NDA vs Confidentiality Agreement: Key Differences [2026]

If you've received a document labelled "Non-Disclosure and Confidentiality Agreement," you might wonder whether both words in that title are doing real work. You're not alone. Lawyers, founders, HR teams, and operations managers all trip over this terminology. The short answer: in practice, an NDA and a confidentiality agreement usually mean the same thing. The long answer matters for how you read one, which clauses deserve close attention, and, critically, how you track the dates buried inside.

This post is general information, not legal advice. For advice about a specific contract, speak to a qualified lawyer in your jurisdiction.

Are NDA and Confidentiality Agreement the Same Thing?

Mostly yes. Both are contracts that restrict one or more parties from sharing sensitive information with third parties. The obligations, structure, and enforceability are functionally identical. The terminology difference is largely a matter of habit, industry, or geography.

That said, practitioners do sometimes use the terms to signal slightly different contexts:

• NDA (Non-Disclosure Agreement) is the dominant shorthand in US business and tech. It tends to appear in early-stage situations: before a product pitch, when onboarding a contractor, during acquisition due diligence. Many NDAs are "unilateral" - one party discloses, the other agrees to protect.

• Confidentiality Agreement (sometimes "CA" or "CDA" for Confidential Disclosure Agreement) is common in life sciences, employment contracts, and UK/European commercial practice. The term is often preferred when both parties share sensitive information ("mutual confidentiality").

According to legal contract management firm Agiloft, the two labels refer to the same core mechanism - a legal obligation not to share - and the real distinction worth understanding is unilateral vs. mutual, not the name on the top of the page. (Source: Agiloft, February 2026)

Unilateral: One side discloses (a startup sharing its roadmap with an investor). The other side signs a promise to stay quiet.

Mutual: Both sides share sensitive information (two companies exploring a partnership). Both sides sign obligations to each other.

When you see a document titled "Non-Disclosure and Confidentiality Agreement," it's usually a mutual agreement using both terms to signal that protection flows both ways.

Key Clauses Every NDA Should Have

Regardless of what it's called, a well-drafted NDA or confidentiality agreement will contain these essential clauses:

1. Definition of confidential information. The broadest clause in the document. It typically covers financial data, business plans, customer lists, product designs, technical specifications, and proprietary processes. Read it carefully: information the disclosing party marks as "Confidential" AND information that a reasonable person would recognise as sensitive. Trade secrets often get their own carveout because they may need perpetual protection.

2. Obligations of the receiving party. The core promise: don't share, don't use for any purpose outside the agreed relationship, take reasonable steps to protect it. Some agreements add a "residuals" clause, which allows the receiving party to use information retained in memory from the discussions - a significant carveout worth spotting.

3. Exclusions from confidentiality. Certain information is excluded from protection regardless: information already in the public domain, information the receiving party already knew, information they learn independently, and information they're legally required to disclose (court order, regulatory demand). These exclusions are standard and fair.

4. Term and duration. How long the agreement governs new disclosures. A typical commercial NDA runs for 1 to 5 years. After the term, no new disclosures are covered - but information shared during the term may still be protected by the survival clause.

5. Survival clause. This is where most teams make tracking mistakes (more on that below). The survival clause specifies how long confidentiality obligations continue after the agreement itself terminates or expires. According to terms.law's NDA clause library, the standard approach is a 2-5 year survival period running from the date the NDA ends, though trade secrets may warrant indefinite protection. (Source: terms.law NDA Survival Clause Library)

6. Termination notice. How a party can end the agreement early, usually by giving 30 or 60 days' written notice. Missing this window doesn't lock you in indefinitely, but it affects when obligations end and when the survival clock starts ticking.

7. Remedies for breach. What the disclosing party can seek if the other side leaks confidential information. Typically includes injunctive relief (a court order to stop) and damages. Trade secrets also have federal protection in the US under the Defend Trade Secrets Act.

The Dates That Actually Matter in an NDA

Most teams log the contract signature date and nothing else. For an NDA, that's not enough. Here are the four dates that determine your real obligations and rights:

1. Effective Date

This is when the agreement starts and when the disclosure period opens. Usually the date both parties sign, though sometimes it's backdated. All disclosures after this date are governed by the agreement. Everything before it is not - unless the contract explicitly says so (some NDAs cover prior discussions by mutual agreement).

