NDA & Confidentiality Agreement Risk Scoring
Most NDAs are drafted for the disclosing party. The real risk is rarely one shocking clause — it is how broadly 'Confidential Information' is defined, whether the standard carve-outs exist, how long the obligation runs, and whether both sides carry it. LiabilityScore™ reads every clause and flags the scope, asymmetry, and missing protections that turn information you already knew into a breach.
What We Analyze
- Breadth of the 'Confidential Information' definition
- Standard carve-outs (already-known, public, independently developed, third-party)
- Compelled-disclosure (subpoena / court order) exception
- Term length and perpetual-survival language
- One-way vs. mutual obligations
- Non-compete or non-solicit smuggled into an 'NDA'
- IP, invention, or feedback assignment language
- Liquidated damages per disclosure and fee-shifting
- Injunction stacking and irreparable-harm admissions
- Return-or-destruction and residuals clauses
Common Red Flags in NDAs
Overbroad 'Confidential Information' definition
When the definition reaches information that is already public, already known to you, or independently developed, ordinary knowledge can become a breach. A definition with no marking requirement and no carve-outs is the single most common overreach in a one-sided NDA.
Missing the standard carve-outs
Negotiated NDAs exclude information that is publicly available, already known, independently developed, or rightfully received from a third party. When those four carve-outs are absent, there is no safe boundary around what you can use or say.
A non-compete or IP assignment hidden in an 'NDA'
Restrictive covenants and 'all feedback and improvements are assigned to us' language sometimes appear under a confidentiality heading. A document presented as 'just an NDA' can quietly restrict who you work for or take ownership of your ideas.
Liquidated damages per disclosure
A fixed sum for each disclosure, untied to actual harm, converts a good-faith dispute into a stacking penalty. Negotiated versions rely on actual damages and preserve the bond requirement for injunctions.
Perpetual survival for all information
An obligation that runs forever for every category of information — not just trade secrets — is far broader than what negotiated NDAs use, which set a finite period for ordinary information.
What a Low-Risk NDA Looks Like
- Information must be marked confidential in writing to qualify
- The four standard carve-outs plus a compelled-by-law exception
- A finite confidentiality period, with perpetual protection reserved for trade secrets
- Mutual obligations where both parties will exchange information
- The bond requirement preserved for injunctions
- Non-compete, IP-assignment, and exclusivity terms kept out of the NDA
Frequently Asked Questions
What is the difference between a unilateral and a mutual NDA?
A unilateral (one-way) NDA binds only the receiving party, while a mutual NDA binds both. When both sides will actually exchange information, negotiated NDAs are commonly mutual so the obligations and remedies run both ways.
What are the 'standard carve-outs' in an NDA?
The four carve-outs commonly found in negotiated NDAs exclude information that is already publicly available, already known to the receiver, independently developed without using the disclosed information, or rightfully received from a third party — plus an exception for disclosure required by law.
Can an NDA include a non-compete?
Some do — restrictive covenants and IP-assignment language are sometimes placed inside a document titled as an NDA. Negotiated confidentiality agreements commonly keep non-compete, non-solicit, and IP-assignment terms separate and address them on their own terms.
How long should a confidentiality obligation last?
Negotiated NDAs commonly set a finite period (often a few years) for ordinary information, with perpetual protection reserved only for trade secrets. An indefinite obligation covering every category of information is broader than the common practice.
What is a residuals clause?
A residuals clause lets the receiving party's people retain the general knowledge and skill they hold in unaided memory, so ordinary learning is not treated as a breach. Its absence is one of the missing protections we flag.
Is LiabilityScore™ legal advice?
No. LiabilityScore™ provides contract analysis and educational information. Reports describe what the contract says and identify clauses commonly modified in negotiated versions of similar contracts. LiabilityScore™ does not provide legal advice and does not recommend any particular action regarding your specific contract — the legal judgment is yours. For advice specific to your situation, especially for high-stakes agreements, consult a licensed attorney.
Related contract types
Takes less than 60 seconds. No credit card required.
As Seen In
