Mutual NDA checklist before a data inventory conversation
A mutual NDA for a data inventory conversation should name both parties, limit use to evaluating a licensing arrangement, set a defined term and say nothing is binding until a separate agreement is signed. The inventory is metadata, not records. Have your own counsel review before signing.
What should a mutual NDA cover before an inventory conversation?
It should name the parties, define confidential information, limit use to evaluating a possible data licensing arrangement, set a term, and say what happens to information when the talks end. For a SourceX inventory conversation the exchange is light: system names, years in use, owners and rough volumes. No records are shared at this stage.
This page is a checklist for the business owner, not a form to sign. This is general information, not legal, tax or financial advice. Have your own counsel review any agreement and confirm what applies in your state.
Do you need an NDA at all?
Often an NDA is a sensible courtesy, and some companies require one for any outside conversation. The point to understand is what the inventory actually contains. It is metadata about systems, and the page on data catalog vs data inventory vs data map shows how much lighter it is than a field-level map. Confidential records are never part of the inventory.
| Situation | NDA worth asking for? | Reason |
|---|---|---|
| First call about fit | Optional | Only basic company facts are discussed |
| Sharing a list of systems and years | Reasonable | The list is internal information |
| Showing screenshots or samples | Do not do this | Not part of the inventory at all |
| Sharing contracts or customer names | Avoid | Not needed for an inventory |
| Discussing price and terms | Covered by the licensing agreement | Handled in the executed deal documents |
The checklist
Parties and purpose
- Both legal entity names are correct, with the state of formation.
- Both sides are bound; a mutual agreement protects each side's information.
- The purpose is narrow: evaluating a possible data licensing arrangement.
- No other use, such as marketing or model training, is allowed under the NDA.
Definition of confidential information
- Includes information that is marked confidential and information a reasonable person would treat that way.
- Covers oral and written information and the inventory itself.
- Excludes public information, information independently developed and information already known.
- Makes clear that the NDA is not a transfer of ownership; the company keeps ownership of its data.
Handling and term
- A fixed term for the confidentiality duty, and a longer period for trade secrets if applicable.
- A clear instruction on return or destruction of materials at the end.
- A short list of people who may see the information.
- A rule for compelled disclosure, where the receiving side tells the other first if allowed.
Boundaries
- Says nothing is binding until a separate agreement is signed on price and terms.
- Says neither side must go ahead with a deal.
- Does not grant exclusivity or any license by itself.
- Does not commit the company to share records.
What does the SourceX inventory actually involve?
The company lists each system, its years of history, rough volume, owner and whether it can be exported. The sponsor can use the data inventory interview questions to gather it. Nobody uploads or describes confidential records. If the company has been through a tenant or platform migration, the Microsoft 365 retention policy checklist shows what to confirm about archives, and the exportability checklist shows how to find out whether tools allow exports.
De-identification and redaction requirements are agreed with the company before any work begins, and data is delivered only after an executed agreement and the company's authorization. The NDA is therefore a light-touch step, not the final contract.
Red flags in an NDA
| Clause | Why it matters | What to do |
|---|---|---|
| One-way obligations on you only | Leaves the other side free to disclose | Ask for mutual terms |
| Perpetual duty with no end | Hard to administer | Ask for a defined term |
| Broad "residuals" clause | May let the other side use what they remember | Ask counsel to narrow or remove |
| License of your data or ideas | Goes beyond confidentiality | Strike it |
| Exclusivity or non-compete | Not an NDA topic | Remove; handle in the main agreement |
| Assignment without consent | Rights may pass to an unknown party | Require written consent |
How the NDA fits the sequence
- A partner introduces the company, or the owner applies directly at sourcex.si/apply.
- SourceX qualifies the company on size, history, data breadth and rights.
- If an NDA is requested, counsel reviews it before the inventory starts.
- The company completes the data inventory.
- Price and terms are agreed; buyers review; the deal closes only if the company signs.
Partners are not parties to the NDA and do not receive inventory contents. If you advise the company and have a role in a referral, check the who qualifies baseline first and read the introduction email builder for preparing an owner-approved message. The guide to business data inventory preparation in a client conversation covers the discussion with the owner.
What to ask your counsel
- Does our state have rules affecting the term or scope of a confidentiality agreement?
- Do our customer contracts restrict sharing even system names or categories?
- Who signs for the company, and do we need board approval?
- Do we want a clause covering information shared by employees or contractors?
Next step
Review the checklist with counsel before the inventory conversation, then confirm who the authorized sponsor is. If you advise the owner and wish to make the introduction, register as a partner.
- Step 1Share your linkSend your personal link to a company you know.
- Step 2Company appliesThe company applies itself at /apply.
- Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
- Step 4You get your rewardYour share of SourceX fees becomes payable.
Common questions
Is an NDA required before talking to SourceX?
This page cannot confirm SourceX's NDA practice, and the program process lists qualification, inventory, price and terms rather than an NDA step. If your company policy requires one for any outside discussion, ask for a mutual one before the inventory step and have counsel review it. The inventory is metadata and never includes confidential records.
What is the difference between a mutual and a one-way NDA?
A mutual NDA binds both sides to protect each other's confidential information, while a one-way agreement binds only the receiving side. For an inventory conversation, where both parties share business information, a mutual agreement is the more balanced starting point. Your counsel can advise on the exact terms.
How long should the confidentiality term be?
There is no single correct length; it depends on the sensitivity of the information and your counsel's advice. Look for a defined term with an end date rather than an open-ended duty, and ask whether trade secrets need longer protection. Confirm with counsel in your state.
Does signing an NDA mean we have agreed to license our data?
No. An NDA only covers confidentiality of the discussions. Nothing is binding on a licensing deal until the company agrees price and terms and signs a separate agreement. The company keeps ownership of its data and can walk away at any point before signing.
Do partners or advisors sign the NDA?
Partners make introductions and give basic fit information only, so they are not parties to the company's confidentiality agreement and do not receive inventory contents. If your own advisor will sit in the inventory conversation, ask counsel whether they should sign a separate confidentiality undertaking.
Related pages
- Data catalog vs data inventory vs data map: what owners need first
- Data inventory interview questions for each department head
- Microsoft 365 retention policy checklist before a tenant migration
- Exportability checklist: can the company's SaaS data be exported?
- Which US businesses are a fit for a SourceX data licensing introduction
- Prepare an owner-approved company introduction email
Free resources
- Working capital calculator — Net working capital, current ratio and quick ratio.
- Due diligence checklist generator — A tailored document request list by deal type.
- Cash flow calculator — A 12-month cash forecast with shortfalls highlighted.
- All free tools · MCP resource center
By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09
Know a US company with valuable proprietary data?
Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.
Refer a company →I own a business
Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.
Start an assessment