How to Draft an Enforceable NDA in the US (2026 Guide): Scope, Trade Secrets, Remedies & AI Drafting
TL;DR: A US non-disclosure agreement (NDA) is only as strong as its weakest clause. To be enforceable it needs a precise definition of confidential information, a realistic term, standard carve-outs (public knowledge, independently developed, lawfully obtained, court-ordered), and remedies that a court will actually grant. Trade-secret material gets extra protection under the federal Defend Trade Secrets Act (DTSA) and state Uniform Trade Secrets Act (UTSA) statutes. Non-compete and non-solicit add-ons are governed by state law and vary wildly, so keep them separate and jurisdiction-aware. AI tools like MeshLaw draft the first version, flag missing carve-outs, and check governing-law consistency in minutes, while a licensed attorney handles the judgment calls. This article is general information, not legal advice.
Almost every business relationship in the United States begins with a confidentiality agreement. Before an investor sees your financials, before a contractor touches your codebase, before an acquirer opens the data room, someone signs an NDA. Yet most NDAs are copied from a template that no one has read closely in years. When a dispute finally happens, the gaps show up fast: an undefined term, a missing carve-out, a remedies clause a judge will not enforce.
This guide walks through what makes a US NDA enforceable in 2026, clause by clause, and shows how AI legal drafting fits into a modern workflow. It pairs naturally with our broader look at AI contract drafting and legal document automation.
What exactly does an NDA do, and when do you need one?
A non-disclosure agreement (also called a confidentiality agreement) is a contract in which one or both parties promise to keep certain information secret and to use it only for a defined purpose. It creates a private, contractual obligation on top of whatever statutory protection the information may already enjoy. That distinction matters: even information that would not qualify as a legal trade secret can still be protected by a well-drafted NDA, because the parties simply agree to treat it as confidential.
You typically want an NDA before sharing business plans, customer lists, pricing, source code, product roadmaps, financials, or manufacturing know-how. Common triggers include hiring contractors, evaluating a potential partnership, pitching investors, or beginning M&A due diligence. The NDA sets the ground rules before the sensitive material changes hands.
One-way or mutual: which NDA structure do you need?
The first structural decision is direction. A one-way (unilateral) NDA protects a single disclosing party. A mutual (bilateral) NDA protects both sides because both expect to share sensitive information. Choosing the wrong structure creates lopsided obligations that the other side will push back on, delaying the deal.
| Feature | One-way (unilateral) NDA | Mutual (bilateral) NDA |
|---|---|---|
| Who discloses | One party only | Both parties |
| Typical use | Vendor, contractor, or employee receiving your secrets | Partnership talks, joint ventures, two companies exploring a deal |
| Obligations | Run against the receiving party | Symmetrical; each side is both discloser and recipient |
| Negotiation friction | Lower for the discloser, higher for the recipient | Perceived as fairer, usually signs faster |
| Risk of imbalance | Higher if the recipient also shares information | Lower; balanced by design |
A practical rule: if there is any realistic chance both sides will exchange sensitive information, use a mutual NDA. It signals good faith and avoids the awkward mid-deal rewrite when the other party realizes they are exposed too.
How should you define confidential information?
The definition of confidential information is the load-bearing clause of the entire agreement. Draft it too narrowly and you leave critical material unprotected; draft it too broadly and a court may find the clause unreasonable or unworkable. Most enforceable NDAs use a hybrid approach: a broad general description (any non-public business, technical, or financial information) combined with illustrative categories (source code, customer lists, pricing, product roadmaps, financial statements).
Two drafting choices deserve attention. First, decide whether information must be marked confidential to qualify. Marking requirements add certainty but are easy to forget in practice, so many NDAs cover information that a reasonable person would understand to be confidential given its nature and the circumstances of disclosure. Second, address oral disclosures: if the definition only covers written material, a whiteboard session or a phone call may fall outside the agreement unless you require a follow-up written summary within a set number of days.
What carve-outs and permitted disclosures belong in every NDA?
No confidentiality obligation is absolute. US courts expect NDAs to include standard exclusions, and their absence can make an agreement look overreaching. The four classic carve-outs are information that: (1) is or becomes publicly known through no fault of the recipient; (2) was already lawfully in the recipient's possession before disclosure; (3) is independently developed without using the confidential information; and (4) is lawfully received from a third party without a duty of confidentiality.
Beyond those, include a compelled disclosure clause. If a subpoena, court order, or regulator requires disclosure, the recipient should be permitted to comply, ideally after giving prompt notice so the disclosing party can seek a protective order. A modern NDA should also preserve whistleblower rights. The DTSA contains an immunity notice provision for individuals who disclose trade secrets to the government or in a court filing to report a suspected violation of law; including that notice helps preserve certain remedies against employees and contractors.
How long should confidentiality obligations last?
Term is where trade-secret law and contract law can pull in different directions. For ordinary confidential information, a fixed term of two to five years after disclosure is common and easy to enforce. For genuine trade secrets, however, a fixed expiration can undercut protection, because a trade secret is legally protectable only for as long as it stays secret. Many NDAs therefore use a two-tier term: a fixed period for general confidential information, and an obligation that lasts as long as the material remains a trade secret for trade-secret information specifically.
