Default at YATE Web
Mutual
Signed before any product discussion
- Both parties protected
- Methodology carve-out included
- 3-year term, standard remedies
Legal guide · Updated April 2026
Mutual NDA for AI development
Most agencies sign one-way NDAs where only the client is protected. AI work needs mutual: methodology, prompt patterns, and architectural choices are agency IP too. Here is when to sign, what to include, and what to push back on.
Critical clauses
Five clauses every mutual NDA should have
Without these, the document is either toothless (no remedies) or overreaching (no carve-outs). Both fail in court.
Definition of confidential information
Specific, not “everything we discuss”. Information disclosed in connection with discussions about a potential engagement, in any form (oral, written, electronic, demos).
Carve-outs
Independently developed, publicly known through no fault of the receiving party, prior knowledge, or required by law. Without these, the NDA is unenforceable in most jurisdictions.
Term
Two to three years for product information. Indefinite for trade secrets. Match the term to the half-life of the information; an indefinite term on a 6-month roadmap is overreaching.
Remedies
Injunctive relief plus damages. Without injunctive relief, the receiving party can monetise a breach faster than damages can compensate.
Methodology carve-out
The agency keeps generic templates, prompt patterns, and process documentation as agency IP. Without this clause, the agency’s pre-existing work is at risk.
Red flags
What to push back on, on either side
In client NDAs
Indefinite term on all information
Overreaching. Most product information has a 2 to 3 year half-life; demanding indefinite protection on everything signals the lawyer wrote the template once and never revisited it.
Penalty clauses (e.g. “any breach $100K”)
Generally unenforceable in most jurisdictions. Liquidated damages must reflect actual harm. A flat penalty signals bad-faith drafting.
Auto-extension clauses
Renews the agreement silently. Push back; require explicit re-signing.
Choice of law in unfavorable jurisdiction
“Disputes resolved in the State of [client’s home]” is normal. “Disputes resolved in [obscure offshore jurisdiction]” is a red flag.
IP-grab language
“All derivative works belong to client” covers more than the engagement. The agency’s methodology, generic templates, and prior work product are not derivative works of your project.
In agency NDAs (clients should watch)
Vague definition of agency methodology
If “methodology” is undefined, it could be claimed to include client work product. Insist on a specific list (templates, prompt patterns, process documentation).
Long indemnification on unrelated matters
Indemnification should map to NDA breaches, not general business risk. Watch for clauses that pull in IP infringement or third-party claims.
Non-compete language disguised as NDA
“Receiving party shall not engage similar service providers” has nothing to do with confidentiality. Strike it.
Sample timeline
From outreach to signed audit
- Day 0Initial outreach
- Day 1-2Mutual NDA exchanged and signed (both sides)
- Day 3Free Product Audit submitted
- Day 4-5Audit work
- Day 5Audit delivered (PDF + summary)
- Day 6+Discovery workshop scheduling
Template clauses
Sample language you can adapt
Drop-in clauses we use as a starting point. Have a lawyer adapt them to your jurisdiction; this is not legal advice.
DEFINITION. "Confidential Information" means any non-public information disclosed by one party (the "Disclosing Party") to the other party (the "Receiving Party") in connection with the parties' discussions of a potential business relationship, whether disclosed orally, in writing, electronically, or through demonstrations. CARVE-OUTS. Confidential Information shall not include information that: (a) was known to the Receiving Party prior to disclosure; (b) is or becomes publicly available through no fault of the Receiving Party; (c) was independently developed by the Receiving Party; or (d) is required to be disclosed by law. METHODOLOGY CARVE-OUT. Notwithstanding the foregoing, "Confidential Information" of Service Provider shall be deemed to include and continue to protect Service Provider's pre-existing methodology, prompt templates, and process documentation regardless of whether such items are referenced in connection with this Agreement. TERM. Each party's obligations under this Agreement shall continue for three (3) years from the date of disclosure, except that obligations regarding trade secrets shall continue indefinitely. REMEDIES. Each party acknowledges that breach may cause irreparable harm and that the non-breaching party shall be entitled to seek injunctive relief in addition to any other remedies available at law.
Common mistakes
Five NDA mistakes that cost trust or money
Signing a one-way client NDA without reading it
Common, especially under deadline pressure. Ten minutes of review saves a year of regret. Read every clause; ask about every term you do not recognise.
Refusing to sign mutual
If a client refuses to sign mutual after the agency requests it, that is a low-trust signal. Most serious clients sign mutual without question.
Sharing competitor names in the NDA conversation
“We’re also talking to [competitor]” creates risk for the agency and tells the agency you are price-shopping. Both are unhelpful.
Treating NDA as scope-of-work
NDA covers confidentiality. SOW covers deliverables, price, timeline, IP ownership. Two separate documents.
Skipping NDA to save time
Saves an hour, costs trust if you accidentally share something sensitive. Sign first, talk second.
FAQ
Common questions on mutual NDAs
Do I need a lawyer to review my NDA?
Yes for the first NDA with a new agency. Subsequent engagements with the same template can usually be reviewed in-house. The first review establishes baseline trust in the template; subsequent uses inherit it.
Can I share my own NDA template?
Most clients do. Many agencies prefer to start from a mutual template they already use, which has been negotiated across many engagements. Either is fine; what matters is that the final document is mutual and balanced.
What happens if the NDA is breached?
Injunctive relief (court order to stop the breach) plus damages. Practical enforcement is hard in cross-border situations, but reputational damage to a serial breacher is real and lasting.
Should the NDA reference the SOW?
Generally separate documents. Cross-references are fine (e.g. NDA survives termination of SOW), but neither should be embedded in the other.
Does mutual NDA expire?
Term is negotiable. Three years for general product information, indefinite for trade secrets. Both are common. The strict legal half-life of most product information is shorter than the term suggests.
What is a methodology carve-out?
A clause that excludes the agency’s pre-existing methodology, prompt templates, and process documentation from the definition of confidential information. Without it, the agency’s prior work is at risk every time it signs an NDA.
Free, 48-hour SLA, no sales call
Get a mutual NDA + scoped audit in two days
We sign mutual NDA before any product discussion, then return a free Product Audit with three integration options and one “don't build this” recommendation.