A non-disclosure agreement is the document you sign before you share anything valuable — a business idea, a customer list, source code, a product roadmap — with someone who could walk away and use it. It's the most common commercial contract in startups and the most commonly botched, because people download a template, fill in two names, and assume they're protected. A weak NDA is worse than none: it gives false confidence while leaving the gaps that actually matter wide open. Here are the clauses that make an NDA enforceable in India, and the one provision people wrongly think they can bolt on.
Quick answer: An NDA protects confidential information shared between parties. The clauses that matter most are a precise definition of "confidential information," the exclusions (what isn't covered), the permitted use and obligations, the term of confidentiality, return/destruction of information, and remedies including injunctions. NDAs can be mutual or one-way. A confidentiality obligation is enforceable in India, but a broad post-employment non-compete is generally void under Section 27 of the Indian Contract Act — don't rely on an NDA to do a non-compete's job.
What an NDA does
An NDA (also called a confidentiality agreement) is a contract in which one or both parties agree not to disclose or misuse information shared during a relationship — a hire, an investment talk, a vendor engagement, a partnership discussion. Its job is to let you share enough to do business without losing control of what makes your business valuable.
Mutual vs one-way NDAs
- One-way (unilateral): only one party discloses confidential information and the other agrees to protect it — common when you brief a contractor or pitch an investor.
- Mutual (bilateral): both sides share confidential information and both are bound — common between two companies exploring a partnership.
Pick the one that matches the actual flow of information; signing a one-way NDA when you'll also be sharing your own secrets leaves you exposed.
The clauses you can't skip
- Definition of confidential information — specific enough to be meaningful (technical data, business plans, customer lists, pricing, code), ideally covering written, oral, and visual disclosures.
- Exclusions — information already public, already known to the recipient, independently developed, or rightfully received from a third party isn't covered. Courts expect these.
- Permitted use — the information may be used only for the stated purpose, nothing else.
- Obligations of the recipient — to keep it secret, limit access to need-to-know personnel, and not copy or reverse-engineer.
- Term — how long the confidentiality lasts (often 2–5 years, or indefinitely for true trade secrets).
- Return or destruction — on termination or request, the recipient returns or destroys the information.
- Remedies — a right to seek an injunction (because damages alone rarely undo a leak), plus indemnity for losses.
- Governing law and jurisdiction — which state's courts apply.
- Carve-out for legally compelled disclosure — e.g., under a court order, with notice to the disclosing party.
The non-compete trap
This is where Indian NDAs go wrong. People bundle in a clause stopping the recipient from competing or working for a rival after the relationship ends. Under Section 27 of the Indian Contract Act, an agreement that restrains someone from exercising a lawful profession, trade, or business is void — so a broad post-employment non-compete is generally unenforceable in India (restraints during employment, and in the genuine sale of a business's goodwill, are treated differently). Confidentiality survives; a sweeping non-compete usually doesn't. Don't let a template lull you into thinking otherwise.
Making it enforceable
A confidentiality obligation is enforceable when it's reasonable, specific, and supported by consideration. Keep the definition tight (over-broad NDAs invite challenge), make the purpose explicit, include the injunction remedy, ensure the document is properly signed (and stamped per your state), and keep the term reasonable. The narrower and clearer it is, the more likely a court enforces it.
Worked example
A startup is about to share its codebase and customer data with a freelance developer. Instead of a generic one-pager, it uses a one-way NDA that: defines "confidential information" to include code, architecture, and customer data; excludes anything public or independently known; limits use strictly to the agreed project; requires deletion of all copies on completion; gives the startup the right to an injunction if the developer leaks or reuses the data; and is governed by the courts of its home city. It deliberately leaves out a post-employment non-compete, relying instead on enforceable confidentiality. When the project ends, the data is returned and the startup's secrets stay secret.
Common mistakes
- A vague definition of confidential information that protects nothing.
- No exclusions, which courts may read in anyway and which signal sloppy drafting.
- Relying on a non-compete that Section 27 likely makes void.
- No injunction remedy, leaving you with only slow, inadequate damages.
- Forgetting return/destruction, so copies linger after the deal ends.
Checklist
- Choose mutual or one-way to match the information flow.
- Define "confidential information" precisely, with exclusions.
- Limit use to a stated purpose and impose clear obligations.
- Set a reasonable term and a return/destruction obligation.
- Include the right to an injunction and indemnity.
- Don't rely on a post-employment non-compete; add governing law and sign/stamp properly.
Frequently asked questions
Is an NDA legally enforceable in India? Yes, a well-drafted confidentiality obligation is enforceable, provided it's reasonable, specific, and properly executed.
What's the difference between a mutual and one-way NDA? A one-way NDA protects information disclosed by a single party; a mutual NDA binds both parties because both share confidential information.
Can an NDA stop an employee from joining a competitor? Generally no. A broad post-employment non-compete is void under Section 27 of the Indian Contract Act; only confidentiality reliably survives.
How long should an NDA last? Commonly 2–5 years, though genuine trade secrets can be protected indefinitely.
What remedy do I have if someone breaches an NDA? You can seek an injunction to stop further disclosure and claim damages or indemnity for losses, if the NDA provides for them.
This article is for legal awareness and education only and is not legal advice. Contract enforceability is fact-specific; consult a qualified advocate before relying on an NDA.