Be aware that some states scrutinize indefinite confidentiality obligations on non-trade-secret information as potential restraints on employee mobility, so the two-tier structure is safer than a blanket perpetual clause. When an NDA sits alongside an employment relationship, coordinate it with your employment contracts and HR policies so the terms do not conflict.
How do the DTSA and UTSA protect trade secrets alongside your NDA?
An NDA is a contract, but trade secrets also get statutory protection that exists independently. At the federal level, the Defend Trade Secrets Act of 2016 (codified at 18 U.S.C. § 1836 and following) created a federal civil cause of action allowing a trade-secret owner to sue in federal court when a trade secret related to a product or service used in interstate or foreign commerce is misappropriated. Available remedies can include injunctive relief, actual damages, and, where misappropriation is willful and malicious, exemplary (up to double) damages and attorney fees. The DTSA also provides for an extraordinary ex parte seizure remedy in narrow circumstances.
At the state level, most US states have adopted a version of the Uniform Trade Secrets Act (UTSA), which defines a trade secret and the elements of misappropriation. New York is the notable holdout, protecting trade secrets under common law instead. Because the DTSA does not preempt state law, plaintiffs frequently plead both a federal DTSA claim and a state UTSA claim together. The practical takeaway for drafting: to preserve trade-secret status you must show the information derives value from being secret and that you took reasonable measures to keep it secret. A signed NDA is one of the clearest pieces of evidence that you took such measures, which is why the NDA and the statute reinforce each other. (Verify the current text and any amendments before relying on specific section numbers.)
What remedies actually work: injunction, damages, or liquidated damages?
A breach clause is worthless if the remedy is one a court will not grant. The two workhorses are injunctive relief and monetary damages, and sophisticated NDAs provide for both.
| Remedy | What it does | When it fits | Watch-outs |
|---|---|---|---|
| Injunctive relief | Court orders the breaching party to stop disclosing or using the information | Ongoing or threatened disclosure where money cannot undo the harm | Requires showing irreparable harm; an NDA acknowledgment of irreparable harm helps but is not automatically decisive |
| Actual (compensatory) damages | Money to compensate proven loss from the breach | After a completed breach with quantifiable loss | Loss from leaked information is often hard to prove precisely |
| Liquidated damages | A pre-agreed dollar amount for breach | When actual harm is genuinely hard to estimate in advance | Must be a reasonable estimate, not a penalty, or courts will refuse to enforce it |
Because information, once out, cannot be pulled back, most NDAs include a clause acknowledging that a breach may cause irreparable harm and that the disclosing party may seek injunctive relief in addition to any other remedy. Such language supports, but does not guarantee, an injunction; the court still applies its own test.
Liquidated damages are tempting but risky. Under the general common-law rule, a liquidated-damages clause is enforceable only if the harm was difficult to estimate at the time of contracting and the stated amount is a reasonable forecast of the probable loss. If the number looks like a punishment rather than an estimate, courts treat it as an unenforceable penalty and strike it. For most NDAs, a clause preserving the right to actual damages plus injunctive relief is more durable than a fixed penalty figure.
How do non-solicit and non-compete clauses interact with an NDA?
Confidentiality clauses are often bundled with non-solicitation and non-compete restrictions, but they are legally distinct and governed by very different standards. A confidentiality obligation protects information; a non-compete restricts where and for whom a person can work. Courts scrutinize the latter far more heavily.
Non-compete enforceability is overwhelmingly a matter of state law, and it varies dramatically. California, for example, generally treats employee non-competes as void, while other states enforce reasonable ones limited in scope, geography, and duration. On the federal side, the FTC issued a rule in 2024 that would have broadly banned most non-competes, but courts blocked it, the FTC dropped its appeals, and the agency moved to remove the rule from the Code of Federal Regulations, shifting to case-by-case enforcement. Because this area is in flux, always check the current federal and state status before relying on a non-compete. The safer drafting practice is to keep confidentiality provisions in a standalone NDA and treat non-compete or non-solicit terms as separate, jurisdiction-specific clauses that can be removed or narrowed without weakening the confidentiality obligations.
Which governing law and jurisdiction clauses should you pick?
The governing-law clause decides which state's rules interpret the NDA, and the forum clause decides where disputes are heard. These are not boilerplate. Because trade-secret nuances, liquidated-damages tolerance, and non-compete rules differ by state, the chosen law can change the outcome. Pick a state with a genuine connection to the parties or the deal, confirm the choice is consistent throughout the document, and align the dispute-resolution mechanism (court litigation versus arbitration) with your remedies. If you need fast injunctive relief, make sure the forum clause does not accidentally force everything into arbitration where emergency injunctions are harder to obtain.
How does AI (MeshLaw) draft and review an NDA?
Drafting an NDA by hand means reconciling all of the above at once: definition scope, carve-outs, term tiers, remedies, and governing law. This is exactly the kind of structured, pattern-heavy work where AI legal tools help most. MeshLaw generates a first draft from a short intake, then reviews it against a checklist a human might rush.
