How to Review an NDA in Five Minutes

You get an NDA before almost every serious business conversation — a partnership call, a diligence process, a vendor pilot. Most are boilerplate, and most are fine. But "most" is not "all," and the terms that bite are usually buried in ordinary-looking paragraphs. Here is how to read one quickly without missing the parts that matter.

This is a practical guide, not legal advice. For anything high-stakes, have a lawyer review it. But for the routine mutual NDA that lands in your inbox on a Tuesday, this five-minute pass will tell you whether to sign, redline, or escalate.

1. Is it mutual or one-way? (10 seconds)

The first thing to check is direction. A mutual NDA protects both sides and is the norm when both parties will share information. A one-way (unilateral) NDA protects only the disclosing party. If you will be sharing anything sensitive but the agreement only protects them, that is your first redline.

2. How is "Confidential Information" defined? (60 seconds)

This is the heart of the document. Look for two things:

• Breadth. Is confidential information anything marked confidential, or literally everything exchanged? An overly broad definition ("all information disclosed, in any form") is hard to comply with because you cannot always tell what is covered.
• Carve-outs. A fair NDA excludes information that is already public, already known to you, independently developed, or lawfully received from someone else. If those standard exceptions are missing, add them.

3. What can you actually do with the information? (45 seconds)

Find the permitted use clause. The information should be usable only for the stated purpose — evaluating the deal, performing the pilot, whatever brought you together. Watch for language that is either too narrow (so narrow you technically breach it by doing normal work) or silent (so you have no defined right to use it at all).

4. How long does it last? (30 seconds)

Two clocks matter: the term of the agreement (how long you can exchange information under it) and the survival period (how long the confidentiality obligation lasts after that). Two to five years is typical for ordinary business information. Perpetual confidentiality is a red flag for anything but genuine trade secrets — you do not want to babysit an obligation forever over a routine sales deck.

5. What are you required to do — and to give back? (45 seconds)

Check the obligations: the standard of care ("reasonable care," not "absolute security"), whether you can share with employees and advisors on a need-to-know basis, and the return-or-destroy clause. Make sure you are allowed to keep one archival copy for legal and compliance purposes, and that your routine, automated backups do not put you in breach the moment the deal ends.

6. The red-flag clauses — slow down here (60 seconds)

These are the terms that turn a routine NDA into something you should not sign on autopilot:

• Non-solicitation or non-compete language hiding inside an NDA. A confidentiality agreement should keep secrets, not restrict who you can hire or what business you can pursue.
• Assignment of IP or ideas. An NDA protects information; it should not silently transfer ownership of anything you create.
• Uncapped indemnification or liquidated damages. A fixed penalty per breach, or an open-ended duty to cover the other side's losses, deserves real scrutiny.
• Governing law and venue in an inconvenient or unexpected jurisdiction.

If you see any of these, stop the five-minute clock. This is the moment to redline or bring in counsel.

7. The mechanics (20 seconds)

Confirm the parties are the correct legal entities, the signature blocks are right, and there is no missing exhibit or referenced schedule. An NDA that references "the terms in Exhibit A" with no Exhibit A attached is not ready to sign.

The five-minute read, in order

1. Mutual or one-way?
2. Definition of confidential information — broad? carve-outs?
3. Permitted use.
4. Term and survival period.
5. Obligations and return-or-destroy.
6. Red-flag clauses (non-solicit, IP assignment, uncapped liability, odd venue).
7. Parties and signatures.

Run those seven in order and you will have a defensible read on almost any routine NDA in the time it takes to finish a coffee.

Where LegalScribe fits

This checklist is exactly the kind of structured read software is good at. Paste an NDA into LegalScribe and it surfaces each of these clauses, flags the missing carve-outs and the red-flag terms, and gives you a plain-language summary of what you are agreeing to — so your five-minute review starts from a map instead of a wall of text. You still make the call. You just make it faster, and you are far less likely to miss the clause that matters.