NDAs and Protecting Your Trade Secrets

You protect confidential business information mainly two ways: by getting the people you share it with to sign a non-disclosure agreement (NDA), and by actually treating the information like a secret in your day-to-day operations. Both matter. A signed NDA with no real safeguards behind it is weaker than you'd think, and strong safeguards with no NDA leave you without a clear paper trail. Do both, and you have real protection under both contract law and trade secret law.

What an NDA actually does

A non-disclosure agreement (also called a confidentiality agreement) is a contract where someone agrees not to share or use information you disclose to them outside of an agreed purpose. It's a promise about information, not about where someone can later work - that distinction matters, and we'll come back to it.

NDAs come in two basic shapes:

• One-way (unilateral): Only one party is sharing sensitive information, so only the other party makes confidentiality promises. Typical when you're pitching an idea to an investor, showing a prototype to a potential manufacturer, or bringing on a contractor who'll see your client data.
• Mutual (bilateral): Both sides will be sharing sensitive information, so both make promises. Typical in merger or acquisition talks, joint ventures, or a potential partnership where each side is opening its books to the other.

A reasonably drafted NDA usually covers: what counts as "confidential information," what the recipient is and isn't allowed to do with it, how long the duty lasts, and what's carved out (information the recipient already knew, information that becomes public through no fault of theirs, information they're legally required to disclose). NDAs are broadly enforceable across the country - they're a straightforward contract, and courts generally don't second-guess a business's right to keep its own information confidential the way they scrutinize a non-compete.

What makes something a legally protectable trade secret

Not everything you'd rather keep quiet qualifies as a "trade secret" in the legal sense. Under both federal law (the Defend Trade Secrets Act) and state trade secret law - nearly every state has adopted some version of the Uniform Trade Secrets Act - information generally has to meet two conditions:

1. It has independent economic value because it isn't generally known or readily figured out by people who could profit from it. A customer list built over years, a manufacturing process, a pricing algorithm, a supplier relationship, or source code can all qualify.
2. You've taken reasonable steps to keep it secret. This is the part small businesses most often skip - and it's the part that decides most trade secret lawsuits.

That second requirement is the practical takeaway: courts don't ask whether the information is theoretically valuable-because-secret. They ask whether you actually acted like it was a secret. If you handed it out freely, posted it on your public website, or never asked anyone to keep it confidential, a court is likely to find you didn't treat it as a trade secret - and it won't be protected even if it would have qualified otherwise.

There's no registration process for trade secrets, unlike a patent or trademark. Protection exists only as long as, and because, the information stays secret and you keep treating it that way.

Practical safeguards - what "reasonable steps" looks like

• Use NDAs before sharing sensitive information with employees, contractors, investors, manufacturers, or potential partners - not after.
• Limit access on a need-to-know basis; not every employee needs the client list, the formula, or the source code.
• Mark sensitive documents "confidential" and control who can copy, forward, or export them.
• Use passwords, access logs, and restricted folders for digital files; lock physical files and spaces.
• Put confidentiality obligations in employment agreements and contractor agreements, not just standalone NDAs.
• Have a process for when someone leaves - revoke access, remind them in writing of their ongoing confidentiality duty, and retrieve devices and files.
• Be consistent. A policy that exists on paper but isn't followed is weak evidence in court.

How NDAs differ from non-competes

An NDA restricts what someone can do with information. A non-compete restricts where someone can work - typically barring a former employee or seller of a business from working for a competitor or starting a competing business for some period of time in some geographic area. They're often used together but they are legally very different animals, and non-competes face far more legal pushback.

A federal rule that would have banned most employee non-competes nationwide was blocked by a federal court in 2024, and the Federal Trade Commission formally withdrew it in early 2026 rather than keep fighting for it in the courts - so there is currently no single nationwide ban. Instead, the picture is set state by state, and it has been changing quickly: some states prohibit employee non-competes outright or nearly outright, others allow them only for higher-earning employees, only for a limited time and geographic area, or not for certain professions at all, and some still enforce them fairly broadly. This varies by state and continues to change - check your state's current law, or ask a lawyer, before you rely on a non-compete or ask an employee to sign one.

NDAs don't carry that same baggage. Because they protect information rather than restrict someone's livelihood, they're enforceable in far more circumstances nationwide - though even an NDA needs to be reasonably specific about what's confidential to hold up well.

What to do

1. Identify what's actually a secret. Make a short list of the information in your business that has real value specifically because competitors don't have it - client relationships, formulas, processes, code, pricing strategy, supplier terms.
2. Put safeguards in place before you share it - access limits, marked documents, and a written policy - not after a problem happens.
3. Use an NDA any time you're about to disclose that information to someone outside a position of trust: investors, potential buyers, manufacturers, freelancers, contractors, and any employee who will see it.
4. Check your state's law before using a non-compete for employees, and understand that even where allowed, courts typically require it to be reasonable in scope, time, and geography.
5. Have a lawyer draft or review agreements that matter - a key hire's confidentiality and IP-assignment terms, a manufacturing or licensing NDA, anything tied to a sale of the business.
6. Act quickly if a breach happens. Document what was disclosed, when, and by whom, and talk to a business litigation attorney promptly - delay can weaken a trade secret claim.

For the mechanics of hiring and classifying the people who'll see this information - employee versus contractor, what belongs in an offer letter - see the site's guidance on hiring your first employee. If a dispute over stolen information turns into a lawsuit involving a business that's since gone under, that's a different track; see the site's bankruptcy coverage for how business debts and closures are handled.

This article is general information, not legal, tax, or financial advice.