Singapore NDAs for Foreign Founders: 3–5 Year Terms and PDPA Clauses

Published: 3 October 2026 · Reviewed by Ray Tay, Co-Founder & Managing Director, VIVOS PTE. LTD. (ACRA Filing Agent FA20240323 · MOM EA Licence 24S2425)

An NDA is a signed contract that lawfully binds recipients to keep disclosed confidential information private. In Singapore, enforceability depends on the information’s quality of confidence and the circumstances of disclosure, a test the Court of Appeal has refined in recent years. NDAs can run mutual or one-way, with confidentiality terms commonly set at 3 to 5 years, though trade secret obligations may last indefinitely, per Singapore Courts guidance-pte-ltd-v-hong-ying-ting_smu-case-brief.pdf?sfvrsn=dfd16ba5_4) as of 2026.

TL;DR:

• A Singapore NDA’s enforceability depends on the information’s confidence quality and the circumstances of disclosure, with recent case law shifting the evidentiary burden to defendants.
• Drafting with specific categories, clear purposes, and defined scope reduces risks of invalidity, especially when including clauses on return, damages, and jurisdiction.
• Data protection clauses are necessary when sharing personal data, requiring restrictions on overseas transfer and breach notifications, separate from standard confidentiality agreements.
• Co-founders and external parties like vendors or nominee directors should use mutual or scope-limited NDAs tailored to the relationship, rather than generic templates.
• Foreign founders should execute NDAs under Singapore law, specify the purpose and recipient, and keep records to support enforcement in cross-border situations.

Table of Contents

• What is a non-disclosure agreement and what it protects
• Types of NDAs and choosing the right form
• Is an NDA legally binding in Singapore?
• What should a Singapore NDA include?
• PDPA and NDAs: data protection clauses to include
• Do I need an NDA with a co-founder?
• Signing an NDA with a foreign counterparty: step by step
• Remedies and enforcement: what Singapore courts do
• Templates, clause table, and pre-sign checklist
• Author perspective: common NDA pitfalls for foreign founders
• How VIVOS can help with NDA drafting and company setup
• Sources
• FAQ

What is a non-disclosure agreement and what it protects

A non-disclosure agreement, sometimes called a confidentiality agreement or proprietary information agreement, is a contract that restricts how a recipient can use or share information marked confidential. It covers trade secrets, client lists, pricing models, technical know-how, and unreleased product plans. IPOS advises that NDAs and confidentiality clauses are standard tools for protecting trade secrets, particularly with consultants and vendors who sit outside the usual employee duty of confidence.

An NDA has limits. It will not protect information that is already public, independently developed by the recipient, or disclosed without any confidentiality marking or context. For foreign founders setting up in Singapore, this plays out constantly:

• A founder sharing a pitch deck with a prospective investor before a term sheet is signed.
• A nominee director who needs sight of financial records to fulfill statutory duties.
• A corporate secretary or accountant handling payroll data during onboarding.

Types of NDAs and choosing the right form

Three structures cover most Singapore business scenarios. A unilateral NDA binds only the receiving party and suits situations where one side discloses and the other does not, such as a founder briefing a contractor. A mutual NDA binds both parties and fits partnership talks, joint ventures, or co-founder discussions where each side shares sensitive material. A multilateral NDA covers three or more parties and suits consortiums or multi-vendor onboarding during incorporation.

1. Ask who is disclosing: one side only, or both.
2. Ask how many parties will have access to the material.
3. Ask whether the relationship might evolve, a one-way NDA with an investor can later need a mutual version once a deal structure forms.

Founders pitching to investors should generally expect a unilateral NDA. Co-founders and strategic partners should insist on mutual terms so obligations run both ways.

Is an NDA legally binding in Singapore?

Singapore courts will enforce an NDA, and a breach of confidence claim more broadly, where two conditions are met: the information has the necessary quality of confidence, and it was imparted in circumstances importing an obligation of confidence. The Court of Appeal’s decision in I-Admin v Hong modified this test: once those two elements are shown, breach is presumed, and the burden shifts to the defendant to rebut it.

The I-Admin decision shifted the evidentiary burden in breach of confidence claims, meaning claimants no longer need to prove misuse from scratch once confidentiality and improper circumstances are established, according to the case brief published by Singapore’s judiciary.

Evidence that strengthens a claim includes:

• Clear confidentiality labels on shared documents.
• A defined, limited recipient list.
• A stated permitted purpose for disclosure.
• A documented timeline of when material was shared and with whom.

Courts typically consider injunctions to stop further use, along with equitable damages or an account of profits where the breach has already caused harm.

What should a Singapore NDA include?

A well-drafted NDA is narrow, specific, and purpose-limited. Broad, catch-all definitions of “confidential information” are a common weakness that courts and counterparties alike will push back on. Practical guides note that overbroad definitions and missing permitted-purpose language are the most frequent drafting errors in Singapore NDAs.

