Trade Secrets for Startups: NDAs and Secrecy Steps
A trade secret is confidential business information that has value because it is secret and that you take reasonable steps to protect. Protection lasts only while it stays secret. An NDA is one of those steps, mainly for sharing information with partners and contractors. Many investors will not sign one for a first pitch, so share carefully.
Startup lifecycle A to Z · Letter K · Stage: Build
What a trade secret is and what qualifies
A trade secret is information that a business keeps confidential and that gives it an advantage because competitors do not know it. In the US, both federal law (the Defend Trade Secrets Act) and state law (most states have adopted a version of the Uniform Trade Secrets Act, with variations) provide remedies when trade secrets are misappropriated, meaning taken or used improperly.
Definitions differ slightly by statute, but the core test has two parts:
- The information has independent economic value because it is not generally known to, or easily figured out by, people who could profit from it.
- The owner takes reasonable measures to keep it secret.
The second part is the one startups fail. A secret you never protected is hard to defend later.
Examples of what can qualify
- Source code and algorithms that are not public.
- Customer lists with details a competitor could not easily rebuild.
- Pricing models, formulas and manufacturing processes.
- Unpublished product roadmaps and research results.
- Supplier terms and internal playbooks.
What does not qualify
- Information that is public, such as anything in a published patent application, a conference talk or your website.
- General skills and knowledge your employees carry in their heads from experience.
- Things a competitor can learn simply by buying and examining your product. Reverse engineering a lawfully obtained product is generally allowed.
- Information you have shared widely without any confidentiality obligation.
What are reasonable secrecy measures?
There is no fixed checklist. A court looks at whether your steps were reasonable for the type of information and the size of the business. A two-person startup is not expected to run a government-grade security program, but it is expected to do the sensible basics and to do them consistently.
People and paper
- Written confidentiality and invention assignment agreements with every employee and contractor before they see sensitive material. See IP assignment agreements for startups.
- NDAs with outside parties who receive confidential information.
- Exit steps: reminding departing people of their obligations and collecting devices, files and access.
- Your employee agreements should also include the federal whistleblower immunity notice described in the Defend Trade Secrets Act. Employers that omit it may lose the ability to recover certain damages and fees from that individual under the federal statute. Ask an attorney to include it.
Technology and access
- Limit access to those who need it (need-to-know), and review the list when roles change.
- Use individual logins, strong authentication and access logs for repositories and shared drives.
- Do not put secret material in public repositories, public documents or demo videos.
- Mark sensitive documents as confidential so everyone knows how to treat them.
Habits
- Keep a simple register of what you consider your trade secrets and where they live. You cannot protect what you have not identified.
- Train new hires in five minutes: what is confidential, what is not, who to ask.
- Be careful what you present publicly. A conference slide can end a trade secret.
NDAs: what they are and when to use one
A non-disclosure agreement (NDA), also called a confidentiality agreement, is a contract in which one or both sides promise to keep specified information confidential and to use it only for an agreed purpose. It creates a contractual duty on top of any trade secret law, and it is evidence that you took reasonable steps.
When an NDA makes sense
- Talking to a potential development partner, manufacturer or reseller about non-public details.
- Hiring contractors or freelancers who will see code, designs or customer data (usually as part of a broader contractor agreement).
- Sharing material with potential acquirers or strategic partners during serious negotiations.
- Letting someone beta test a product that reveals unreleased features.
When an NDA is more trouble than it is worth
- A casual coffee chat where you are only describing the problem and the general approach.
- Early customer discovery conversations. Asking people about their problems rarely requires revealing secrets, and demanding an NDA can end the conversation.
- Most first meetings with investors (more on that below).
The best protection is often to not disclose the secret at all. Share the problem, the market and your results, and hold back the formula, the code and the customer details until someone has a real need to know and has signed.
What to look for in an NDA
NDAs are common and templates are everywhere, but the details matter. A form that suits one situation can be unsuitable for another. Have an attorney review the version you plan to reuse. The points below are what that review typically examines.
| Term | What to check |
|---|---|
| One-way or mutual | One-way protects only the discloser. Mutual protects both sides and is common when both will share information. |
| Definition of confidential information | Specific enough to be enforceable, broad enough to cover what you really share. Marking requirements can backfire if people forget. |
| Exclusions | Standard carve-outs: already public, already known to the recipient, independently developed, or lawfully received from someone else. |
| Permitted purpose | The recipient may use the information only to evaluate or perform the stated deal. |
| Duration | Many NDAs set a fixed term. Information that qualifies as a trade secret may need protection for as long as it stays secret, so consider how the agreement treats it. |
| Return or destruction | Obligation to return or delete materials when asked or when talks end. |
| Governing law and remedies | Which state's law applies, and whether you can seek a court order to stop misuse. |
An NDA does not do three things: it does not protect information that is already public, it does not stop someone from independently developing the same idea, and it is only as good as your ability to find out about a breach and enforce it. Suing a much larger company over a breach is expensive. Choose counterparties carefully.
Can investors sign an NDA?
They can, but many early-stage investors will not, and pushing for one can cost you the meeting. Investors see a large number of pitches in related areas. Signing an NDA for each could expose them to claims that a later investment or a similar company used what they heard. Many therefore have a standing policy of not signing them for initial pitches.
That does not mean you should hand over everything. Practical approaches:
- Pitch the business, not the secret sauce. A deck can explain the problem, market, traction and team without disclosing code, formulas or customer names.
