How to Review an NDA in India: A Clause-by-Clause Checklist

An NDA, a non-disclosure agreement, is a promise wrapped in a contract: whatever gets shared during a conversation, a deal, or a job will not be used or passed on outside an agreed purpose. It sounds simple, and most people sign one without reading past the first paragraph, a mistake, since an NDA is one of the few contracts a non-lawyer is routinely asked to sign or send on their own, under time pressure, with no review. This guide (published by Adira, which makes contract review and CLM software, so we have a commercial stake in you getting good at this, but the guide stands on its own) walks through what an NDA does, clause by clause, the red flags common in Indian NDAs, a printable checklist, and the two execution steps Indian teams skip most.

What this contract actually does

An NDA does three jobs. It defines what counts as "Confidential Information." It restricts what the receiving party can do with it. And it gives the disclosing party a way to act, usually an injunction plus damages, if that restriction is broken. Nothing else: it does not transfer ownership of anything, does not stop the other side from competing with you (a non-compete, a weaker tool under Indian law), and does not by itself create a trade secret, since India has no trade secrets statute. The NDA is the entire fence: drafted loosely, there is no separate statutory backstop behind it, unlike in the US or EU.

NDAs come in two shapes. A unilateral NDA binds only the receiving party, used when information flows one way: an employer briefing a new hire, a startup pitching an investor, a company sharing a client list with a vendor. A mutual NDA binds both sides, used whenever both will disclose something sensitive: a joint venture, a due-diligence process, a partnership where each side shares pricing or technical detail. Signing a unilateral NDA when the deal is actually mutual is a common, avoidable mistake: the party asked to sign gets no protection for what it discloses in return.

The business deal first

Before reading a single clause, work out what you are actually protecting, and for how long. A pre-funding NDA needs to cover financials, cap table detail, and roadmap, usually just for the fundraising conversation plus a buffer. A pre-acquisition NDA needs due-diligence material specifically covered, and usually a longer survival period, since the risk can outlast the deal by years. An employment NDA is really about know-how absorbed by doing the job, so it should say plainly what stays the employee's own skill versus what is genuinely the company's.

A generic template used for every situation is how you end up with a mutual-style document signed unilaterally, or perpetual confidentiality bolted onto a routine vendor chat that never needed it. Match the shape to the deal first.

Clause by clause: what to check

Definition of Confidential Information

This clause decides everything else. A workable definition is objective and checkable: information marked confidential, or information a reasonable person would understand to be confidential from its nature and the circumstances of disclosure. An unlimited definition, "any information disclosed by either party," sounds protective and is actually weaker, since it covers so much that almost nothing is provably outside it, making the whole clause harder to enforce with a straight face. Our companion page on confidentiality clauses and NDAs goes deeper into how Indian courts and the Contract Act treat this definition.

Exclusions and carve-outs

Four exclusions should appear in nearly every NDA: information already public through no fault of the receiving party, already known to it before disclosure, independently developed without reference to what was shared, and lawfully received from a third party with no confidentiality string attached. Missing these, the clause technically covers information the receiving party could never realistically avoid knowing.

Term and survival

Does confidentiality end when the NDA ends, or survive for a stated period after? Most commercial NDAs survive 2 to 5 years past termination; trade secrets sometimes survive as long as the information stays secret. Silence on survival is usually read as the obligation dying with the contract, rarely what the disclosing party wanted. See survival clauses for how this interacts with the rest of the document once it ends.

Permitted disclosures

A workable NDA lets the receiving party share information with employees, contractors, and advisors who genuinely need it, each bound to a standard at least as strict as the NDA. It should also carve out disclosure compelled by a court or regulator, with notice to the disclosing party first where lawful. Without this, a subpoena puts the receiving party in an impossible spot: break the NDA, or defy a court order.

Return or destruction of information

At the end of the relationship, or on request, the receiving party should return or destroy Confidential Information, including copies, and confirm this in writing. Watch for two gaps: no compliance deadline, and no exception for copies kept only in routine legal or regulatory backups, which should be acknowledged rather than left as a technical breach waiting to happen.

No licence granted

A short but important line: receiving Confidential Information grants no licence, right, or ownership beyond the stated purpose. Without it, ambiguity creeps in over whether reviewing a prototype or source code implicitly grants usage rights. It should not, and the clause should say so.

