Deal ProcessFull Entry

NDA (Non-Disclosure Agreement)

A confidentiality contract signed by a prospective buyer before receiving confidential information about a business for sale — typically the first document exchanged in an M&A process after an initial expression of interest.

Last updated: April 2026

Full Definition

The NDA (also called a Confidentiality Agreement or CA) is the gatekeeper document. Before any sensitive information flows from seller to prospective buyer — before the CIM, before financials, before customer lists — the buyer signs an NDA. The NDA restricts how the buyer can use the information: typically, only to evaluate the specific transaction, and not to share with third parties, use competitively, or poach employees/customers.

How it actually works: Typical NDA provisions: (1) definition of confidential information — broad in sellers' NDAs (covers everything), narrower in buyers' preferred versions (carves out public info); (2) permitted use — only for evaluating the transaction; (3) non-use — cannot use info for competitive purposes; (4) non-disclosure — cannot share with third parties beyond defined representatives; (5) representative obligations — representatives bound by same confidentiality; (6) non-solicit — cannot solicit target employees/customers based on info (often 12-24 months); (7) return/destruction — must return or destroy info if deal doesn't proceed; (8) term — typically 2-5 years; (9) injunctive relief — right to court injunction for breach; (10) governing law and forum.

NDAs are usually mutual (both parties agree to protect each other's info) rather than one-way, especially in strategic buyer situations where both sides may exchange sensitive data. For private equity and financial buyers, one-way NDAs (only buyer protects seller info) are common since the buyer isn't sharing their own confidential info.

In auction processes, sellers typically use a standard NDA form that all bidders sign. Negotiating the NDA extensively is usually a bad signal — bidders who fight terms at NDA stage often are problematic through the whole process. Most sellers accept modest edits but reject material concessions.

Seller vs. Buyer Perspective

If you're selling

NDAs are your first line of defense against competitive harm from shopping your business. Your NDA should: (1) broadly define confidential info (including the existence of the transaction); (2) include 12-24 month employee non-solicit; (3) restrict use strictly to evaluating this specific transaction; (4) require return/destruction of info after deal fails or concludes; (5) include injunctive relief provisions; (6) specify governing law favorable to you (typically your home state). Accept modest buyer edits but reject material giveaways. Track signed NDAs — you'll want to pursue any apparent breaches.

If you're buying

NDAs are routine but not unimportant. Changes to typical sellers' NDAs you might want: (1) reasonable carve-outs for publicly available info and independently developed info; (2) employee non-solicit limited to employees actually contacted; (3) no prohibition on normal business activities coincidental to the deal; (4) clear representative obligations. Over-negotiating signals inexperience or risk aversion; accept standard terms except where material to your situation. Abide strictly by the NDA — breaches become deal-killers and sometimes litigation.

Real-World Example

A sell-side auction process sends teasers to 34 prospective buyers. 21 sign NDAs to receive the CIM. Standard NDA terms: 5-year confidentiality period, 24-month employee non-solicit, required return/destruction, governing law of seller's state. Two buyers request material edits: one wants to narrow non-solicit to 12 months (seller accepts), another wants carve-out allowing discussion with their existing capital partners (seller declines). Third buyer tries to negotiate adding a "standstill" provision prohibiting seller from soliciting the buyer's M&A activities — unusual reverse protection, rejected. Over the process, all NDAs respected; no breach incidents. Post-deal, a losing bidder approaches one of the seller's top salespeople — but because NDA non-solicit was active, the seller's counsel sends a cease-and-desist, the approach is withdrawn, and the relationship survives. NDA functioned as designed.

Why It Matters & Common Pitfalls

  • !Non-solicit enforcement is important. The most common practical NDA issue is employee or customer solicitation by a failed bidder. Enforce aggressively.
  • !Over-negotiating at NDA stage. Bidders who fight hard over standard terms often cause worse problems later. Evaluate this as character.
  • !Representative obligations. The NDA should bind the buyer's advisors, lenders, and consultants — not just the buyer entity.
  • !Return/destruction. Actual return or destruction at deal failure matters. Document compliance.
  • !Public company issues. NDAs with public company buyers have specific considerations around material non-public information and trading restrictions.
  • !Stand-still provisions. Some sellers want "standstill" language preventing bidders from making unsolicited bids for a period. Common in public M&A, less common in private.
  • !Mutual vs. unilateral. Strategic buyers want mutual; financial buyers are comfortable with unilateral. Structure to match context.
  • !Governing law matters for enforcement. Your state's choice affects injunctive relief standards and employee non-compete enforcement.

Frequently Asked Questions

What is an NDA in M&A?
An NDA (Non-Disclosure Agreement) in M&A is a confidentiality contract signed by a prospective buyer before receiving confidential information about a business for sale. It's typically the first document exchanged in an M&A process after an initial expression of interest.
What should an M&A NDA include?
A comprehensive M&A NDA includes: broad definition of confidential information, permitted use limited to evaluating the transaction, non-disclosure and non-use restrictions, representative obligations binding advisors, employee/customer non-solicit (typically 12-24 months), return/destruction requirements, a 2-5 year term, and injunctive relief provisions.
How long does an M&A NDA last?
M&A NDA confidentiality periods typically run 2-5 years. Employee and customer non-solicit provisions typically run 12-24 months. Return or destruction requirements kick in when the deal fails or concludes.

Get Weekly M&A Insights

Valuation data, deal analysis, and plain-English M&A education — every week.

Free Weekly Newsletter

The LegacyVector Newsletter

Join 5,000+ business owners, investors, and buyers who get weekly M&A market data and deal insights.

  • Weekly valuation multiples by industry
  • SBA lending rates & deal financing data
  • Market trends & acquisition opportunities

No spam. Unsubscribe anytime. Free forever.

Disclaimer: The information provided on this page is for educational and informational purposes only. It should not be considered financial, legal, or investment advice. Business valuations depend on many factors specific to each situation. Always consult with qualified professionals — including business brokers, CPAs, and M&A attorneys — before making acquisition or sale decisions. LegacyVector is not a licensed broker, financial advisor, or attorney. Data shown may be based on limited samples and may not reflect current market conditions.

LV

LegacyVector Research Team

Reviewed by M&A professionals · Updated April 2026