A business plan NDA and what to include before you share your plan

You are about to email your business plan to an investor, a prospective co-founder, or a supplier who wants to quote on the work. The deck contains your pricing, your financial forecasts, your supplier contacts, and the strategy you think gives you an edge. Before you hit send, someone has handed you a confidentiality agreement and asked you to check it, or you are wondering whether you need one at all.

A business plan non-disclosure agreement, or NDA, is a confidentiality contract. It sets out what the person you share your plan with can and cannot do with the information you give them. It does not stop you from talking to them. It does not hand them anything they could not already get from a public source. What it does is impose a contractual obligation on the recipient: they may receive your plan, but they may not use it to compete with you or disclose it to anyone outside the agreed purpose. It works alongside the separate equitable action for breach of confidence, but a written NDA gives you a clearer, stronger basis for enforcement than relying on that action alone.

This guide walks through the clauses you would expect to find in a well-drafted business plan NDA, what each one does, and the traps that cause problems later.

Defining what counts as confidential information

The first thing an NDA does is decide what is protected. This clause is a definition. It lists the material the recipient is bound not to use or disclose.

For a business plan, that definition will usually cover the plan itself together with its drafts and attachments, financial models and forecasts, budgets, pricing and cap tables, product roadmaps and technical specifications, marketing strategy, customer lists and market research, and supplier, manufacturer and logistics details with their commercial terms. Some NDAs also protect notes and analyses created from that information, so a recipient cannot get around the agreement by rewriting your figures in their own words.

The drafting choice that matters most here is between a narrow and a broad definition. A narrow list such as "the document marked confidential dated 1 March" is easy to enforce but easy to sidestep: everything you discuss in the meeting, or send in a follow-up email, falls outside it. A definition that says "all information disclosed" is comprehensive but can be attacked as vague, and courts are reluctant to enforce obligations that are so broad they are meaningless.

The convention most Australian NDAs settle on is a wide definition with carve-outs. The carve-outs are the exceptions. Material that is already public, material the recipient independently developed, and material they rightfully received from someone else who was not bound by confidentiality all fall outside the obligation. Keep those carve-outs in the document, because without them a court may read the NDA down or refuse to enforce it.

Permitted purpose

The second essential clause limits what the recipient may actually do with your information. It states the purpose for which the plan is being shared, typically "to evaluate a potential investment" or "to assess whether to quote for the work".

This clause is easy to skip and often the most valuable one in the document. Without it, the recipient who uses your pricing model to set up a competing venture has not obviously breached anything, because the NDA told them only that they could not disclose the plan, not that they could not act on it. With a clearly stated permitted purpose, using the information for anything else is a breach on its face.

Draft the purpose narrowly enough to be meaningful and no narrower than your deal requires. If the purpose is "to evaluate a possible investment and any related transaction", a recipient can legitimately share your figures with their own advisers as part of due diligence. If the purpose is too narrow, the recipient's honest conduct may be the very conduct you want to prevent.

An NDA between you and the investor does nothing on its own to stop the investor's junior analyst from seeing your plan. That is the job of the need-to-know clause.

This clause permits the recipient to share your information with their employees, contractors and advisers, but only to the extent they genuinely need it to assess the opportunity, and only where those people are themselves bound by confidentiality obligations at least as strict as the NDA.

The trap here is the unwritten assumption that your counterparty will police their own team. They rarely do. If this clause matters to you, name the obligation the recipient must impose on their people and keep the ability to be told who has seen the plan:

What it does: allows onward disclosure only where it is necessary and where the downstream recipient is equally bound.
Variant the other side pushes for: an unrestricted right to share with "any adviser or service provider", which opens the door to your competitors if they use the same advisers.
Trap that causes downstream problems: no obligation on the recipient to notify you when they have shared the plan at all.

Security and handling

A security clause tells the recipient how to look after the information. It usually requires them to store it securely, restrict access to authorised people, avoid copying it unnecessarily, and flag any suspected loss or unauthorised access.

If you are sharing the plan electronically, specify acceptable platforms and safeguards, such as controlled folders with view-only or no-download settings, watermarked PDFs, or encryption. This clause is where a practical NDA earns its keep, because it makes the standard of care express rather than assumed.

The drafting choice that matters is whether the standard is objective or subjective. An obligation to use "reasonable precautions" is flexible and hard to breach. An obligation to comply with specified security steps, such as "protected by at least 128-bit encryption at rest", is easier to enforce when something goes wrong but also easier for the recipient to trip over inadvertently.

Return or destruction

When the discussions end, or when you ask, the recipient should be obliged to return or destroy every copy of your plan, including backups, printouts and notes derived from it.

This clause needs a defined process and timeline. A common approach is destruction within a stated number of days of the request or the end of the negotiations, with a written certificate of destruction. A sensible carve-out allows one archival copy to be kept where required by law or a compliance obligation, provided it stays confidential and is not used for any other purpose.

The trap is the "we will destroy it promptly" clause with no timeline and no certification. That gives you no way to know whether your plan has actually been deleted or now sits in a competitor's file. If the sensitivity of your plan justifies it, ask for audit rights or a written confirmation that puts the burden of proof on the recipient.

Term and survival

Every NDA needs to say how long the confidentiality obligation lasts, and whether it survives the end of the relationship.

For commercial details such as pricing and a business plan, a term of two to five years is common. Trade secrets and true proprietary know-how may justify a longer term or an indefinite obligation, but an open-ended NDA can be harder to enforce and will put off some signatories. The more realistic the term, the more likely a court is to hold the recipient to it.

