One-Way Non-Disclosure Agreement: Practical Drafting Points For Growing Businesses

As your business grows, you will likely find yourself needing to share sensitive information with outsiders, potential partners, investors, contractors, or service providers. Protecting your confidential know-how, trade secrets, and business plans is critical, but many founders and operators make preventable mistakes with non-disclosure agreements (NDAs). Common errors include using the wrong NDA template, failing to define confidential information clearly, or overlooking state law differences that affect enforceability. This guide explains what a one-way non-disclosure agreement is, when to use one, key drafting points, and how to avoid common pitfalls. You will find practical examples, checklists, and state law caveats to help you use NDAs effectively and keep your business protected.

What Is a One Way Non-Disclosure Agreement?

A one-way non-disclosure agreement (NDA) is a contract where only one party, the discloser, shares confidential information, and the other party, the recipient, agrees to keep it secret. This is different from a mutual NDA, where both sides share sensitive information. One-way NDAs are common in early-stage business discussions, such as when you are pitching your business to an investor, hiring a contractor to develop your product, or sharing your customer list with a marketing consultant.

For example, if you are a founder sharing your startup's technical roadmap with a freelance developer, you want the developer to keep that information confidential, but you are not receiving any confidential information in return. A one-way NDA is appropriate in this scenario.

NDAs are generally governed by state contract law. There is no federal NDA statute, but federal law does provide some protection for trade secrets under the Defend Trade Secrets Act (DTSA). The enforceability and interpretation of NDAs can vary significantly by state, so it is important to tailor your NDA to the relevant jurisdiction and business context. For instance, California law is more restrictive about what can be protected and how long confidentiality obligations can last, while other states may be more flexible.

It is also important to note that NDAs are not a substitute for other legal protections such as patents, trademarks, or copyrights. They are a tool to help you control the flow of sensitive information, but they do not guarantee that your information will remain secret if someone decides to breach the agreement.

When Should You Use a One Way NDA?

One-way NDAs are best suited for situations where only your business is sharing confidential information. Here are some common scenarios where a one-way NDA is appropriate:

• Pitching your business idea or product to investors or potential business partners
• Hiring contractors, consultants, or freelancers who will have access to your proprietary information
• Outsourcing product development, marketing, or other business functions
• Sharing business plans, financials, or customer data with advisors or accountants
• Discussing potential mergers, acquisitions, or asset sales
• Allowing third-party vendors to access your software code or internal systems for integration or support

For example, a SaaS startup might need to share its source code and technical documentation with a cloud hosting provider for migration purposes. A one-way NDA ensures that the provider cannot use or disclose that information outside the scope of the project.

However, there are situations where a one-way NDA is not appropriate. If both parties will be exchanging sensitive information, a mutual NDA is better. For example, if you are negotiating a joint venture where both sides will share trade secrets, a mutual NDA will protect both parties equally.

It is also important to recognize that some investors, especially venture capital firms, may refuse to sign NDAs at the pitch stage. They often review hundreds of business plans and do not want to risk being accused of misusing confidential information. In these cases, you may need to rely on other strategies, such as only sharing non-sensitive information initially or using intellectual property registrations where possible.

Before using a one-way NDA, ask yourself these questions:

• Am I the only party sharing confidential information?
• Is the information truly sensitive and valuable to my business?
• Is the recipient likely to refuse to sign an NDA (for example, a VC)?
• Are there other protections I should consider in addition to an NDA?

If the answer to the first two questions is yes, a one-way NDA is likely the right tool. If not, consider a mutual NDA or other legal protections.

Key Terms to Include in a One Way NDA

To be effective, your one-way NDA should include several key terms. Here is a practical checklist of what to cover, with examples and state law caveats:

