There is a moment every founder knows. You are about to show someone the real thing: the product, the numbers, the idea that makes the whole company work. Before you do, you slide an NDA across the table. They sign it, and you relax. Your secret is protected.

Maybe.

Or maybe you just handed them a document that would not do much for you if it were ever put to the test.

The non-disclosure agreement (NDA) is one of the most important tools a growing business has, and also one of the most misunderstood. Too often, people treat it as a formality, a document you sign before getting to the real conversation.

When you are about to share your customer list, financials, source code, or the idea you have spent years developing, that piece of paper is what separates “we had a confidential conversation” from “they took what I shared and walked away.”

What many business owners do not realize until it is too late is that not all NDAs are created equal. Many of the versions circulating online, copied from an old transaction or downloaded as a free template, are missing the provisions that actually make them effective. They look like protection, and they feel like protection. When you need to enforce one, though, the details determine whether it holds up.

Here are five things we look for every time we review an NDA, because understanding what belongs in one is the best way to avoid relying on an agreement that was never going to protect you in the first place.

One: What Counts as Confidential, and What Doesn’t

Every NDA begins with one essential question: what information is actually being protected?

The definition should clearly cover the confidential and proprietary information that matters most to your business. At the same time, a well-drafted NDA includes reasonable carve-outs for information the receiving party already knew, information that becomes public through no fault of their own, information they developed independently, or information they obtained legitimately from another source.

Those exceptions are not weaknesses. They help make the agreement reasonable and enforceable. An NDA that attempts to restrict information someone already possessed or could easily obtain elsewhere is far less likely to hold up if challenged.

Just as important is limiting how the information may be used. The agreement should make it clear that confidential information can only be used for the specific purpose of evaluating or conducting business with you. That single provision helps prevent a business discussion from becoming an opportunity for someone else to develop their own competing version.

Two: How Long It Actually Lasts

This is one of the most commonly overlooked sections of an NDA.

A strong agreement distinguishes between two different time periods.

The first is the term of the agreement, or the period during which confidential information is covered. The language should be clear enough to avoid disputes over whether information shared before or after the agreement was signed is protected. In many cases, the cleanest approach is to cover information disclosed from the effective date of the agreement forward.

The second is the survival period, which determines how long the confidentiality obligation continues after the business relationship ends.

This distinction matters. If the NDA simply expires when negotiations end and does not specifically state that confidentiality obligations survive, your protection may disappear at the very moment you still need it. A well-drafted NDA allows either party to end the relationship while making it clear that information already disclosed must continue to remain confidential for the agreed-upon period.

Three: Who Else Gets to See It

In practice, you are rarely sharing confidential information with just one person.

The receiving party often needs to share that information with employees, advisors, or consultants who are involved in evaluating the opportunity. A practical NDA allows for that.

What it should also do is make the receiving party responsible for those individuals.

If an employee or outside consultant improperly discloses your confidential information, the party who signed the NDA should remain accountable. Without that provision, your information may be shared with people you never approved, leaving you with little practical recourse if it is disclosed.

Four: Who Owns What, and Who Promises What

Two important provisions often receive less attention than they deserve.

The first addresses ownership. Your NDA should clearly state that you retain ownership of your confidential information, including any improvements, modifications, or derivative works based on it. Without that language, someone could argue that changes they made created something they own independently.

The second involves representations and warranties.

When you are the party sharing information, you generally do not want to guarantee that every piece of information is complete or accurate. A properly drafted NDA allows you to disclose information during preliminary discussions without creating unnecessary liability if circumstances change or information later proves incomplete.

Five: What Happens When It’s Over, and What Happens If Someone Breaks It

Every NDA should address both the ordinary ending of the relationship and the possibility that someone breaches the agreement.

When discussions conclude, the receiving party should be required to return or destroy your confidential information and confirm that they have done so, subject only to limited exceptions such as automatic system backups or records they are legally required to retain. Any retained information should remain subject to the confidentiality obligations in the agreement.

The NDA should also address the consequences of a breach.

Depending on the circumstances, that may include a non-solicitation provision preventing the receiving party from recruiting your employees, an indemnification provision requiring them to cover losses resulting from a breach, or a prevailing-party provision allowing the successful party in litigation to recover legal fees.

These provisions provide meaningful consequences if the agreement is violated. Without them, an NDA may offer far less protection than most business owners expect.

Protect What Makes Your Business Valuable

The takeaway is simple. An NDA is not just another document to sign before a meeting. It is one of the primary tools businesses use to protect the information that gives them a competitive advantage.

The effectiveness of that protection depends entirely on the details within the agreement. Many businesses rely on NDAs every day without realizing the documents they are using may not provide the protection they assume.

Fortunately, reviewing or updating an NDA is a relatively small investment compared to the cost of discovering its weaknesses after confidential information has already been disclosed.

At Mavacy, we help businesses build confidentiality agreements that are designed to work when they matter most. We also review existing NDAs to identify gaps and make sure they provide the protection your business actually needs.

Schedule a consultation. Bring the NDAs and confidentiality agreements you are currently using, and we will review them together, provision by provision.

Mavacy Law. On time, on budget, before you even have to ask.