Definition of confidential information
Everything turns on this clause. Is it limited to information marked confidential? Limited to a defined “purpose”? Or does it sweep in “all information disclosed or observed” — which is functionally unbounded?
Standard carve-outs
Already known, independently developed, publicly available, received from a third party without obligation, or required by law. If these carve-outs aren't in the document, the document is overbroad on its face.
Term
How long the obligation lasts. Two to five years is typical for most commercial confidentiality. Trade-secret obligations often run as long as the information stays a trade secret — worth knowing, not necessarily worth fighting.
Residuals
What employees and contractors can remember, reuse, and rebuild from memory. A “no residuals” clause in an employer-side NDA can be devastating for someone changing jobs later.
Return / destruction
What you have to give back or destroy when the relationship ends, and whether that includes backup copies, derived work, and notes. The honest version permits retention for legal / archival purposes.
Choice of law & venue
If a dispute arises, whose state law decides it and where do you have to litigate? An NDA written under one state's law that you have to defend in another state's court is a structurally hostile document.
Remedies
Injunctive relief, liquidated damages, fee shifting, and attorneys' fees. The remedy clause is where you find out whether a breach claim costs the other side anything to bring — or only costs you to defend.
Hidden non-competes & non-solicits
Lots of NDAs quietly include don't-compete and don't-hire-our-people language. Some of it is unenforceable in your state (especially CA — see non-compete review), some isn't. We flag both.