Answers

What is a Mutual NDA?

The mutual NDA is the quiet handshake before real evaluation work begins. It is boilerplate on paper, but it decides what gets said in the next conversation and whether the demo moves past the obvious slide.

Short answer

A mutual NDA (MNDA) is a non-disclosure agreement in which both parties agree to protect each other's confidential information, rather than only one side protecting the other. In enterprise B2B sales, an MNDA is the standard pre-POC artifact that lets the buyer and seller share roadmap details, pricing structures, and architecture under a shared duty of confidentiality. Typical protection runs two to three years, with standard exclusions for public information and independently developed material.

Key points

What matters most.

The six things to understand about a mutual NDA before you send one, sign one, or ask a buyer for one. The MNDA is the first legal document on most enterprise opportunities and the fastest way to lose a week if the terms are not standard.

Definition

A two-way duty of confidentiality.

A mutual NDA is an agreement in which both parties bind themselves to protect the other's confidential information. Each side can disclose and each side has to protect. The symmetry is the point: it signals that both sides expect to share meaningful information, not just one side extracting answers from the other.

When it signs

Before pricing, architecture, or POC.

In enterprise B2B sales, the MNDA is a pre-POC artifact. It gets signed after qualification and before the vendor shares non-public pricing, specific roadmap commitments, architecture diagrams, security attestations beyond the public report, or any customer reference material. If the buyer is asking the kind of questions that require real answers, the MNDA is overdue.

Term length

Two to three years of protection.

Standard MNDAs run a two or three year confidentiality term from the date of disclosure, with a trade-secret carveout that extends indefinitely for information that qualifies as a trade secret under applicable law. Shorter terms (one year) show up in low-stakes relationships. Longer terms (five years) show up in regulated industries or where sensitive IP is in play.

Exclusions

Public, prior, and independent material.

Every reasonable MNDA excludes four categories from the protected set: information already public at the time of disclosure, information the receiving party already knew, information rightfully received from a third party without confidentiality obligations, and information independently developed without reference to the disclosed material. These carveouts are not negotiable.

One-way vs mutual

Who protects whom.

A one-way NDA (also called a unilateral NDA) protects only one side's information, usually the party sharing. A mutual NDA protects both. In most B2B sales motions the mutual form is standard because both the buyer and the vendor share non-public material. One-way NDAs show up around candidate interviews, M&A targets, and vendor security reviews.

Standard templates

OneNDA and the industry default.

OneNDA.org publishes a free, community-reviewed standard mutual NDA template designed to be signed without redlines. A growing number of enterprise buyers and vendors accept the OneNDA template verbatim, which removes legal ping-pong from the opening of a cycle. Companies that stay on bespoke paper lose days to redlines that produce substantially the same agreement.

The anatomy

What a standard mutual NDA actually contains.

A mutual NDA is a short document, usually two to four pages. The clauses below show up in nearly every version, from the OneNDA template to the bespoke paper of a Fortune 500 legal team. Knowing the shape makes it easier to spot the one or two clauses that are actually non-standard and worth a redline.

The parties

Legal entities, not product names.

The parties are the two legal entities bound by the agreement, named with their full legal names, states of formation, and principal addresses. Product names, trade names, and marketing names do not go here. Getting the legal entity right matters: a signature from the wrong subsidiary can leave the parent uncovered when a question comes up later.

Definition of confidential information

Marked, oral, and reasonably identifiable.

Confidential information is defined broadly: any non-public business, technical, or financial information disclosed by one side to the other, whether marked, labeled, or reasonably understood to be confidential given its nature and the circumstances. Oral disclosures are often required to be confirmed in writing within a short window to be covered.

Standard exclusions

Public, prior, third-party, independent.

The exclusions carve out four buckets of information from the protected set: already public, already known to the receiver before disclosure, rightfully received from a third party without a duty of confidentiality, and independently developed without use of the disclosed material. These exclusions prevent the agreement from locking a party out of using information they would have had anyway.

Permitted use

Only for the evaluation purpose.

The receiving party may only use the disclosed information for the stated purpose of the evaluation or relationship. Using it for anything else, such as building a competing product or informing an unrelated business decision, is a breach. Permitted use is the clause that turns an MNDA from a general gag order into a scoped business tool.

Required disclosure

The subpoena and law carveout.

