How to Review an NDA Before You Sign (Common Red Flags, AI)
Why most NDAs are signed too fast to be safe
A non-disclosure agreement usually arrives 20 minutes before a meeting, attached to an email with the subject "Please sign before our call." Most signers open it, scan the first paragraph, and sign. The clauses they skipped become the rules for the next two years.
A weak NDA can cover everything you ever knew about the topic, last forever, ban you from working in the same field for years, and make you personally liable for damages with no cap. None of these terms are legally bizarre. All of them are negotiable. Most signers never even notice them.
PDFcub's red flags scan reads the NDA and surfaces every clause that overreaches. The scan turns a five-page document into a clear list of what to push back on before you sign.
The seven red flags that show up in most overreaching NDAs
The same patterns appear across most aggressive NDAs. The list does not change much between industries or jurisdictions.
The first red flag is an overbroad definition of "Confidential Information". A reasonable NDA defines confidential information as material marked confidential at the time of disclosure. An overbroad NDA includes everything ever discussed, regardless of whether it was marked.
The second is a perpetual term. A reasonable NDA has a confidentiality period of 2 to 5 years. A perpetual NDA binds you forever and is hard to enforce but easy to use as a threat.
The third is the absence of standard exclusions. A reasonable NDA excludes information that is already public, that the recipient already knew, that was independently developed, or that was disclosed by a third party with the right to disclose. Without these exclusions, you are bound on information you should not be bound on.
The fourth is a no-residual clause. A reasonable NDA acknowledges that information remembered in your unaided memory is not a breach. Without this, anything you happen to remember from a meeting becomes a liability.
The fifth is an overbroad non-use clause. A reasonable NDA prevents you from using the confidential information for purposes other than evaluating the relationship. An overbroad version prevents you from working in the same field, which is functionally a non-compete.
The sixth is unlimited liability with no cap. A reasonable NDA caps liability at a specific dollar amount or at the value of the contract. Without a cap, a breach exposes you to unlimited damages.
The seventh is one-sided language. A reasonable NDA between two parties exchanging information is mutual; only the disclosing party has confidentiality obligations toward each piece of information they disclose. A one-sided NDA imposes obligations only on you.
How to scan an NDA with PDFcub
Step 1: Open the red flags tool
Go to pdfcub.com/ai/red-flags. The page loads instantly. No popups, no signup wall.
Step 2: Upload the NDA
Drag the PDF in or click to browse. The NDA loads in your browser. Only the extracted text is sent to the AI engine.
Step 3: Run the scan
Click scan. PDFcub reads every clause and flags the ones that match known patterns for overreaching NDA terms.
Step 4: Review each flag with the citation
Every flag links back to the exact clause. The AI explains what the clause means in practical terms and what a more balanced alternative looks like.
Step 5: Send a markup back to the other side
Most NDAs are templates and the other side has room to negotiate. Send a markup with specific changes rather than asking for "the NDA to be made fair".
How to handle the definition red flag specifically
The definition of "Confidential Information" is the foundation of the NDA. Get it right and the rest of the agreement makes sense. Get it wrong and every other clause becomes broader than it should.
The fix is to require marking. Add language like: "Confidential Information means information that is (a) marked as confidential at the time of disclosure if disclosed in writing, or (b) identified as confidential at the time of disclosure if disclosed orally and confirmed in writing within 14 days."
This forces the disclosing party to think about what they are calling confidential. It also gives you a clear record of what is covered, instead of a vague claim that everything was confidential.
How to handle the term red flag specifically
A perpetual NDA is rarely necessary and almost always asymmetric. Trade secrets deserve indefinite protection; most other confidential information does not.
The fix is a finite term. Add language like: "This Agreement and the obligations of the Receiving Party will terminate 3 years after the Effective Date, except with respect to information that constitutes a trade secret under applicable law, which will continue to be protected for as long as it remains a trade secret."
This carves out genuine trade secrets while giving you a clear endpoint for everything else.