• Definition of Confidential Information: Clearly describe what information is protected. This can include written, oral, electronic, or visual information. Avoid overly broad or vague definitions, as courts may not enforce them. For example, "all information disclosed" is too broad. Instead, specify categories such as "business plans, source code, customer lists, and financial data." In California, courts are especially wary of vague or overbroad definitions.
• Purpose: Specify why you are sharing the information and how it can be used. For example, "solely for evaluating a potential business relationship." This limits the recipient's use of your information and can help in enforcement if a dispute arises.
• Obligations of the Recipient: State that the recipient must keep the information confidential, use it only for the stated purpose, and take reasonable steps to prevent unauthorized disclosure. You may also require the recipient to notify you if they are legally compelled to disclose the information (such as by subpoena).
• Exclusions: List what is not considered confidential, such as information that is already public, independently developed by the recipient, or received from another source without breach of duty. These exclusions are standard and help avoid disputes.
• Term: Set a time period for the confidentiality obligation. Common terms range from 2 to 5 years, but trade secrets may require longer protection. Some states, like Texas, are more likely to enforce longer or indefinite terms for true trade secrets, while California courts may limit the term to what is reasonably necessary.
• Return or Destruction: Require the recipient to return or destroy confidential information upon request or at the end of the relationship. This helps you control the spread of your information after the business relationship ends.
• Remedies: Include the right to seek injunctive relief (a court order to stop disclosure) and damages if the NDA is breached. Some states may require you to show actual harm before granting an injunction, so be specific about the harm that could result from a breach.
• Jurisdiction and Governing Law: Specify which state's laws apply and where disputes will be resolved. If you are based in New York but the recipient is in Illinois, you can agree that New York law governs the NDA. However, some states may refuse to enforce a choice of law provision if it conflicts with their public policy, especially in employee NDAs.

Here is a sample clause defining confidential information:

"Confidential Information means all non-public information disclosed by Discloser to Recipient, whether oral, written, or electronic, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Confidential Information includes, but is not limited to, business plans, financial data, customer lists, technical documentation, and source code."

Always tailor these terms to your business and the state law that will apply to your NDA. If you are unsure, consider consulting an attorney to review your NDA before using it in important deals.

Common Mistakes and How to Avoid Them

Many businesses use generic NDA templates without considering their specific needs or state law requirements. Here are some common mistakes and practical tips to avoid them, with real-world examples:

• Using the wrong type of NDA: If both parties are sharing confidential information, use a mutual NDA instead of a one-way NDA. For example, two software companies collaborating on a joint project should use a mutual NDA.
• Overly broad definitions: Defining confidential information too broadly (such as "all information disclosed") may make the NDA unenforceable in some states. In California, courts have refused to enforce NDAs that attempt to cover information that is not genuinely confidential. Be specific about what is protected.
• Unclear exclusions: Failing to list exclusions can lead to disputes about what is protected. For example, if the recipient already knows some of the information, or if it becomes public later, you do not want to fight over whether it is still confidential. Include standard exclusions for public information, independently developed information, and information received from third parties.
• No time limit: Indefinite confidentiality obligations are often disfavored by courts. Set a reasonable term, except for true trade secrets. For example, "The Recipient's obligations under this Agreement will continue for three (3) years from the date of disclosure, except for trade secrets, which will be protected as long as they remain trade secrets under applicable law."
• Not addressing state law differences: State laws on NDAs, remedies, and enforceability vary. For example, California law limits the scope of NDAs and may not enforce certain restrictions, especially if they impact employee mobility. In Massachusetts, the Uniform Trade Secrets Act provides specific remedies for trade secret misappropriation, which may supplement or override your NDA. Always check the relevant state law or consult an attorney.
• Not keeping records: Failing to keep copies of signed NDAs and a record of what was disclosed can make enforcement difficult. For example, if you cannot prove what information was shared under the NDA, it may be hard to show a breach. Maintain organized records for each NDA you use, including a log of what was disclosed and when.
• Relying solely on NDAs: NDAs are not a substitute for other protections, such as patents, copyrights, or limiting access to sensitive information. For example, if you have a valuable invention, consider filing a patent application before disclosing it, even under NDA.

Here is a practical checklist to avoid these mistakes:

• Review the NDA template for fit with your situation and state law
• Tailor the definition of confidential information to your business
• Include standard exclusions and a reasonable term
• Specify the governing law and jurisdiction
• Keep organized records of signed NDAs and disclosures
• Use other legal protections where appropriate

Before sharing confidential information, review your NDA to ensure it fits your situation. If you are unsure, consider having an attorney review the agreement, especially for high-value deals or if you are dealing with parties in different states.

Practical Steps for Using a One Way NDA

Here is a step-by-step checklist for using a one-way NDA in your business, with practical examples and tips:

