NDA in Germany: Template, Key Clauses and Local Law (2026)

What a German NDA does, and the law that shapes it A non-disclosure agreement (NDA), in German a Geheimhaltungsvereinbarung or Vertraulichkeitsvereinbarung, is a contract where one or both sides promise to keep shared information secret and use it only for an agreed purpose. In Germany an NDA matters on two levels. As a contract, it creates a direct confidentiality duty enforceable under the Civil Code (Burgerliches Gesetzbuch, BGB). As evidence, it is one of the main ways a company shows it took the protective steps required by the Trade Secrets Act (Gesetz zum Schutz von Geschaftsgeheimnissen, GeschGehG), which came into force in 2019 and implemented the EU Trade Secrets Directive 2016/943. The second point changed German practice. Before the 2019 Act, simply intending to keep information secret could be enough. Now the holder must show objective, appropriate measures, and the person claiming protection bears the burden of proving them. A signed NDA, together with access controls and labelling, is exactly that kind of measure. This article is general guidance, not legal advice. Have a German lawyer review an NDA before you rely on it. ## What local law requires in 2026 - Appropriate confidentiality measures (angemessene Geheimhaltungsmassnahmen). Under the Trade Secrets Act, information is only a protected trade secret if its holder took appropriate steps to keep it secret. Without measures, the statutory protection falls away. NDAs are a core measure, but only if they are in place before the information is shared and the circle of recipients stays small and controllable.

• An NDA proves your measures. Because the claimant must prove the measures in any dispute, well-drafted and well-timed NDAs are not just promises, they are evidence that the information was genuinely protected.
• Reverse engineering is lawful by default. The Act treats reverse engineering of a lawfully obtained product as permitted unless a contract forbids it. If you want to stop it, the NDA must restrict it expressly. German commentary recommends drafting that restriction as an individually negotiated clause rather than buried in standard terms, because standard terms (AGB) cannot easily override the statutory default.
• Statutory remedies. For a qualifying trade secret, the holder can claim an injunction to stop use or disclosure, destruction or recall of infringing goods, information about the breach, and damages.
• Contractual enforcement and penalties. Breach of the NDA is also a breach of contract. A German NDA commonly adds a contractual penalty (Vertragsstrafe) so the injured party can claim a fixed sum, though courts can review an unreasonable penalty, especially in standard terms. ## German NDA template Copy the block below and fill the bracketed fields. ``` NON-DISCLOSURE AGREEMENT (GEHEIMHALTUNGSVEREINBARUNG) This agreement is made on [DATE] BETWEEN: [PARTY A NAME], [address] AND [PARTY B NAME], [address] (each a "Party") 1. PURPOSE The Parties exchange information to [describe purpose] (the "Purpose"). 2. CONFIDENTIAL INFORMATION "Confidential Information" means non-public information disclosed by one Party, in any form, that is marked or clearly confidential, including trade secrets within the meaning of the Trade Secrets Act. 3. OBLIGATIONS The receiving Party will: keep the information secret; use it only for the Purpose; disclose it only to staff and advisers who need it and are bound by equal duties; and apply appropriate technical and organisational measures to protect it. 4. EXCLUSIONS The duties do not apply to information that is or becomes public without breach, was already lawfully known, is independently developed, or must be disclosed by law or authority (with notice where allowed). 5. NO REVERSE ENGINEERING The receiving Party will not reverse engineer, decompile or analyse any item disclosed to derive the Confidential Information. [Individually negotiated; delete if not wanted.] 6. TERM The agreement starts on the date above; the confidentiality duties last for [N] years after disclosure, and for trade secrets as long as they remain secret. 7. RETURN OR DESTRUCTION On request or at the end, the receiving Party returns or destroys the information and copies, keeping only what law requires. 8. CONTRACTUAL PENALTY For each culpable breach the Party in breach owes [AMOUNT], without prejudice to claims for further damages and an injunction. [A Vertragsstrafe; keep it proportionate.] 9. GOVERNING LAW German law applies. The ordinary courts have jurisdiction. Signed: Party A ____________ Party B ____________ Name / date Name / date

- **Obligations and measures (clause 3).** This clause does double duty. It sets the promise, and it records that the receiver applies appropriate technical and organisational measures, which supports the Trade Secrets Act requirement on both sides.
- **Reverse engineering (clause 5).** Because German law allows it by default, you must ban it expressly and, ideally, negotiate that clause individually rather than leave it in standard terms where it may not hold.
- **Contractual penalty (clause 8).** A Vertragsstrafe makes breach costly without proving the exact loss. Keep it proportionate, since a court can review an unreasonable penalty, particularly in standard terms. ## Red flags to avoid - Sharing information first and signing the NDA later, so the measure was not in place in time.
- No NDA or other measures at all, so the information never qualifies as a protected trade secret.
- A reverse-engineering ban hidden in standard terms, where it may be ineffective against the statutory default.
- An "all information is confidential" definition that a court may narrow or refuse to enforce.
- A penalty so high it is likely to be reviewed down, or none at all.
- An uncontrolled recipient circle, which undercuts both the NDA and the trade secret status. ## Where a contract workspace helps A template gives you a sound German NDA. The harder work is consistency and timing across many of them: making sure each NDA is signed before information is shared, that the definition and permitted-use clauses match the deal, that a reverse-engineering ban is present and individually negotiated where a product is involved, and that you can see when each NDA's duties expire. Drafting an NDA, checking it against the Trade Secrets Act reasonable-measures standard, and tracking when confidentiality terms lapse can sit in one AI workspace tuned to how your company shares information. [Adira](https://adiralaw.com) is built around that idea: it drafts from your template, models the NDA as linked clauses so it can flag a missing reverse-engineering ban or a penalty that reads as excessive, lets you edit in plain language, and keeps term and expiry dates on one timeline. Adira is India-first today, and deeper Germany-specific coverage is on its roadmap rather than a settled claim, so use it for drafting and review and keep a German adviser for the local-law call. The template above is enough to put a fair NDA in place on its own. Last verified October 2026.