Free Mutual NDA Template — Fill, Sign, Done
A real, lawyer-style mutual non-disclosure agreement you can fill out in your browser. No upload, no account, no watermark — and we literally cannot read what you typed.
Drafted by PDF Edit's templating team — plain-English mutual NDA, US-style structure.
Two parties or one? Pick the right NDA
Most NDAs fall into one of two shapes. The template on this page is the mutual version — easy to convert to one-way by deleting the symmetric obligations on the disclosing-only side.
Mutual NDA (two-way)
Both parties expect to share confidential information. Each side is bound to keep the other's information secret.
- Investor pitches and due diligence
- Partnership and joint-venture talks
- M&A discussions, technology licensing
- Vendor evaluation where you'll share roadmap or specs
One-way NDA (unilateral)
Only one side will be sharing. The receiving party is bound; the disclosing party isn't.
- Hiring an employee or contractor
- Engaging a consultant or freelancer
- Sharing source code with an audit firm
- Pitching to a strategic acquirer (you share, they don't)
An NDA you can fill out without uploading the NDA.
Every other "free NDA" website asks you to upload your draft, type into their server-side form builder, or hand over an email address before you can download. Your confidential agreement — full of party names, deal terms, and trade-secret signals — sits on someone else's database.
PDF Edit doesn't work that way. The blank NDA template loads from our CDN once. From that moment, every keystroke, every signature, every saved file stays inside your browser. The bytes that make up your filled NDA never travel back to us. We have no copy. We cannot read it. We cannot lose it in a breach. We cannot be subpoenaed for it — because we never had it.
F12 to open DevTools, click the Network tab, fill out the NDA, sign it, save it. You will see zero outbound requests carrying your data. Compare with any other free NDA tool — they all upload before you can edit.
Anatomy of the NDA — what every clause does
A non-disclosure agreement is twelve short clauses doing very specific work. Here's what each one is for, in plain English.
-
1
Confidential Information
Defines what counts as confidential. Standard practice is "any non-public information, marked or reasonably understood as confidential." Avoid the trap of listing every type explicitly — courts may treat anything not on your list as non-confidential.
-
2
Obligations of the Receiving Party
Spells out the four things the receiving party must do: hold information in confidence with reasonable care, use it only for the agreed purpose, restrict access to need-to-know personnel under written confidentiality, and not disclose without consent.
-
3
Exclusions
Lists what doesn't count as confidential — typically: information already known, information that becomes public through no fault of the receiver, independently developed information, and information lawfully received from a third party. Without this clause, the receiving party can't safely operate at all.
-
4
Compelled Disclosure
Handles the awkward case where a court or regulator orders disclosure. The receiving party must give prompt notice (so the disclosing party can fight the order) and disclose only the minimum required.
-
5
Term
Two clocks run here: a "disclosure period" during which information may be shared (often 1-3 years), and a "confidentiality term" during which the receiver must keep secrecy after the disclosure period ends (often 3-5 years). Trade secrets carve out indefinitely.
-
6
Return or Destruction of Materials
When the relationship ends, the receiver must return or destroy everything containing confidential information, with one archival copy permitted in legal files. This stops the receiver from "I'll just keep it for reference" excuses.
-
7
No License; No Obligation
Sharing information doesn't transfer any IP rights or oblige either side to do business together. This clause stops the receiver from later claiming an implied license or partnership.
-
8
Remedies
Acknowledges that money damages may not be enough — a leaked product roadmap can't be unleaked. The disclosing party may seek an injunction to stop the breach, in addition to monetary relief.
-
9
Governing Law
Picks which jurisdiction's law applies. Delaware, New York, and California are common for U.S. NDAs because they have well-developed case law on trade secrets and contract enforcement.
-
10
Entire Agreement; Amendments
Says this NDA is the complete agreement — no side handshakes, no email promises override it. Any future change must be in writing, signed by both parties.
-
11
Severability; Waiver
If a court strikes one clause, the rest still hold. And not enforcing a breach once doesn't mean you've waived your rights for next time.
-
12
Counterparts; Electronic Signatures
Each side can sign their own copy and they together count as one fully-executed agreement. Electronic signatures (under U.S. ESIGN, EU eIDAS, etc.) have the same legal effect as ink.
When to use it, when to skip it, and what people get wrong
Reading this before you sign saves a lot of friction later.
Use one when…
- You're sharing a product roadmap, financial model, or unreleased code with a potential investor or partner.
- A contractor will see customer data, internal credentials, or proprietary designs.
- You're discussing M&A, a strategic partnership, or technology licensing.
- Both sides will exchange sensitive information — use the mutual version on this page.
- You want a paper trail in case the other party later misuses what you shared.
Probably skip it when…
- You're at a public conference or pitching publicly — anything you say is already not confidential.
- The other party is a top-tier VC or strategic acquirer and refuses NDAs as policy. Most early-stage VCs don't sign them, and that's normal.
- You want to enforce a non-compete or non-solicit — those need a separate agreement with separate consideration.
- You're trying to silence whistleblowers or block discussion of harassment — many jurisdictions void such NDAs.
- The information you'd be protecting is trivial enough that the friction of an NDA isn't worth it.
Common mistakes
- Signing the NDA after you've already shared the information — courts may rule it can't retroactively cover what's already public.
- Vague Purpose clause ("to discuss business") — narrow it to the specific deal so use beyond that scope clearly breaches.
- Confidentiality term too long (10+ years) — courts in some states will refuse to enforce overbroad terms.
- Forgetting to define "Affiliates" — the receiving party's parent company, subsidiaries, or future buyers may end up bound (or not) in unexpected ways.
- No carve-out for whistleblower / lawful disclosure protection — federal DTSA requires this in U.S. NDAs.
What's intentionally NOT in this template
A clean NDA is enforceable across the widest range of jurisdictions. We've intentionally kept this template confidentiality-only, so it stays portable. If you need any of the below, use a separate agreement drafted by a lawyer:
- Non-compete / non-solicit clauses — different consideration rules, banned outright in California and curtailed nationwide; need their own agreement.
- IP assignment — work-product ownership belongs in an Employment Agreement or Contractor Agreement, not in an NDA.
- Indemnity — most NDAs don't carry indemnity. If you're worried about third-party claims arising from disclosure, talk to counsel.
- HIPAA Business Associate Agreement — if you're handling protected health information, a generic NDA is not enough; you need a BAA.
- GDPR Data Processing Agreement — if EU personal data is involved, a DPA is required separately.
- Securities/Reg-D investor confidentiality — pre-public-offering disclosures have additional SEC obligations beyond a standard NDA.
This is a template, not legal advice. The NDA on this page reflects standard U.S./English-language commercial NDA structure and is suitable as a starting point for most business situations. It is not a substitute for a lawyer reviewing your specific deal, jurisdiction, or industry. For high-value contracts, regulated data, employment relationships in California, cross-border deals, or any situation where the cost of a leak would be catastrophic — have a qualified attorney review the final document before you sign. PDF Edit makes no warranty as to the legal effect or enforceability of this template in any specific case.