1. Identify what needs protection: List the specific information you will share and why it is confidential. For example, "product roadmap, source code, and customer acquisition strategy."
2. Select the right NDA template: Choose a one-way NDA if only you are disclosing information. Use a mutual NDA if both sides are sharing sensitive data.
3. Customize the NDA: Tailor the definition of confidential information, exclusions, term, and governing law to your situation. For example, if you are based in Texas but your contractor is in California, you may want to specify Texas law, but be aware that California courts may apply their own rules if the dispute ends up there.
4. Send the NDA before sharing information: Make sure the recipient signs the NDA before you disclose anything sensitive. Do not rely on verbal promises or handshake deals. For example, if you are hiring a freelance designer, send the NDA before your first project meeting.
5. Keep records: Store signed copies of the NDA, a list of what was disclosed, and any correspondence about the agreement. Use a secure digital folder and keep a log of disclosure dates and recipients.
6. Limit disclosure: Only share what is necessary for the purpose stated in the NDA. Mark documents as "Confidential" when possible. For example, if you are sharing financial projections with an advisor, only provide the sections relevant to their review.
7. Monitor compliance: If you suspect a breach, act quickly to enforce your rights. Document any suspected misuse and seek legal advice if needed. For example, if you discover that a contractor has posted your source code online, gather evidence and contact an attorney immediately.

Example: A founder is preparing to pitch a new product to a manufacturer. Before sharing the product specifications and design drawings, the founder sends a one-way NDA to the manufacturer. The NDA specifies that the information is confidential, can only be used for evaluating a manufacturing partnership, and must be returned or destroyed if the deal does not go forward. The founder keeps a signed copy of the NDA and a list of what was disclosed. If the manufacturer later tries to produce a similar product without permission, the founder has a clear record to support enforcement.

Here is a sample recordkeeping checklist:

• Signed NDA (digital or hard copy)
• List of confidential information disclosed (date, description, recipient)
• Emails or correspondence about the NDA and disclosures
• Notes on any verbal disclosures (date, content, context)
• Follow-up reminders to return or destroy information at the end of the relationship

Good recordkeeping can make the difference between a successful enforcement and a failed claim.

FAQs

Is a one-way NDA enforceable in every state?

Most states recognize and enforce NDAs as long as they are reasonable in scope, duration, and definition of confidential information. However, some states, such as California, place limits on NDAs, especially if they restrict employee mobility or attempt to cover information that is not truly confidential. In California, NDAs that attempt to prevent employees from using general skills and knowledge are often unenforceable. Always check the relevant state law and tailor your NDA accordingly.

How long should a one-way NDA last?

The appropriate term depends on the nature of the information. For most business information, a term of 2 to 5 years is common. For trade secrets, you may want the obligation to last as long as the information remains a trade secret. Some states, such as New York, will enforce longer terms for trade secrets, while others may require a reasonable time limit for other confidential information. Avoid indefinite terms unless justified by the type of information.

What happens if someone breaches a one-way NDA?

If the recipient discloses or misuses your confidential information, you may be able to seek remedies such as an injunction (a court order to stop further disclosure) and monetary damages. Enforcement can be challenging if you do not have clear records or if the NDA is poorly drafted. In some cases, you may also have claims under state trade secret laws or the federal Defend Trade Secrets Act. Some states require you to show actual harm before awarding damages or an injunction, so detailed records and a clear NDA are critical.

Can I use an NDA template I found online?

Online NDA templates can be a starting point, but they are often generic and may not fit your specific needs or comply with state law. For example, a template that works in Delaware may not be enforceable in California. Always review and customize any template before using it, and consider having an attorney review it for important deals or sensitive disclosures.

Do investors usually sign one-way NDAs?

Many professional investors, especially venture capital firms, prefer not to sign NDAs when reviewing pitches. They often see too many deals to take on the risk of being accused of misuse. Instead, limit what you share in early discussions and focus on building trust. For later-stage negotiations, NDAs may be more common, especially when detailed financials or proprietary technology are involved.

Key Takeaways

• A one-way non-disclosure agreement is used when only one party is sharing confidential information. It is common in early-stage business deals, hiring contractors, and working with vendors.
• Clearly define what is confidential, set a reasonable term, and include standard exclusions and remedies. Tailor your NDA to your business and the relevant state law.
• Keep organized records of signed NDAs and what was disclosed. Good recordkeeping is essential for enforcement.
• Consider attorney review for high-value deals, cross-state agreements, or when state law is unclear. Do not rely solely on generic templates.
• NDAs are one part of your overall strategy to protect confidential information. Use them thoughtfully and combine them with other legal protections where appropriate.

Protecting your business's confidential information is essential, but NDAs are only one part of your overall strategy. Use them thoughtfully, and do not rely on templates alone for important deals. Consider the specific needs of your business, the nature of the information, and the relevant state law before using any NDA.

If you need help drafting or reviewing a one-way non-disclosure agreement for your business, our team can support your project through the Sprintlaw platform. Call (888) 449-8437 or email team@sprintlaw.com to discuss your needs. Where legal services are required, they are delivered by licensed lawyers at trusted US law firms through the Sprintlaw platform.