If the receiving party is legally compelled to disclose confidential information (subpoena, court order, regulatory request), it may do so, but must give the disclosing party prompt notice (where legally permitted) and reasonable cooperation to seek a protective order. This clause balances confidentiality against legal obligation; it is standard and should not be stripped.

Term and survival

Two to three years, trade secrets forever.

The confidentiality term usually runs two or three years from the date of disclosure of each item, meaning information disclosed late in the engagement is protected the longest. Trade secret information survives for as long as it qualifies as a trade secret under applicable law. The agreement itself is often perpetual with respect to information already shared.

Mutual vs one-way

When each form is actually the right paper.

A mutual NDA and a one-way NDA cover different situations. Picking the wrong form slows the deal down, because the counterparty eventually asks why they are being handed asymmetric protection. The guide below lines up the common sales situations against the right NDA to send first.

Enterprise evaluation

Mutual, because both sides share.

In a standard enterprise evaluation, the buyer discloses team structure, workflows, use cases, and strategic goals. The vendor discloses roadmap, pricing, architecture, and sometimes customer references. Both sides are protecting real information, so the paper is mutual. Sending a one-way NDA at this stage signals the vendor does not expect to share anything meaningful.

Vendor security review

One-way, protecting the buyer.

When a buyer sends a security questionnaire or SIG, they are not sharing their own confidential information; they are asking the vendor to disclose attestations and controls. A one-way NDA (vendor to buyer) is appropriate here, because the flow is unidirectional. These are often rolled into a master evaluation MNDA so there is only one document to track.

M&A conversations

Usually mutual, often with teeth.

M&A discussions almost always sign under a mutual NDA because both the target and the acquirer disclose sensitive information. These NDAs include stronger non-solicit clauses, longer terms (five years is common), and a standstill clause preventing the acquirer from making a hostile bid for a defined period. Standard sales MNDA templates are not sufficient here.

Candidate interviews

One-way, protecting the employer.

When a company shares internal product details with a candidate during interviews, a one-way NDA from the candidate to the employer is appropriate. The candidate is not disclosing confidential information in return. This is one of the few places a unilateral NDA remains the clean default in modern B2B practice.

Partnership discovery

Mutual, scoped tightly.

When two companies explore a channel partnership, co-sell motion, or technical integration, a mutual NDA covers early technical and commercial conversations. The permitted-use clause is important: it should name the specific partnership opportunity, not the general exchange of information, to avoid locking either side out of unrelated future deals.

Investor conversations

Usually no NDA at all.

Most institutional investors will not sign an NDA before an initial meeting. They see too many pitches to accept the exposure. The practical workaround is to share only non-confidential material in the first conversation and reserve the MNDA for a later diligence stage once mutual interest is clear. This is a norm, not a rule, and varies by investor.

In the deal

Where an MNDA fits in a B2B sales cycle.

The mutual NDA has a specific role in the shape of an enterprise sale. It is not the first document and it is not the last. It sits between discovery and real evaluation, enabling the honest conversations that qualified pipelines are built on. Treating the MNDA as paperwork, rather than as a decision point, is where a lot of sellers lose a week.

After qualification

Not during cold outreach.

An MNDA signed before qualification is wasted paper. It takes legal cycles on both sides to produce a document covering a relationship that may not exist. The right trigger is a second or third conversation where both sides see enough fit to go deeper. Sending the MNDA then is efficient and respectful of counsel on both sides.

Before specific pricing

The gate to non-public numbers.

Public pricing goes on the website. Specific enterprise pricing, discount structures, multi-year ramp terms, and non-standard commercial constructs are confidential and should not leave the vendor's hands before an MNDA is in place. The MNDA is often the first signal to a buyer that the vendor treats pricing as a serious piece of the conversation.

Before architecture detail

Diagrams, pen tests, SOC 2 bridge letters.

Public architecture summaries can be shared openly. Full data flow diagrams, pen test results, SOC 2 bridge letters, and sub-processor lists in detail usually sit behind an MNDA. Security teams on the buyer side often ask for these artifacts; the MNDA is the paper that lets the vendor deliver them without creating uncontrolled copies.

Before POC and reference calls

The pre-POC artifact.

A proof of concept involves the buyer running real workloads on the vendor's platform and the vendor seeing real buyer data. The MNDA is the baseline paper that allows this exchange. Reference calls with existing customers also sit behind an MNDA, so both sides can speak candidly without worrying about the conversation leaving the room.