Why a privacy-first NDA scan matters
An NDA contains the names of both parties, the topic of the relationship, and often the project details you are about to discuss. Uploading that to a public AI chatbot can leak the very information the NDA is meant to protect.
PDFcub keeps the NDA in your browser. Only the relevant clause text is sent to the AI engine for scanning, and it is discarded after the answer returns. We have no copy of the NDA and no log of its terms.
For NDAs covering sensitive M&A or product roadmap discussions, the privacy matters even more. A public chatbot is the opposite of what an NDA is for.
How to handle the liability red flag specifically
Unlimited liability is the most expensive clause in an aggressive NDA. A breach that the disclosing party claims caused them $10 million in damages can be claimed against you with no cap.
The fix is a liability cap and a damages limitation. Add language like: "The liability of either party for any breach of this Agreement will be limited to direct damages and will not exceed [a specific amount or the value of the underlying transaction]. Neither party will be liable for consequential, indirect, or punitive damages."
This is standard contract language and most counterparties accept it without difficulty.
How to handle a mutual versus one-sided NDA
If you are exchanging information with the other side, the NDA should be mutual. A one-sided NDA where only you have confidentiality obligations is asymmetric and usually means the other side wants the option to walk away with your information.
The fix is to convert the NDA to mutual. Most templates support this with a single edit. Replace "Receiving Party" and "Disclosing Party" with "Party" throughout, and make the obligations run both ways.
If the other side insists on a one-sided NDA, ask why. The answer is sometimes legitimate (you are receiving information about an acquisition target, for example) and sometimes a tell that the relationship is not as mutual as the conversation suggested.
How to spot risks that AI might miss
AI scans are strong on standard NDA patterns. They are weaker on jurisdiction-specific terms and on industry-specific clauses.
For NDAs governed by foreign law, watch for jurisdiction and venue clauses that force you to litigate in another country. For NDAs in regulated industries, watch for clauses that conflict with your regulatory disclosure obligations.
For these specific risks, use PDFcub's chat with PDF to ask targeted questions. A prompt like "Are there any clauses in this NDA that would conflict with my regulatory disclosure obligations as a [profession]?" returns a focused answer.
When you should refuse to sign an NDA
Some NDAs are dealbreakers, especially when the other side refuses to negotiate.
A perpetual NDA covering an overbroad definition of confidential information, combined with unlimited liability and a non-use clause that functions as a non-compete, is a dealbreaker. You are signing yourself out of your professional life on terms that no project is worth.
A unilateral NDA imposed on an exchange that is genuinely mutual is also a dealbreaker. The asymmetry is a signal about how the other side will behave in the relationship itself.
An NDA with a jurisdiction clause requiring you to defend a claim in a country you cannot reach affordably is a dealbreaker. Even if you win on the merits, the cost of defending is the punishment.
FAQ
Can the AI scan replace a contracts lawyer?
No. It surfaces clauses that often cause trouble in NDAs and explains why, so you can ask better questions. A lawyer should still review any NDA with significant liability exposure or any NDA tied to a major business transaction.
Will the scan work on a mutual NDA?
Yes. The scan works on both mutual and unilateral NDAs. The red flag patterns differ slightly between the two, and the AI surfaces the right ones for each.
Does PDFcub keep my NDA on any server?
No. The NDA stays in your browser. Only the relevant clause text is sent to the AI engine for scanning, and it is discarded after the answer returns.
Can I run the scan on a short-form NDA, like a one-page click-through?
Yes. The scan works on any document with confidentiality terms, no matter how short. One-page NDAs often have more red flags because they leave out the standard exclusions.
Is there a file size limit?
Free users get a small starter allowance. Pro users can scan NDAs up to 100MB. Both run in the browser, with no upload of the file itself to a third-party server.
Final takeaway
An NDA signed in a hurry is a multi-year obligation accepted in 20 minutes. Scan yours before you sign at pdfcub.com/ai/red-flags. Free trial, private, and ready in seconds.