How to review an NDA without missing what matters
Most NDAs are boilerplate wrapped around five decisions that actually matter. The boilerplate is safe to skim. The five decisions are not, and they're usually spread across different sections, which is exactly why people miss one.
1. Who is actually bound
Check whether the agreement is mutual (both sides share confidential information and both are bound) or one-way (only one side discloses, and only the other side is restricted). This sounds obvious, but a “mutual” NDA sent to you by the other party sometimes has asymmetric obligations buried in the definitions. Read the defined terms for Disclosing Party and Receiving Party before you read anything else, and confirm they actually apply to both sides the way the title implies.
2. What counts as Confidential Information
This definition decides everything downstream. A narrow definition (information marked confidential in writing, disclosed within a specific window) protects less than a broad one (anything disclosed, regardless of how it's marked). Neither is automatically wrong, but you should know which one you signed. If you're the party sharing information verbally, in a meeting, or over email, a “must be marked confidential” requirement can leave real information unprotected.
3. The carve-outs
Every NDA excludes some categories from protection, and the standard ones are reasonable: information that was already public, information the receiving party already had, information independently developed without reference to the disclosure, and information required to be disclosed by law. Read this section for anything beyond the standard four. A carve-out for information disclosed to “affiliates” or “advisors” without a confidentiality requirement of their own is a real gap, not boilerplate.
4. How long it lasts
Look for two different numbers here, not one: how long the agreement itself runs, and how long the confidentiality obligation survives after it ends. Some information (trade secrets, in particular) is sometimes carved out to survive indefinitely, while everything else expires after a set term, commonly two to five years. If the survival clause doesn't distinguish between categories, ask yourself whether that's actually what both sides intended.
5. What happens if it's breached
Most NDAs include a clause acknowledging that a breach causes “irreparable harm” and that the non-breaching party can seek an injunction without having to prove monetary damages first. This is standard and usually fine. What's worth noticing is whether the agreement also includes an indemnification clause, or caps liability at some amount, since that changes what actually happens in a real dispute far more than the injunction language does.
A faster way to do this
Reading for these five things by hand works, but it's slow across a long agreement, and it's easy to lose your place. SourceBacked's contract analysis action reads an uploaded NDA once and pulls out the parties, the definition of confidential information, the carve-outs, the dates, and the clauses worth a second look, each one tied back to the exact section it came from so you can go verify it yourself. It's a faster first read, not a replacement for judgment, and it says so.