How Long Should an NDA Last? Terms, Survival and Trade Secrets
Two-year or five-year term? What survives expiration? How do trade secrets change the math? A practical guide to setting an NDA term that fits.
Ask how long an NDA should last and you will hear two years, five years, indefinitely, and it depends, sometimes all in one meeting. The confusion is understandable, because NDA duration is really three separate questions wearing one coat. How long does the agreement itself run? Which obligations survive its end? And how long does the specific information stay worth protecting? Answers differ, and a term that is perfect for a marketing campaign is negligent for a manufacturing process. This guide untangles the clocks, explains why two years became the common default, shows how to match duration to information that depreciates at different speeds, and covers what responsible parties do when an NDA expires or a relationship ends early. Duration is one of the few NDA terms a businessperson can set with judgment rather than law degrees, and this guide aims to make that judgment deliberate. It is general information rather than legal advice; state law varies, and an attorney should review terms in agreements that matter.
CHAPTER 01Two Clocks, Not One: Term Versus Survival
The first distinction to internalize is that NDA duration involves two clocks. The term is how long the agreement, and the confidentiality obligations inside it, run from the effective date; two or three years is a common choice, and the obligation typically continues even if the parties stop talking after a week. Survival is different: it governs what happens after the agreement ends, either by expiration or by termination, and a well-drafted NDA says explicitly which provisions survive. Confidentiality obligations usually survive for the remainder of the term, and certain sections, like return of materials and governing law, often survive indefinitely.
The reason for the two-clock design is practical. Without survival language, a literal reading of expiration could let a recipient argue that return-or-destroy duties, or the definition itself, evaporated the moment the term ended. Survival clauses close that gap. They also handle the awkward middle case where the agreement is terminated early: if you signed a three-year NDA and parted ways after eight months, the duties continue for the remaining stretch because the term runs from the effective date, not from the last email.
When reviewing or drafting, check three sentences: the stated term length, the statement that obligations continue despite the end of discussions or the relationship, and the survival clause naming what outlives the agreement. If any of the three is missing, the document's duration is ambiguous, and ambiguity in duration tends to be resolved by whoever argues hardest later. Templates usually carry all three; custom documents sometimes drop one, which is exactly the kind of gap a careful read catches.
CHAPTER 02Why Two Years Became the Default
The two-year term that appears in countless templates, including as the default in the Toolfyra NDA template generator, is not a legal rule; it is an equilibrium. Most commercial information depreciates fast. Pricing, campaign plans, product roadmaps, and customer lists churn so quickly that yesterday's secret is often this year's public knowledge, and a term matching that decay protects the discloser without demanding that recipients become permanent archivists of stale obligations.
Two years is also a negotiation convenience. It is long enough that disclosers do not feel exposed, short enough that recipients sign without a procurement cycle, and round enough to adjust without arithmetic. Five-year terms appear in deals with slower information decay: hardware designs, manufacturing relationships, enterprise sales cycles, and anything with regulatory timelines. One-year terms show up for short, transactional conversations where the parties already know little will be shared and the document is mostly a formality for the file.
The honest way to use the default is as a starting point, not a destination. Ask what you are actually sharing and when it stops being sensitive. A marketing agency seeing a seasonal campaign plan may warrant one or two years; a contract manufacturer seeing your bill of materials and process constraints may warrant five; an investor seeing aggregate metrics may warrant whatever the market norm is for your stage. The question is never what is standard but what the half-life of this information is, because the term exists to match decay, not to signal seriousness.
CHAPTER 03Trade Secrets: The Indefinite Exception
Some information does not depreciate on a schedule, and the law recognizes a category for it. Trade secrets, information that derives independent economic value from not being generally known and that is subject to reasonable efforts to keep secret, can stay protected for as long as they qualify. Standard NDA language therefore carves trade secrets out of the fixed term: obligations for such information continue for as long as it remains a trade secret under applicable law, regardless of the stated number of years.
The interaction between that carve-out and reasonable efforts is where drafting meets operations. Trade-secret status is not self-declaring; it depends on the owner taking steps a court would recognize as serious: restricting access, requiring confidentiality agreements, marking documents, limiting distribution. An NDA is one of those efforts, not a substitute for the rest. A company that stamps everything confidential, shares freely, and never restricts access may find that its crown-jewel formula does not qualify as a trade secret at all, no matter what the NDA says, because the legal category demands behavior, not paperwork.
For recipients, the trade-secret carve-out means some obligations in a signed NDA are effectively without a fixed end. That is not a reason to refuse; it is a reason to understand what you are signing. The carve-out covers the narrow class of information that qualifies as a trade secret, not everything the discloser labeled confidential, and the exclusions, public knowledge, independent development, prior possession, still apply. For disclosers, the lesson is the reverse: identify which of your assets genuinely deserve trade-secret treatment, invest in the handling they require, and let the ordinary term cover the rest of your confidential but perishable information.
CHAPTER 04Matching Duration to Information Type
Duration decisions get easier with a simple inventory exercise. List what you will actually disclose in the relationship, then assign each item a realistic sensitivity window. Financial projections age in quarters. Product roadmaps age in one to three years, or until launch. Source code can retain value longer than a specific product. Customer lists can stay sensitive as long as the customers remain reachable. Manufacturing processes and formulations can be valuable for decades and may be your only genuine trade secrets.
