a Delaware attorney is expensive and the process is slow. This could have been avoided by negotiating for a more convenient jurisdiction.
Checklist: What to Review Before Signing a One-Way NDA
Before you sign or send a one-way NDA, use this practical checklist to avoid costly mistakes:
- Is the definition of "confidential information" clear, specific, and does it cover all types of disclosures you intend to make (written, oral, electronic)?
- Does the NDA state the purpose for which information can be used (e.g., evaluating a potential partnership, investment, or service)?
- Are the exclusions (public, independently developed, or previously known information) clearly listed and reasonable?
- What is the duration of the confidentiality obligation? Is it reasonable for your industry and the type of information shared?
- Does the NDA require the recipient to return or destroy information at the end of the relationship or upon request?
- What remedies are available if the NDA is breached? Are there any limits on liability, or requirements for arbitration or mediation?
- Which state law governs the agreement, and where will disputes be resolved? Is this practical for your business?
- Are there any industry-specific rules or regulations (such as HIPAA or financial privacy laws) that need to be referenced?
- Is there a clause stating that sharing information does not obligate either party to proceed with a deal?
- Have you considered whether you need a mutual NDA instead?
- Is the NDA signed by an authorized representative of each party?
- Do you have a process for tracking who has signed NDAs and what information has been shared?
For founders and operators, it can be helpful to keep a template NDA that reflects your preferred terms. However, be ready to negotiate, as investors or larger companies may insist on using their own forms. If you receive a proposed NDA from another party, compare it to your checklist and do not hesitate to request changes that protect your interests.
Practical tip: After signing, keep a record of what information was shared and when. This can be crucial if you ever need to enforce the NDA or prove that certain information was covered.
FAQs
What is the main difference between a one-way and a mutual NDA?
A one-way NDA protects only the disclosing party's confidential information, while a mutual NDA requires both parties to keep each other's information secret. Use a one-way NDA when only your business is sharing sensitive information, such as when pitching to investors or hiring a contractor. Use a mutual NDA when both sides will be exchanging confidential data, such as in a joint venture or partnership discussion.
Are NDAs enforceable in every US state?
Most states enforce NDAs as long as they are reasonable in scope, duration, and do not violate public policy. However, some states, like California, limit the enforceability of NDAs that restrict employee mobility or cover up certain types of misconduct. Always check which state law applies and whether there are any local restrictions. For example, an NDA that attempts to prevent an employee from working for a competitor may be void in California but enforceable in Texas.
How long should a one-way NDA last?
The appropriate duration depends on the type of information and your industry. Common durations are two to five years, but some NDAs require confidentiality to last indefinitely for trade secrets. Be cautious with perpetual NDAs, as some states may not enforce them if they are seen as unreasonable. Consider what is typical for your industry and negotiate a duration that matches the value of the information.
What happens if someone breaches a one-way NDA?
If the recipient breaches the NDA, the disclosing party can usually seek remedies such as an injunction (a court order to stop the breach) or monetary damages. The specific remedies and procedures will depend on the NDA's terms and the governing state law. Enforcement can be costly and time-consuming, so weigh the practical risks before sharing sensitive information. In some cases, the damage from a breach may be hard to quantify, so consider including language that allows for injunctive relief.
Do I need a lawyer to review a one-way NDA?
While you can review and negotiate NDAs yourself, having a legal professional review the agreement can help you spot hidden risks, clarify unclear terms, and ensure the NDA fits your business needs. This is especially important for high-value deals, cross-state agreements, or if you are unsure about the legal language. A lawyer can also help you negotiate terms that are more favorable to your business and help support compliance with state and industry-specific laws.
Key Takeaways
- One-way non-disclosure agreements are common for US startups and growing businesses when only one party is sharing confidential information.
- Key negotiation points include the definition of confidential information, permitted use, duration, exclusions, remedies, and governing law.
- State law and industry rules can affect how NDAs are interpreted and enforced, so always check which law applies and whether special regulations exist.
- Common mistakes include signing without review, unclear definitions, ignoring state law differences, and not planning for enforcement.
- Use a checklist to review NDAs before signing, and consider legal review for high-stakes or complex agreements.
Need help reviewing or negotiating a one-way non-disclosure agreement? Contact our team at (888) 449-8437 or team@sprintlaw.com for practical support. Where legal services are required, they are delivered by licensed lawyers at trusted US law firms through the Sprintlaw platform.