In a typical flow, MeshLaw will: (1) capture the parties, direction (one-way or mutual), purpose, and jurisdiction through structured AI client intake; (2) assemble a draft with a hybrid confidential-information definition and the four standard carve-outs; (3) flag missing pieces, such as an absent compelled-disclosure clause, a perpetual term on non-trade-secret information, or a liquidated-damages figure that reads like a penalty; and (4) check that the governing-law state is consistent and compatible with the remedies you selected. For a deeper look at keeping AI drafts accurate, see our guide to faster review and drafting without losing accuracy and the broader AI for lawyers guide.
AI is a drafting accelerator, not a substitute for professional judgment. It is excellent at catching a missing carve-out or an inconsistent forum clause; it is not the right tool to decide whether a borderline non-compete is worth the litigation risk in a particular state. The strongest workflow pairs AI speed with attorney review, the same division of labor that powers efficient solo-lawyer workflow automation.
Draft and review your NDA with MeshLaw →
Frequently asked questions about US NDAs
Is an NDA legally binding?
Yes. An NDA is an ordinary contract and is binding if it has the usual elements (offer, acceptance, consideration) and its terms are lawful and reasonable. The receiving party's promise to keep information secret, or the exchange of information itself, generally supplies the consideration.
What is the difference between an NDA and a confidentiality agreement?
In practice, none. Non-disclosure agreement and confidentiality agreement are two names for the same type of contract. Some longer commercial agreements fold the same obligations into a confidentiality section instead of a standalone document.
Do I need a lawyer to sign an NDA?
Not to sign one, but it is wise to have significant NDAs reviewed, especially if they include non-compete or broad non-solicit terms, unusual term lengths, or large liquidated-damages figures. This article is general information, not legal advice.
How long should an NDA last?
Two to five years is common for general confidential information. For genuine trade secrets, obligations often continue for as long as the material remains secret, using a two-tier term.
Can an NDA last forever?
An indefinite obligation is defensible for true trade secrets, but a blanket perpetual clause covering all information can face scrutiny in some states. A two-tier term (fixed for general info, trade-secret-length for trade secrets) is safer.
What information cannot be protected by an NDA?
Information that is public, already lawfully known to the recipient, independently developed, or lawfully obtained from a third party generally cannot be protected. These are the standard carve-outs that most enforceable NDAs include.
What happens if someone breaches an NDA?
The disclosing party can seek remedies such as injunctive relief to stop further disclosure and monetary damages for proven losses. If the information qualifies as a trade secret, statutory claims under the DTSA or a state UTSA may also be available, potentially with enhanced damages and attorney fees for willful misconduct.
Are liquidated damages in an NDA enforceable?
Only if the amount is a reasonable estimate of hard-to-quantify harm made at the time of contracting. If it looks like a penalty, courts will refuse to enforce it. Many NDAs instead rely on actual damages plus injunctive relief.
What is the DTSA?
The Defend Trade Secrets Act of 2016 is a federal law (18 U.S.C. § 1836 and following) that lets trade-secret owners bring a civil misappropriation claim in federal court, with remedies that can include injunctions, damages, and, for willful and malicious conduct, enhanced damages and fees.
Do all states follow the same trade-secret law?
Most states have adopted a version of the Uniform Trade Secrets Act, but there are variations, and New York relies on common law instead. The federal DTSA sits alongside these state laws rather than replacing them.
Is a non-compete the same as an NDA?
No. An NDA protects information; a non-compete restricts where a person can work. Non-competes face far stricter, state-specific scrutiny (California generally voids employee non-competes) and should be drafted separately.
What is the current status of the FTC non-compete ban?
The FTC's 2024 rule was blocked by courts, the agency dropped its appeals, and it moved to remove the rule from federal regulations, shifting to case-by-case enforcement. Non-compete enforceability now turns mainly on state law, so check the current federal and state status.
Should my NDA be one-way or mutual?
Use a one-way NDA when only you disclose information, and a mutual NDA when both parties will share. If in doubt and both sides might exchange sensitive material, a mutual NDA is usually faster to sign and perceived as fairer.
Can AI draft a valid NDA?
AI can produce a strong first draft and catch missing clauses quickly, but a licensed attorney should review anything high-stakes. Tools like MeshLaw are best used to accelerate drafting and review, not to replace legal judgment.
Does an NDA protect against my own employees?
Yes, an NDA can bind employees and contractors, and it strengthens trade-secret claims by evidencing reasonable secrecy measures. Coordinate it with your employment agreements, and include the DTSA whistleblower immunity notice where appropriate.
The bottom line
An enforceable US NDA is not a magic template; it is a set of deliberate choices about scope, term, carve-outs, remedies, and governing law, layered on top of trade-secret statutes like the DTSA and state UTSA. Get those choices right and the agreement does real work when it matters. AI tools like MeshLaw make the drafting and review dramatically faster and more consistent, but the final call belongs to a qualified attorney who knows your state and your deal. This article is general information only, not legal advice; laws vary by state and change over time, so consult a licensed attorney for your specific situation.