NDA Agreement: Format, Key Clauses & When You Need One

Before you share a business plan with an investor, hand over source code to a freelancer, or discuss a potential deal with a vendor, you need a way to legally protect that information from being leaked or misused. A Non-Disclosure Agreement (NDA) does exactly that. This guide explains the different types of NDAs, the clauses that actually matter, stamp duty considerations in India, and the mistakes that make an NDA weaker than it looks.

What is an NDA?

An NDA is a legally binding contract in which one or both parties agree to keep specified information confidential and not use it for any purpose other than what's agreed. It's designed to give the disclosing party a legal remedy — damages or an injunction — if the receiving party leaks or misuses the shared information.

Unilateral vs mutual NDA

Choosing the wrong type is a common mistake — signing a unilateral NDA when you're also sharing sensitive information leaves your own data unprotected.

When do you need an NDA?

• Hiring employees or contractors who will have access to proprietary processes, client data, or trade secrets.
• Vendor and supplier negotiations where pricing, specifications, or business processes are discussed.
• Investor pitches — though many investors resist signing NDAs for early pitches, they're standard once due diligence begins.
• Freelancers and consultants working with confidential business data, designs, or code.
• Franchise, licensing, or M&A discussions where detailed financials and operations are shared.

Essential clauses in an NDA

1. Definition of confidential information — precisely what counts as confidential (documents, verbal disclosures, technical data, client lists, etc.). Vague definitions are the most common weakness in poorly drafted NDAs.
2. Obligations of the receiving party — how the information may be used, who within the organisation can access it, and security measures required.
3. Exclusions from confidentiality — information already public, independently developed, or lawfully obtained from a third party is typically carved out.
4. Term and duration — how long the agreement lasts, and separately, how long confidentiality obligations survive after termination (often longer than the agreement itself).
5. Remedies for breach — specifying that a breach can cause irreparable harm justifies seeking an injunction in addition to monetary damages.
6. Governing law and jurisdiction — which state's laws apply and which courts have authority, important when parties are in different cities or countries.

Stamp duty on NDAs in India

NDAs are typically treated as a general agreement under the stamp act of the relevant state, and stamp duty is usually modest — commonly in the range of ₹20 to ₹100 depending on the state, though exact rates vary by jurisdiction. An unstamped NDA is still a valid contract between the parties, but it may not be admissible as evidence in court until the duty (and any penalty for late payment) is cleared. For any NDA involving significant business value, it's worth executing it on proper stamp paper or e-stamp from the start rather than risking an evidentiary problem later.

Physical signing isn't mandatory either — NDAs signed electronically (via e-signature or digital signature) are recognised under the Information Technology Act, 2000, provided the underlying document is otherwise valid and, where required, appropriately stamped. This makes it practical to execute an NDA quickly with a remote vendor, freelancer, or investor without a courier delay.

Enforcing an NDA — what happens on breach

If a receiving party leaks or misuses confidential information, the disclosing party can approach a civil court for two main remedies: damages (monetary compensation for the loss suffered) and an injunction (a court order stopping further use or disclosure of the information). Because financial loss from a leak can be hard to quantify precisely — especially for trade secrets or unreleased product plans — well-drafted NDAs often include a clause acknowledging that breach causes irreparable harm, which makes it easier to argue for an injunction rather than relying on damages alone. Criminal remedies are rare unless the breach also involves theft of data, hacking, or fraud, which would fall under separate provisions of the Bharatiya Nyaya Sanhita or the IT Act.

Common mistakes to avoid

• Using a generic template without tailoring the definition of confidential information to the actual deal.
• No clear survival clause — leaving it unclear whether confidentiality continues after the main agreement or relationship ends.
• Overly broad restrictions that could later be challenged as unreasonable, especially restraint-of-trade style clauses that go beyond confidentiality.
• Skipping the exclusions clause, which can make the NDA unreasonably one-sided and harder to enforce.
• Ignoring stamp duty, which can create problems if the NDA ever needs to be relied on in litigation.
• Vague jurisdiction clause, causing confusion over where a dispute must be filed.

Frequently asked questions

Is an NDA legally valid in India without stamp paper?

An unstamped NDA is still a valid, binding contract between the parties — but it generally cannot be produced as evidence in an Indian court until the applicable stamp duty (plus any penalty for late stamping) is paid. For anything beyond a low-stakes discussion, it's worth executing the NDA on proper stamp paper so it holds up if a dispute ever reaches court.

What is the difference between a unilateral and a mutual NDA?

A unilateral (one-way) NDA protects information flowing from only one party to the other — common when a company shares data with an employee, contractor, or vendor. A mutual (two-way) NDA protects information exchanged by both parties, typically used in joint ventures, M&A discussions, partnerships, or investor negotiations where both sides share confidential material.

How long should an NDA's confidentiality obligation last?

Most commercial NDAs specify a confidentiality term of 2 to 5 years from the date of disclosure or termination of the agreement, though trade secrets are sometimes protected indefinitely since they lose value entirely once disclosed. The clause should clearly separate the agreement's overall term from the survival period during which confidentiality obligations continue to apply.

Related: All tools · More guides