2. Disclosure Period End Date

This is when no new disclosures are protected. It's often buried in the "Term" clause as "X years from the Effective Date." If you share sensitive information after this date without a renewal or extension in place, that new information is not covered. For active business relationships, track when the term ends so you can renew before it lapses.

3. Survival / Expiry Date

This is the most complex date. According to contractcodex.com's analysis of real NDA exemplars, survival periods typically run 2-5 years from either the termination date or the date of last disclosure (the two approaches differ in how long specific pieces of information are protected). (Source: Contract Codex, NDA Term and Termination)

Calculate it like this:

• If survival runs from termination date: Termination date + survival years = protection end date.
• If survival runs from date of last disclosure: The last disclosure date + survival years = protection end date (and each disclosure may have its own clock).

If your NDA doesn't specify which approach applies, ambiguity is a risk. Check with whoever drafted it.

4. Termination Notice Deadline

If either party wants to end the agreement before its natural term, they must give written notice in advance - typically 30 to 60 days. Miss the notice window and you're locked in for another period. The same notice-period math that applies to service contracts applies here. For a full breakdown of how notice periods work across contract types, see our guide on contract notice periods.

Setting Up NDA Tracking in Lapsewise

The goal is to make every date above visible before it matters. Here's how to set up NDA and confidentiality agreement tracking in Lapsewise:

Create a Contract record for each NDA or CA. Use the Contracts module, which supports the date fields and notice-period calculations NDAs need.

Add these key dates:

| Date Field | What to Enter | |---|---| | Effective date | The agreement start date | | End of disclosure period | Effective date + term length | | Survival / expiry date | Termination date + survival period | | Termination notice deadline | Agreement end date minus notice period |

Set reminders in advance for each date. For active disclosure periods, a 60-day lead gives you time to prepare a renewal before the term lapses. For survival dates, a 30-day lead is usually enough - it's informational rather than action-needed.

Attach the PDF. Upload the signed agreement to the record. When the survival date arrives and someone asks "what did we actually share with them?", the original document is one click away.

Assign an owner. Contracts managed by one person and stored only in email are the single biggest renewal and expiry risk. See our post on the cost of tracking renewals in one person's head for why this pattern consistently causes missed deadlines.

For a broader view of what the Contracts module can track and how reminders work, see contract renewal reminders: stop missing deadlines and our contract management software landing page.

FAQ

Q: Is an NDA legally different from a confidentiality agreement? In most jurisdictions, no. Both names refer to a contract that obligates a party to protect disclosed information. The practical distinctions are directional (unilateral vs. mutual) and contextual (employment vs. commercial vs. M&A), not a function of the label at the top of the document. When in doubt, read the obligations clause, not the title.

Q: What happens when an NDA expires? The disclosure period closes - no new information shared after expiry is protected by that agreement. But the survival clause keeps obligations alive for previously-shared information for the period stated (often 2-5 years). Some NDAs have no expiry at all for trade secrets. Expiry of the main term does not mean you're free to share everything that was disclosed under it.

Q: How long does a typical NDA last? Commercial NDAs in the US most commonly run 1 to 3 years for the disclosure period, with a 2-5 year survival period after termination. Employment and HR confidentiality agreements sometimes run for the duration of employment plus a defined post-employment period. Life sciences NDAs often run 5 years or more because the information has a longer competitive relevance window. The right length depends on how long the underlying information stays sensitive.

Q: Does a confidentiality agreement need to be renewed? Only if you're still sharing sensitive information and want the new disclosures to be covered. If the relationship has wound down and you're no longer exchanging proprietary data, letting the term expire is fine as long as you're tracking when the survival period ends. If the relationship is ongoing, put a renewal reminder in place before the term lapses. Our expiry tracking 101 guide covers how to build that kind of renewal calendar across all your contract types.

Q: What's the difference between the NDA term and the survival period? The term is when the agreement is "active" - when new disclosures are governed by it. The survival period is how long obligations continue after the term ends. They run consecutively, not concurrently. If a 2-year NDA has a 3-year survival clause, obligations run for up to 5 years from the effective date in total. This is why the survival date, not the term end date, is the real expiry you need to track.