The duration of a Non-Disclosure Agreement is one of the most important — and most commonly neglected — clauses in any NDA. Set it too short and confidential information loses protection before it's no longer sensitive. Set it too long and the clause may be challenged as unreasonably broad. Here's how to get it right.

Why Duration Matters

An NDA without a clear duration clause has a problem: it may last indefinitely by default, which courts in some jurisdictions view as overly broad and unenforceable. Or it may expire with the business relationship, leaving confidential information unprotected long before you'd want it to be. Always specify the duration explicitly.

Typical NDA Durations by Context

There is no single "correct" NDA duration. Different types of information warrant different protection periods:

  • Exploratory business discussions / negotiations (1-2 years): If you're sharing information during initial discussions that don't lead to a deal, a 1-2 year NDA is usually sufficient. The information becomes less sensitive as your business evolves.
  • Standard freelance engagements (2-3 years): Client business plans, strategy documents, and operational information typically need 2-3 years of protection. After this period, much of the information will be public or no longer competitively sensitive.
  • Technology and product development (3-5 years): Source code, product roadmaps, and technical specifications benefit from longer protection while products are in development and early deployment.
  • Trade secrets (indefinite / perpetual): Formulas, proprietary processes, or genuinely unique methods that derive their value entirely from secrecy may warrant indefinite protection.

Indefinite NDAs: When Are They Valid?

Courts in most jurisdictions will enforce an indefinite or perpetual NDA for genuine trade secrets — information that is commercially valuable specifically because it is secret. Examples include:

  • A secret recipe or formula
  • Proprietary manufacturing processes
  • Unique algorithms or software architectures
  • Customer lists that are not publicly available

For general business information — strategy documents, pricing, staffing plans — an indefinite NDA is likely to be challenged as unreasonably broad. If you want indefinite protection for trade secrets alongside time-limited protection for general business information, use two separate clauses: "Confidential Information that constitutes a trade secret shall be protected indefinitely. All other Confidential Information shall be protected for [X] years from the date of disclosure."

The Survival Clause

A survival clause is essential in any NDA. It states that confidentiality obligations continue after the NDA itself expires or terminates. Without it, there's an argument that when the agreement ends, the obligations end too.

Standard wording: "The obligations of confidentiality under this Agreement shall survive its termination or expiration for a period of [X years / indefinitely with respect to trade secrets]."

Include this in every NDA. Many template NDAs omit it.

Measuring Duration: From Signing or From Disclosure?

Most NDAs run from the date of signing. This is simple but can create problems when information is shared over a long engagement. If a project runs for two years and the NDA expires two years after signing, information disclosed at the end of the project might only be protected for a matter of months.

For ongoing relationships, consider: "The confidentiality obligation applies to all information disclosed during the Term of this Agreement and continues for [X years] after the date of the last disclosure of Confidential Information."

What Happens When an NDA Expires?

When an NDA expires:

  • The receiving party is no longer legally bound by the confidentiality obligation (absent a survival clause)
  • They may share or use the previously confidential information freely
  • Trade secret law may still offer some protection if the information remains genuinely secret and steps have been taken to protect it — but this is a weaker, harder-to-enforce protection

If you're relying on trade secret protection after NDA expiry, you'll need to show that the information was: (1) genuinely secret, (2) had commercial value because of its secrecy, and (3) you took reasonable steps to maintain its secrecy.

Reviewing and Renewing NDAs

For long-term business relationships, review your NDAs periodically. If an NDA is about to expire but confidential information is still sensitive, negotiate a renewal or extension in writing before the expiry date. Don't wait until after it expires — at that point, you've lost the protection.

Generate a Customizable NDA Now

Create a unilateral or mutual NDA with flexible duration settings — free.

Create NDA Free →

Frequently Asked Questions

How long does a typical NDA last?

Most business NDAs last between 2 and 5 years. The right duration depends on how long the information needs protection — a business plan disclosed during negotiations may need 2 years, while technical trade secrets may warrant 5 years or indefinite protection.

Can an NDA last forever?

Indefinite NDAs are valid for genuine trade secrets. For general business information, courts may view an indefinite NDA as unreasonably broad. Consider using "perpetual" only for clearly identifiable trade secrets, with a defined duration for other confidential information.

What is a survival clause in an NDA?

A survival clause states that confidentiality obligations continue after the NDA itself terminates or expires. Always include this — without it, the NDA might be interpreted to end when the business relationship ends.

What happens when an NDA expires?

When an NDA expires, the receiving party is no longer bound to keep the information confidential (unless a survival clause extends the obligation). Trade secret law may offer some ongoing protection for genuinely secret information, but it is much harder to rely on.

Should the NDA duration run from signing or from disclosure?

Most NDAs run from the date of signing. For ongoing relationships, consider stating that obligations apply to information disclosed during the term and continue for X years after the last disclosure, to ensure full protection throughout the engagement.


Related Articles