What makes an NDA risky?
A non-disclosure agreement can look short and harmless while still shifting leverage in one direction. The most important NDA red flags are usually not dramatic; they are broad definitions, missing exceptions, forever obligations, and remedies that are stronger for one party than the other.
The confidential information definition is too broad
An NDA should protect real non-public business information. Watch for language that sweeps in everything you see, hear, create, or already know. That can make ordinary work conversations risky even when no trade secret is involved.
What to ask for: Limit confidentiality to marked, disclosed, or clearly identified non-public information that you receive from the other party.
Only one side gets protection
If both parties will share ideas, client details, pricing, technical notes, or consulting materials, a one-way NDA can feel one-sided fast. The other party gets protection while your information is exposed.
What to ask for: Ask for a mutual NDA when both sides are sharing sensitive information.
The duration never ends
Some sensitive information should stay confidential for a long time, but a blanket forever term can be unreasonable for routine business information. It may also create obligations that outlast the practical value of the information.
What to ask for: Use a fixed confidentiality period for ordinary business information, with longer protection only for true trade secrets.
There are no carve-outs for public or already-known information
A strong non-disclosure agreement review checklist should confirm that you are not liable for information already public, independently developed, received from someone else, or already known before the discussion.
What to ask for: Add standard carve-outs for public information, prior knowledge, independent development, and lawful third-party disclosure.
The NDA quietly restricts your future work
Some NDAs blur into non-competes by limiting work with competitors, similar clients, or an entire industry. For consultants, that is one of the biggest consulting contract red flags because it can block your pipeline without extra pay.
What to ask for: Remove disguised non-compete language or narrow it to specific accounts, projects, and a short time period.
Injunctive relief is one-sided
Injunctive relief means the other side can ask a court to stop you quickly if they claim a breach. It is common in NDAs, but one-sided wording can give them fast remedies while leaving you with slower, weaker options.
What to ask for: Make remedies mutual or tie emergency relief to proven misuse of confidential information.
Penalties and damages are automatic
Be careful with clauses that set a fixed penalty, uncapped damages, legal-fee shifting, or liability for indirect losses. A small accidental disclosure should not create a financial risk wildly larger than the deal itself.
What to ask for: Cap liability, remove penalty language, and limit responsibility to direct losses caused by an actual breach.
Return and deletion obligations are impossible to follow
An NDA may require you to return or delete every copy of confidential information immediately. That can conflict with backups, email archives, legal records, accounting files, or platform retention you cannot control.
What to ask for: Add practical exceptions for archival backups, legal compliance, and records retained under normal business systems.
Quick NDA review checklist
Before you sign, make sure each answer is clear from the document itself rather than a verbal promise or email thread.
- Scope: Is confidential information defined narrowly enough to understand what is protected?
- Mutuality: If both sides share information, does the NDA protect both sides?
- Duration: Does routine information expire after a reasonable period?
- Carve-outs: Are public, already-known, independently developed, and third-party materials excluded?
- Work freedom: Does the NDA avoid disguised non-compete or client restriction language?
- Remedies: Are injunctions, penalties, fees, and damages balanced and proportionate?
- Operations: Can you realistically return, delete, archive, and disclose records when legally required?
NDA red flags often travel with consulting contract red flags
If the NDA is attached to a consulting agreement, review both documents together. A narrow NDA can still become risky if the main contract adds broad indemnity, ownership transfers, non-solicit terms, or vague payment milestones. For a broader review, see our freelance contract red flags guide.
Review the NDA before leverage disappears
NDAs are usually signed early, when everyone wants to move quickly. Upload yours to ContractScan, get a safety score, and see which clauses deserve pushback before the conversation gets harder.
Not legal advice. For high-value deals, employment restrictions, trade secrets, or regulated data, use this as triage and then involve a licensed attorney.