Not instead of the MSA

Confidentiality, not commerce.

An MNDA covers confidentiality. It does not cover payment, service levels, warranties, indemnities, or termination. The master service agreement handles those. The MNDA often survives the MSA signing, running in parallel for confidentiality purposes, or the MSA includes a confidentiality section that supersedes the MNDA for the covered relationship.

Expiration and renewal

A rolling term, not a wall.

Because the confidentiality term runs from the date of each disclosure, information shared late in the relationship stays protected for the full term even if the MNDA itself has lapsed. Many teams let the MNDA run its course and simply sign a new one if another evaluation starts years later. Keeping a signed PDF in the CRM makes that easy.

Keep every MNDA with the deal it belongs to.

Strkr stores signed MNDAs on the opportunity record alongside the mutual action plan, close plan, and signed order form. Expiration dates roll up to the account level, so legal and sales know when a renewal MNDA is required before the next evaluation opens. One source of truth for every piece of paper in the deal.

People also ask

Related questions.

What does MNDA stand for?

MNDA stands for mutual non-disclosure agreement. It is a confidentiality agreement in which both parties agree to protect each other's confidential information, rather than a one-way (unilateral) NDA in which only one side has disclosed material to protect. Mutual NDAs are the standard pre-POC paper in enterprise B2B sales because both the buyer and the vendor expect to share non-public information.

What is the difference between a mutual NDA and a one-way NDA?

A mutual NDA binds both parties to protect each other's confidential information. A one-way NDA (also called unilateral) binds only the receiving party to protect the disclosing party's information. Mutual NDAs are standard in B2B sales evaluations because both sides share real information. One-way NDAs are appropriate for candidate interviews, M&A target disclosures, or vendor security reviews where the flow of information is unidirectional.

How long does a mutual NDA last?

Most mutual NDAs run two or three years of confidentiality protection from the date of each disclosure, with a trade-secret carveout that lasts as long as the information qualifies as a trade secret under applicable law. Shorter one-year terms appear in low-stakes commercial exchanges; longer five-year terms are common in regulated industries, M&A conversations, and situations involving unusually sensitive intellectual property.

What are the standard exclusions in a mutual NDA?

Four categories are excluded from the protected set in a reasonable mutual NDA: information already public at the time of disclosure, information the receiving party already knew before disclosure, information rightfully received from a third party without confidentiality obligations, and information independently developed without use of the disclosed material. A fifth standard clause allows disclosure required by law or court order with prompt notice to the other side.

When should a vendor send a mutual NDA in a sales cycle?

After qualification and before any disclosure of non-public pricing, architecture detail, roadmap commitments, or customer reference material. The usual trigger is a second or third conversation where both sides see enough mutual fit to go deeper. Sending an MNDA before qualification wastes legal cycles; delaying it past the point of real disclosure forces either a stall or an uncomfortable retroactive conversation about what was shared under what cover.

What is the OneNDA template?

OneNDA.org publishes a free, community-reviewed standard mutual non-disclosure agreement template designed to be signed without redlines. It is produced by a consortium of enterprise legal teams and aimed at eliminating the wasted days of back-and-forth that bespoke NDAs produce. A growing number of enterprise buyers and vendors accept the OneNDA template verbatim as a way to open a deal with zero legal friction.

Does a mutual NDA replace a master service agreement?

No. A mutual NDA only covers confidentiality: who can see what information and for how long. A master service agreement covers commercial terms, including payment, service levels, warranties, indemnification, liability, and termination. The two documents exist in parallel. Many MSAs include a confidentiality section that supersedes the MNDA for the covered relationship, but the MNDA is still useful for the pre-MSA evaluation period.

Is a mutual NDA enforceable without a specific project named?

Generally yes, if the permitted use is defined broadly enough to be meaningful (such as evaluating a potential business relationship between the parties) and the agreement is otherwise reasonable in scope and duration. Courts enforce NDAs that are reasonably tailored to a legitimate business interest. Overly broad NDAs that attempt to cover unrelated future conduct, or that lack the standard exclusions, are more likely to be challenged.

Try it free. Bring your team next week.

No sales call, no migration consultant, no four-month implementation. Enter your card, get 14 days of the full Pro tier, cancel any time before day 14 with zero charge. Spin up a workspace, import your CSV, and have something useful before lunch.