7 NDA Template Mistakes That Make Your Agreement Worthless

A bad NDA is worse than no NDA — it makes you feel protected when you're not. We've looked at thousands of NDAs uploaded to free PDF generators (anonymized) and the same 7 mistakes show up again and again. Here's how to spot them and fix them in 30 seconds.

1. The "Confidential Information" definition is too narrow

If your NDA defines confidential information as "all written materials marked CONFIDENTIAL," you've created a loophole. Verbal disclosures during a meeting, screen shares on a Zoom call, or a quick whiteboard sketch — none of them are written, and none of them are marked. They're all unprotected.

2. There's no time limit (or it's "forever")

Courts hate perpetual NDAs. Most jurisdictions will refuse to enforce a confidentiality term that lasts forever, especially for general business information. If you sign an NDA with "no expiration," a judge may rule the entire clause unenforceable.

The sweet spot for most business NDAs is 2-5 years. For trade secrets specifically, you can extend protection "for as long as the information remains a trade secret" — but call it out explicitly.

3. No "residuals" clause for receiving party

If you're receiving information (an investor, contractor, or acquirer), you need a residuals clause. Otherwise you're technically violating the NDA every time you remember something you saw. This isn't paranoia — large companies will not sign an NDA without one.

A residuals clause says: information retained in the unaided memory of the receiving party isn't a breach. It protects you from impossible obligations.

4. The carve-outs are missing

Every solid NDA carves out four categories: (a) information already public, (b) information already known to the recipient, (c) information independently developed, and (d) information lawfully received from a third party. If your template doesn't list these four, it's incomplete.

5. There's no "compelled disclosure" exception

What if the receiving party gets a subpoena? Without a compelled-disclosure exception, they're forced to choose between breaking the law and breaking the NDA. A good template says: if legally compelled, the recipient must notify the disclosing party first (when possible) and disclose only what's strictly required.

6. Wrong governing law

You're in California, they're in Texas — which state's law applies? An NDA without a governing-law clause is a fight waiting to happen. Pick the state where you (the disclosing party) want to litigate. For most US startups, Delaware or California are safe defaults.

7. No specified remedy

If the other side breaches, what do you actually do? Sue for damages? Those are nearly impossible to calculate for leaked information. Smart NDAs include an "injunctive relief" clause that lets you go straight to a court order to stop the breach — without having to prove dollar damages first.

How to fix all 7 in 60 seconds

Honestly the fastest way is to start with a template that already has them baked in. Our free NDA template covers every issue above by default — fill the form, preview live, download a clean PDF.

A final note: this article is a general guide, not legal advice. For high-value confidential information (trade secrets, deals over $50k, sensitive M&A), pay a lawyer for 30 minutes of review. It's cheap insurance.