The survival clause is closely related. It says that the confidentiality obligation continues to apply after the NDA or the underlying discussions have ended. Without it, the recipient could argue the obligation ended the moment the meeting did. The drafting choice is to make survival explicit and to tie it to the return or destruction clause: confidentiality survives, but only in respect of information that has not been returned or destroyed.

Remedies and enforcement

A remedies clause governs what you can do if the recipient breaks the agreement. Its centrepiece is usually the right to seek urgent court orders, or injunctions, to stop the unauthorised use or disclosure before the damage is done. An injunction is often the only remedy that matters for a business plan, because by the time a breach is complete the plan is already in the open.

Australian courts will grant an interlocutory injunction where there is a serious question to be tried and the balance of convenience favours the applicant, a test confirmed by the High Court in Australian Broadcasting Corporation v O'Neill [2006] HCA 46. A clear NDA that identifies the confidential information and the permitted purpose makes the "serious question" far easier to establish.

The drafting choice here is whether to add a liquidated damages clause. A fixed amount per breach is easy to administer but can be struck down as a penalty if it is not a genuine pre-estimate of loss. For a business plan, where the real loss is often unquantifiable, most lawyers prefer the injunction plus a claim for damages or account of profits rather than a fixed sum.

Jurisdiction and governing law

An NDA must say which law applies and where a dispute would be heard. For a purely domestic Australian deal, the usual choice is the law of a state, commonly New South Wales, with the courts of that state having jurisdiction.

The trap for a business plan is the overseas counterparty. If your investor or supplier is offshore, state that the agreement is governed by Australian law and that service of proceedings is workable in practice. A jurisdiction clause that cannot be enforced against a foreign party is worse than none, because it creates the illusion of protection. If cross-border risk is real, consider an international form of NDA that expressly addresses foreign law and service from the outset.

No licence and no guaranteed deal

Two short clauses protect you from implied consequences of sharing the plan. The no-licence clause states that disclosing the plan does not grant the recipient any right to use your intellectual property. The no-deal clause states that neither party is obliged to proceed with an investment, partnership or other transaction just because the plan was shared.

These clauses matter because they close off arguments that a recipient might otherwise run. Absent a no-licence clause, a recipient could argue that handing over the plan and discussing it amounted to an implied permission to use the material. Absent a no-deal clause, a disappointed investor could argue that the exchange created an expectation of a transaction. These are short clauses, but they prevent small disputes from becoming large ones.

Ownership and retention of intellectual property

The final substantive clause makes explicit what you hope is obvious: you retain all rights in the plan and the information it contains, and the NDA does not transfer any of them.

This clause sits alongside wider intellectual property steps. Copyright in Australia protects the expression of your plan, the particular words and layout, not the underlying business idea, a principle long recognised under the Copyright Act 1968 (Cth). An NDA does not give you a trade mark or a registered design. If your brand name or a distinctive product is central to the plan, mention in the NDA that you own it and take the separate step of considering protection for it, because confidentiality alone does not stop someone adopting a similar name.

Situational clauses worth adding

Beyond the core clauses, a business plan NDA sometimes needs extras depending on how the plan will be shared:

Mutual versus one-way form: if you and the other party are both sharing confidential information, a mutual NDA binds both of you, rather than a one-way form that only protects you.
Cross-border coverage: an international NDA that fixes governing law, jurisdiction and service for an offshore investor or supplier.
Non-solicitation and non-compete: where a consultant or supplier sees your strategy and contacts and you want to stop them poaching staff or clients for a period.
Tail or surviving obligations: express wording that certain obligations, such as confidentiality and return of information, continue after the NDA ends or the deal falls through.
Independent development carve-out: protection for information the recipient can prove they developed independently, which narrows disputes about who knew what first.

Where an Artificer Legal practitioner can help

You can buy a generic confidentiality template, but a business plan NDA is a document you are likely to rely on in a dispute, and that is where generic drafting shows its weaknesses. An Artificer Legal practitioner would start by checking the definition of confidential information, because that is the clause a court reads first and the one most often drafted so broadly it is unenforceable.

We would then work through the permitted purpose and the survival and term clauses, because those determine what conduct is a breach and how long you can enforce it. We would push back on an unrestricted right to share with advisers, and we would advise on whether your deal needs a mutual form, a cross-border variant, or non-solicitation protection that a standard template omits. We would also make sure the NDA is consistent with the longer documents you will sign later, such as a heads of agreement or a shareholders agreement, so that confidentiality survives the transition from preliminary discussion to binding deal.

The clause that decides whether your NDA works

For a business plan, the clause that most often separates an NDA that works from one that does not is the permitted purpose. It is the clause people skip because the definition of confidential information feels more important, but it is the clause a dispute turns on. The other side rarely disputes that they received your plan or that it was confidential. They dispute what they were allowed to do with it. If the permitted purpose is clear and narrow, their use of your plan to advance a competing venture is a straightforward breach. If it is vague or missing, you are left arguing about whether the conduct was prohibited at all.

In short, a strong business plan NDA defines what is confidential, states plainly what the recipient may do with it, sets a realistic term and security standard, and gives you a practical path to an injunction when something goes wrong. Drafted that way, it is a document you can sign quickly and, if you ever need it, enforce.

If you would like the terms of a business plan NDA tailored to your deal, an Artificer Legal practitioner can draft one that fits the way you intend to share your plan.