- Stage the disclosure. Save sensitive detail for later diligence, after an investor has shown serious interest, such as after a term sheet. At that point an NDA or confidentiality terms in the deal documents are more reasonable.
- Research the investor. Reputation matters. Ask other founders how an investor has handled confidential information.
- Use data rooms with access controls when diligence begins, and track who views what.
If you are planning a raise, the protect IP before fundraising guide covers this in more detail, and how to raise capital for your startup explains the wider process. Do not read this as a rule that investors never sign; policies vary. Ask your attorney what is normal for your stage and market.
Trade secrets versus patents
A patent trades secrecy for a time-limited exclusive right. A trade secret trades legal exclusivity for potentially indefinite duration. If you file a patent application, the information in it is generally published, so you cannot also keep that content secret after publication. If you rely on a trade secret, someone who independently invents the same thing, or reverse engineers your product, is generally free to use it.
Which suits you depends on how easy the invention is to detect from the product, how long its value lasts, and how well you can control access. Many startups use a mix: patent the parts visible in the product, keep the internal methods secret. The full comparison is in patent vs trade secret for startups, and the do I need a patent for my app guide covers the software question.
Common mistakes
- Treating an NDA as a substitute for good habits. It is one measure among several.
- Telling the world about a secret (a blog post, a pitch competition, a public repo) and then expecting legal protection.
- Letting employees and contractors start work before they sign confidentiality and assignment agreements.
- Using a vague NDA that defines nothing, or that was copied from an unrelated deal.
- Forgetting offboarding: former staff keeping access to repositories and drives.
- Insisting on an NDA from every person you talk to, which slows hiring and sales and signals inexperience.
A trade secret protection checklist
- List your candidate secrets (code, data, formulas, customer details) and where each is stored.
- Decide who truly needs access to each and restrict everyone else.
- Put confidentiality and invention assignment agreements in place with every employee, contractor and advisor.
- Maintain a vetted NDA template for outside discussions, and agree when it is used.
- Turn on access controls, logging and strong authentication.
- Mark confidential documents and train new people briefly.
- Prepare an offboarding routine.
- Review your list when you raise funds, hire a senior engineer or consider a patent filing.
This is general information about US law and not legal advice. Trade secret rules vary by state, and an attorney can confirm what is reasonable for your business.
Frequently asked questions
What is a trade secret for a startup?
It is confidential business information, such as code, formulas, customer data or processes, that has value because competitors do not know it and that you take reasonable steps to keep secret. If it becomes public or you stop protecting it, trade secret protection can be lost.
When should a startup use an NDA?
Use one when you must share real confidential details with a partner, contractor, manufacturer or acquirer. Skip it for casual conversations and customer discovery where you need not reveal secrets. Often the better approach is to share less, and have an attorney check the NDA form you use.
Can investors sign an NDA?
They legally can, but many early-stage investors decline to sign one for an initial pitch. Instead, pitch the business without disclosing your most sensitive details, and share deeper material later in diligence, when confidentiality terms are more commonly accepted. Policies vary, so ask your attorney.
How do I protect a trade secret?
Identify it, limit who can access it, use written confidentiality and assignment agreements, secure it technically, mark it as confidential and have an exit process for departing people. Courts generally ask whether your measures were reasonable for your size and the kind of information.
Does an NDA protect my idea?
Only to the extent the idea is confidential information the recipient agreed to keep secret. An NDA does not cover information that is already public, independently developed by the other party, or lawfully received elsewhere. It also does not make an unprotectable idea protectable.
Is it legal to reverse engineer a product?
Reverse engineering a product obtained lawfully is generally not misappropriation of a trade secret, though contracts such as license terms may restrict it. If your secret can be learned by examining the product, trade secret law may protect it poorly, and other protections may fit better.
Key terms on this page
Keep reading
- Patent vs Trade Secret: Which Fits Your Startup? IP guidePatent vs trade secret for startups: how each works, how long they last, the patent disclosure requirement, and how to decide, including for software.
- IP Assignment Agreements for Startups Explained IP guideIP assignment agreement basics for startups: founder IP assignment, invention assignment for employees, contractor IP ownership and what to include.
- IP Due Diligence for Startups Before Fundraising IP guideIP due diligence for startups: what investors ask about IP, a practical checklist, and why founder IP assignment should come before funding.
- Copyright for Software Startups: What It Covers IP guideCopyright for software explained for founders: what source code protection covers, when to register, work made for hire, and open source basics.
- Startup Legal Checklist: What to Handle Early GuideStartup legal checklist for first-time founders: entity, founder agreements, IP, EIN, licenses, contracts and privacy. A starting point for an attorney talk.
Learn more from Wysebridge
Wysebridge owns, operates and sponsors Revolutionary Startups, so these are links to its own free resources and directories. Read the disclosure.
- Wysebridge trade secret law guideFree guide to trade secrets: what qualifies, the DTSA and UTSA, NDAs and misappropriation.
- Wysebridge U.S. IP law courseA 20-chapter self-study course on U.S. patent, trademark, copyright and trade secret law; module 1 is free.
- Wysebridge IP glossaryDefinitions of trademark, patent and USPTO terms, from specimens to the Madrid Protocol.
Part of IP for founders · All guides · Glossary
Sources
General information, not legal, tax or financial advice. Reviewed 11 November 2026.