Remedies and injunction

Money alone rarely fixes a leak; once information is out, it is out. A properly drafted NDA states that damages may be inadequate and that the disclosing party can seek an injunction, generally available under the Specific Relief Act, 1963, without first proving a rupee loss. Even where the NDA itself is weak, Indian courts have stepped in on equitable grounds. In John Richard Brady v Chemical Process Equipments (Delhi High Court, AIR 1987 Delhi 372), the plaintiffs had shared confidential drawings for a fodder production unit, entrusted for a limited purpose; the defendants used it as what the court called a "spring-board" to build competing machines. The court restrained them, applying the equitable "breach of confidence" doctrine, holding this protection does not depend on an implied contract at all. See the judgment on Indian Kanoon. A real backstop, but harder to win than a straight contract claim, and no reason to skip drafting the NDA properly.

Governing law and jurisdiction

Two separate questions, often confused: governing law decides which law interprets the contract; jurisdiction decides which court hears a dispute. For two Indian parties in a domestic deal, Indian governing law is the norm; a foreign law with no real connection invites challenge. See governing law clauses and jurisdiction clauses for the drafting mechanics and what Section 28 of the Contract Act allows.

Red flags in an NDA

Normal	Red flag	Why it matters
NDA shape matches the deal: mutual when both sides disclose	Unilateral NDA used for a two-way exchange	The signing party gets zero protection for what it shares back
Survives a stated period, commonly 2-5 years	No survival clause, or silence on post-termination	Reads as ending with the contract, right when a relationship sours
Standard carve-outs present	No carve-outs at all	Covers information the other side could never avoid knowing
Time-bound confidentiality matched to sensitivity	Perpetual confidentiality on everything, however trivial	Courts are wary of enforcing promises with no commercial logic
Compelled-disclosure exception with notice	No exception for court or regulator orders	Direct conflict between the NDA and a legal obligation
Return/destruction with a clear deadline	"Upon request," no deadline, no written confirmation	Becomes an argument at the worst possible moment
Stamped for the state of execution, at signing	Stamping never checked, or a nominal wrong value used	Inadmissible in evidence under Section 35 until cured
Signed by someone with actual authority	Signed with no evident authority to bind the entity	Raises a real question of whether the entity is bound
Confidentiality tied to legitimate business information	Used to stop pay discussion or reports of wrongdoing	A red flag on intent, increasingly scrutinised by regulators

Bad clause, better clause

Bad: "The Receiving Party shall keep all information disclosed by the Disclosing Party confidential and shall use it only as the Receiving Party deems appropriate."

What is wrong: "as the Receiving Party deems appropriate" is not a purpose limitation at all; it lets the receiving party decide its own permitted use, which defeats the point of an NDA.

Better: "The Receiving Party shall use Confidential Information solely for the purpose of evaluating and negotiating [the proposed transaction/engagement] (the 'Permitted Purpose') and for no other purpose. The Receiving Party may disclose Confidential Information only to its employees, officers, contractors, and professional advisors who have a genuine need to know it for the Permitted Purpose and who are bound by confidentiality obligations at least as protective as those in this Agreement. Any use or disclosure outside the Permitted Purpose requires the Disclosing Party's prior written consent."

What changed: the purpose is named and fixed, the circle of permitted recipients is defined and bound to an equivalent standard, and anything outside that requires consent, closing the gap the bad version left wide open.

The printable NDA review checklist

1. Mutual or unilateral, and does that match how information will actually flow?
2. Both parties' full legal names, entity types, and signatory authority correct?
3. A specific Permitted Purpose stated, not left to either party's discretion?
4. "Confidential Information" defined objectively (marked, or reasonably understood as such)?
5. Four standard carve-outs present: public domain, already known, independently developed, lawfully received?
6. Disclosure to employees, contractors, and advisors permitted, each bound to an equivalent standard?
7. Compelled-disclosure exception, with notice to the other party where lawful?
8. Term or survival period stated, not silent?
9. A residuals clause covering employees' unaided memory?
10. Return or destruction required, with a deadline and written confirmation?
11. Clause confirms no licence or ownership right is granted by disclosure?
12. Remedies clause allows injunctive relief, not just damages?
13. Governing law is Indian law, for a wholly domestic deal, and jurisdiction names a court with a real connection?
14. Confidentiality reasonably scoped, not perpetual across everything disclosed?
15. Execution date filled in and the document properly stamped for the state of execution?
16. Notices clause gives a working address, and an entire-agreement clause is present?
17. If it also restricts competing or soliciting staff, is that a separate clause, not smuggled into "confidentiality"?
18. Counterparts and electronic signature expressly permitted?

