Not All Secrets Travel the Same Way.
A founder pitching investors, a manufacturer onboarding a vendor, and an acquirer opening a data room are protecting fundamentally different risks. One template cannot serve all three. The right NDA begins with the right archetype.
The right NDA begins with the right question: what, exactly, are you protecting?
There is a seductive myth that an NDA is a commodity, one document, downloaded once, reused forever. It is the most expensive myth in commercial law. A founder pitching investors, a manufacturer onboarding a vendor, and an acquirer opening a data room are each protecting a different risk, moving in a different direction, against a different adversary.
Selecting the archetype is therefore the first act of drafting, not a preliminary to it. Get it right and every later clause has a job to do. Get it wrong, and you have a beautifully worded agreement protecting the wrong thing.

Twelve NDAs, twelve jobs.
Each archetype below is matched to a real commercial situation. The art is not in knowing they exist, it is in knowing which one your situation actually calls for.
Unilateral (One-Way) NDA
When only one party reveals secrets, a company briefing a consultant, a founder showing a prototype.
Only the disclosing party shares confidential information, and only the receiving party is bound. It is the simplest structure and the easiest to enforce, but it is dangerous when used in a relationship that is genuinely two-way, because it silently leaves the disclosing side’s own incoming exposure unprotected.
Bilateral (Mutual) NDA
When both sides will exchange sensitive information, joint ventures, partnerships, co-development.
Both parties disclose and both carry symmetrical obligations. It is the most common form in commercial dealings because it feels fair and accelerates trust. The drafting challenge is symmetry: obligations, carve-outs and remedies must genuinely mirror each other, or the “mutual” label hides a one-sided bargain.
Multilateral NDA
When three or more parties sit around the same confidential table, consortiums, multi-party deals.
A single instrument binds several parties, replacing a tangle of separate two-way NDAs. It is efficient, but it concentrates risk: a leak by any one party affects all, and the definition of who may share what with whom becomes the most negotiated provision.
Employee & Onboarding NDA
At hiring, and for sensitive roles handling IP, data, or strategy.
Confidentiality obligations embedded in the employment relationship. In India these must be drafted with acute awareness of Section 27 of the Indian Contract Act: negative covenants operating during employment are enforceable, but post-employment restraints that operate as restraints of trade are largely not. We separate protectable confidentiality from unenforceable non-compete.
Vendor, Supplier & Contractor NDA
When you push data, designs or specifications down your supply chain.
Protects information flowing to those who manufacture, service or support your business. The decisive clauses govern sub-contracting, onward disclosure, and return or destruction of materials at the end of the engagement, the points where supply-chain leaks actually occur.
Investor & Fundraising NDA
During capital raises, used selectively, and with realism.
A founder’s instinct is to protect the pitch. The commercial reality is that many institutional investors decline to sign NDAs at the first-meeting stage. We help founders understand where an NDA genuinely adds protection (detailed financials, technical deep-dives, data rooms) and where insisting on one simply signals inexperience, a crucial piece of buyer psychology.
M&A & Due Diligence NDA
Before a data room opens in any acquisition, investment or sale.
Governs the most concentrated disclosure of all, the entire inner life of a business handed to a potential acquirer who may walk away. Beyond confidentiality, these NDAs carry non-solicitation, standstill and “no obligation to proceed” provisions, and must contemplate the deal that does not close.
Technology, Source Code & IP NDA
When the secret is the product, algorithms, source code, formulae, datasets.
Here the confidential information is the crown jewel itself. These agreements demand surgical definitions, controlled-access protocols, escrow arrangements where appropriate, and a residual-knowledge clause drafted so narrowly that it cannot be used to launder the very IP it appears to protect.
Cross-Border NDA
When parties, data or servers sit in different jurisdictions.
Confidentiality that must survive jurisdictional friction. Governing law, seat of arbitration, enforceability of injunctions abroad, and, increasingly, data-transfer obligations under the DPDPA and foreign privacy laws all converge here. The wrong jurisdiction clause can make a perfect NDA practically unenforceable.
Standstill & Non-Circumvention (NCND)
When the asset to protect is a relationship or an introduction, not just data.
Used by intermediaries, brokers and dealmakers to prevent a counterparty from bypassing them to deal directly with an introduced party. Enforceability turns on precise definitions of the protected relationship and a reasonable, clearly-bounded duration.
Clinical & Pharma NDA
For trial data, formulations, and regulatory dossiers.
A specialised regime protecting some of the most valuable and sensitive information in commerce, often intertwined with personal health data, regulatory filings and multi-party research. Confidentiality must be reconciled with data-protection obligations and regulatory disclosure duties.
Government & Tender NDA
Within public procurement and confidential bids.
Confidentiality inside the procurement process, bid data, technical proposals, and pricing. These agreements must coexist with transparency obligations and statutory disclosure regimes, demanding careful scoping of what is genuinely confidential.
How we choose, and where most agreements go wrong.
What good selection looks like
- • Symmetry matched to the actual flow of information, not a default assumption.
- • A term calibrated to the commercial life of the secret, not an arbitrary number of years.
- • Carve-outs that anticipate compelled and regulatory disclosure before they happen.
- • A governing-law and forum clause that makes the remedy executable, not theoretical.
- • Confidentiality cleanly separated from unenforceable restraint-of-trade provisions.
Where most NDAs fail
- • A one-way NDA papering over a genuinely two-way relationship.
- • An overbroad definition that invites a court to strike the whole clause down.
- • A survival period that expires while the secret is still valuable.
- • Insisting on an investor NDA where it signals inexperience and stalls the round.
- • A residual-knowledge clause wide enough to swallow the entire agreement.
The Confidentiality Library
Five deep dives and a practice overview, a complete map of how confidentiality is built, negotiated, and defended.
The NDA Practice
A confidentiality architecture built to hold under negotiation, scrutiny, and the courtroom.
Read more The AnatomyAnatomy & Key Clauses
Every clause that decides whether your NDA protects you, or quietly fails the day you need it.
Read more Our MethodHow We Deal With NDAs
The TCL Framework applied to confidentiality, discovery, calibration, negotiation, execution, lifecycle.
Read more When It Matters MostBreach & Enforcement
Injunctions, damages, criminal remedies and cross-border enforcement when confidentiality is breached.
Read more The Privacy EraNDAs & the DPDPA
Where confidentiality meets the Digital Personal Data Protection Act, and why an NDA is no longer enough.
Read moreBefore the next secret leaves your hands, let us read the agreement.
Whether you are sharing a roadmap with an investor, opening a data room to an acquirer, or onboarding a vendor, the strength of your protection is decided before disclosure, not after. Speak to the AMLEGALS confidentiality team.