Then set the term at, roughly, the longest window among the items you expect to share that are not trade secrets, and let the trade-secret clause carry the outliers. A mismatch in either direction creates avoidable problems. A term far shorter than your information's real life leaves the long-lived items exposed once the term ends; a term far longer than anything you share makes the document harder to sign and invites pushback from sophisticated counterparties who read duration as a proxy for how heavy-handed the relationship will be.
Relationship type suggests starting ranges, which you should still adjust to the inventory. Contractor and agency engagements: commonly one to three years, aligned to when the work ships and its internals stop being competitively fresh. Partnership and joint-venture discussions: two to five years, because diligence material decays slower than campaign plans. Supplier and manufacturing relationships: three to five years or more, with trade-secret language doing heavy lifting. Investor conversations: usually market-standard short terms, because the information shared is aggregate and the relationship format repeats. These are conventions rather than rules, and the inventory beats the convention whenever the two disagree.
CHAPTER 05Expiration, Renewal, and End-of-Life Housekeeping
When an NDA expires, the confidentiality duty ends for ordinary information, but three things typically continue: trade-secret obligations as long as trade-secret status lasts, any surviving provisions named in the agreement, and the practical reality that the recipient's memory does not wipe on schedule. Disclosers sometimes expect expiration to feel like a door closing; it feels more like a fence being lowered. The protective behaviors, limiting what you share near the end of a term, refreshing the agreement for ongoing relationships, matter as much as the paper.
Renewal is a decision, not a default. If the relationship is active and information still flows, a short renewal or a fresh agreement keeps coverage aligned with reality. If the relationship is dormant, letting the NDA lapse is often fine, provided you understand what the expiration leaves uncovered. What you should not do is discover the gap after the fact: a company that keeps sending sensitive material under an expired NDA has drifted into relying on course-of-dealing expectations rather than contract, which is a weak place to stand if something leaks.
End-of-life housekeeping closes the loop. When a relationship ends, invoke the return-or-destroy clause in writing and request written confirmation; the exercise takes an email and creates a record that the duty was honored. Keep your copy of the signed agreement, your disclosure log, and the confirmation together, because duration disputes are usually evidence disputes. And when you generate a replacement, whether through the NDA template generator on Toolfyra or a simpler starter template, set the term deliberately rather than accepting the form's default; an attorney reviewing the draft can sanity-check it against state law in minutes.
🔑 Key takeaways
- NDA duration is three questions: the agreement's term, what survives expiration, and how long the information itself stays sensitive.
- Obligations usually continue from the effective date even if discussions end early, and survival language keeps key duties alive past expiration.
- Two years is an equilibrium default for fast-decaying commercial information, not a rule; five years suits slower-decaying material.
- Trade secrets stay protected as long as they qualify, and that status depends on real handling efforts, not paperwork alone.
- Inventory what you will disclose, assign each item a sensitivity window, and set the term to the longest non-trade-secret window.
- Terms in signed documents deserve a professional read; this guide is general information, state law varies, and an attorney review is cheap insurance.
❓ Frequently asked questions
Is a two-year NDA term legally required anywhere?
No. The term is a business choice, and two years is simply the most common equilibrium between discloser caution and recipient fatigue. Some industries use five years routinely, some transactions use one, and the right number follows the sensitivity window of what you actually share.
What happens to my obligations when the NDA expires?
For ordinary confidential information, the duty ends when the term ends. Trade-secret obligations continue as long as the information qualifies as a trade secret, and surviving provisions named in the agreement, like return of materials, still apply. Your memory and general skills were never covered in the first place.
Can an NDA be indefinite?
Clauses tied to trade-secret status are effectively indefinite, because protection lasts as long as the information qualifies. Blanket indefinite confidentiality over all information is harder to negotiate, weaker legally for ordinary business data, and usually unnecessary; the carve-out approach achieves the same protection more honestly.
Should I renew an NDA that is about to expire?
If information is still flowing or still sensitive, yes: a short written renewal or a fresh agreement keeps coverage aligned with reality. If the relationship is dormant and the information has aged out, letting it lapse is usually fine. Avoid the middle mistake of continuing to share under expired paper.
Does the term restart if we keep working together?
No, not automatically. The term runs from the effective date stated in the agreement. If the relationship outgrows the original window, the clean fix is a renewal or replacement agreement with a new effective date, rather than assuming the clock quietly reset itself.
Who chooses the term length in practice?
Whoever drafts first sets the anchor, and negotiation moves it. Disclosers push longer, recipients push shorter, and the eventual number reflects leverage as much as logic. Knowing your information's real half-life turns the negotiation from a tug of war into a calibration exercise with a defensible answer.
How long do banks and acquirers expect NDAs to run?
Deal-context NDAs often run two to three years for ordinary diligence material, with financial and technical information sometimes getting longer treatment inside the same document. Expect counterparties in acquisition conversations to have house positions on duration, and expect those positions to be negotiable within a band rather than fixed.
The free Nda Template Generator on Toolfyra runs everything in your browser — no signup, nothing uploaded.
Open the Nda Template Generator →📚 More in the Toolfyra blog · or browse all free online tools.