India execution notes: stamping and the trade secret gap

Two Indian-specific facts change how much an NDA is worth in a dispute, both easy to miss because the document looks complete on the page.

First, an NDA is liable to stamp duty like any other agreement, generally charged under the residuary "agreement" category in the relevant state's stamp schedule, since rates are set state by state. Under Section 35 of the Indian Stamp Act, 1899, an instrument chargeable with duty "shall [not] be admitted in evidence for any purpose... unless such instrument is duly stamped." Plainly: an unstamped or under-stamped NDA is not void, but can be refused as evidence in court until the deficient duty and a penalty are paid, curable, but exactly the wrong moment to discover it, mid-dispute, chasing an urgent injunction against a leak. Our companion page on whether an unstamped agreement is valid in India covers admissibility, the cure process, and the Supreme Court's 2023 ruling on unstamped arbitration clauses.

Second, India has no standalone trade secrets statute, unlike the US Defend Trade Secrets Act or state Uniform Trade Secrets Act regimes. The NDA itself, not a background statute, does essentially all the protective work, backed only by the equitable breach-of-confidence doctrine as a fallback. A loosely drafted NDA in India is not "probably fine because the law backs it up." There is very little law backing it beyond the contract you signed.

A test you can run right now: open your last NDA and search for "perpetual." If it sits next to the confidentiality obligation with no carve-out and no stated survival period, that is a specific, fixable problem. Mark it up for free, clause by clause, in Weave, before you send it back for negotiation.

US and global contrast

In the US, confidentiality protection does not rest on the NDA alone. The Defend Trade Secrets Act, 2016 gives trade secret owners a federal cause of action independent of any contract, alongside state statutes based on the Uniform Trade Secrets Act. A weak US NDA still sits on a statutory floor. India has none. If your reference point is US practice, recalibrate: here, the drafting is close to the entire story.

When a lawyer is actually worth it

This guide gets most routine NDAs, a vendor conversation, an early investor chat, a standard employment NDA, to a defensible state on your own. A lawyer earns their fee past that: an NDA guarding source code or a dataset that is your actual moat; one ahead of an acquisition where the other side's counsel has already redlined it; a cross-border NDA stacking data-transfer questions on ordinary confidentiality; or a suspected breach where you are deciding whether to seek an injunction.

FAQ

Do I need a lawyer to sign a simple NDA? Not usually, for a routine vendor, investor, or employment NDA that follows the checklist above. Get a lawyer involved once real trade secrets, source code, an acquisition, or a cross-border element is in play, or once you suspect a breach.

Is a mutual NDA always better than a unilateral one? Not automatically; it depends on who is actually disclosing what. A unilateral NDA is correct, and simpler, when only one side shares sensitive information. Using it for a genuinely two-way exchange leaves one party unprotected for what it discloses.

Does signing an NDA create a trade secret in India? No. India has no trade secrets statute, so an NDA does not create a special statutory category of protected information. It creates a contractual, and sometimes equitable, obligation not to misuse what was shared. The protection is only as strong as the drafting.

What happens if my NDA was never stamped? Under Section 35 of the Indian Stamp Act, 1899, an unstamped or under-stamped NDA is not void, but can be refused as evidence in court until the deficient duty and any penalty are paid. Usually curable, but the delay lands exactly when you need the document fastest.

Can an NDA also stop someone from working for a competitor? Not on its own, and it should not try to. Confidentiality restricts use of information; a non-compete restricts taking a job at all, and Indian courts treat most post-employment non-competes as void under Section 27 of the Contract Act. Do not let confidentiality quietly do a non-compete's job.

How long should confidentiality obligations last after the NDA ends? Commonly 2 to 5 years for general business information, sometimes longer for genuine trade secrets. A blanket "forever" clause across everything disclosed is a red flag, not a strength, and courts are often reluctant to enforce it literally.

This guide gets you to a well-drafted, properly stamped NDA that matches your deal. It does not tell you whether a specific clause will hold up if tested in your situation, that depends on the facts and how a court reads the document, and is not legal advice. Talk to a lawyer before you rely on, sign, or contest an NDA in a live negotiation or dispute.