Drafting principle: define confidential information by category and example, name the permitted purpose explicitly, and avoid language that tries to cover everything at once.

PDPA and NDAs: data protection clauses to include

When an NDA involves personal data, contract law alone is not enough. The PDPC’s guide on data protection clauses recommends specific contractual safeguards for any agreement where personal data changes hands, separate from general confidentiality wording.

Add these where personal data is part of the shared material:

• A limited-processing clause tying use strictly to the stated purpose.
• A restriction on overseas transfer unless safeguards are in place.
• A breach notification obligation with a defined timeframe.

Pro Tip: When personal data forms a meaningful part of what you are sharing, pair the NDA with a short data-processing agreement rather than stretching one document to cover both jobs.

Do I need an NDA with a co-founder?

Co-founder discussions often involve more sensitive material than investor pitches, including product architecture, customer data, and equity structure. A mutual NDA protects both sides while terms are still being negotiated, though many founders pair it with a founders’ agreement and IP assignment clause once the venture takes shape.

• Employees: a confidentiality clause inside the employment contract is usually sufficient; a standalone NDA is rarely needed.
• Contractors and consultants: a standalone NDA is standard practice, since IPOS notes this group falls outside the common-law duty owed by employees.
• Co-founders: use a mutual NDA before formal commitments, then formalize ownership through an IP assignment or founders’ agreement.
• Vendors and nominee directors: scope the NDA to the specific records or systems they will access during incorporation, nothing broader.

Signing an NDA with a foreign counterparty: step by step

Cross-border signings raise extra questions around which law applies and how evidence will hold up later.

1. Choose Singapore law and jurisdiction where at least one party is based here or the confidential activity happens locally.
2. Define the permitted purpose and recipient list before any document is shared.
3. Execute using counterparts or electronic signatures, confirming each signatory’s authority in writing.
4. Add transfer safeguards for personal data crossing borders, consistent with PDPC advisory guidelines.
5. Keep dated records of transmission, access logs, and signed copies in case enforcement becomes necessary.

Remedies and enforcement: what Singapore courts do

Once a breach is established, Singapore courts typically consider an injunction to stop continued use first, since that addresses the ongoing harm directly. Equitable damages or an account of profits follow where the breach has already caused measurable loss.

Once information has the necessary quality of confidence and was imparted in circumstances importing an obligation of confidence, breach is presumed and the burden shifts to the defendant to rebut it.
Court of Appeal guidance in I-Admin v Hong, as summarized in the judiciary’s case brief

Preparing a strong case means preserving the same evidence that supports enforceability in the first place:

• Document access logs and metadata showing who viewed what, and when.
• Retain the original signed NDA and any amendments.
• Keep a record of the permitted purpose communicated at the time of sharing.

Templates, clause table, and pre-sign checklist

The clause table above works as a starting template: adapt the definition of confidential information and the permitted purpose clause to match whether you are dealing with a founder, a vendor, or a nominee director.

Before signing, confirm:

• The recipient list is specific, not open-ended.
• The permitted purpose is stated in writing.
• Duration matches the sensitivity of the information involved.
• Governing law and jurisdiction are specified.
• A return or destruction obligation is included with a deadline.

For founders structuring incorporation-stage agreements, reviewing a due diligence checklist for Singapore alongside the NDA helps confirm nothing is left exposed.

Author perspective: common NDA pitfalls for foreign founders

The most common mistake we see is founders sending a one-size-fits-all NDA to an investor, a vendor, and a nominee director, with no adjustment to purpose or scope. A registered filing agent can provide Singapore company incorporation services for foreign founders, including nominee resident director under a signed agreement, registered address, corporate secretary, and bank account opening, also serving Malaysia, Hong Kong, and the UAE, with English and Mandarin support. A tighter, purpose-specific NDA at each stage avoids most of the disputes we encounter.

— Ray

How VIVOS can help with NDA drafting and company setup

Setting up in Singapore from abroad means sharing sensitive material with people you have not met in person: a nominee director, a corporate secretary, a bank officer. A registered filing agent can provide Singapore company incorporation for foreign founders, with a nominee resident director under a signed agreement, registered address, corporate secretary, and bank account opening, structured so confidentiality obligations are built into the relationship from day one.

We also support incorporation and compliance in Malaysia, Hong Kong, and the UAE, with service delivered in English and Mandarin. If you are preparing to share financials, product plans, or cap tables with a service provider during setup, start with our foreign-founder incorporation services and we will help structure the agreements around it, including bespoke NDA drafting where needed. You can review current packages on our pricing page.

Sources

For primary guidance beyond this explainer:

• Trade secret | Intellectual Property Office of Singapore
• Guide on data protection clauses for agreements relating to the processing of personal data | PDPC
• Non-Disclosure Agreements in Singapore | SingaporeLegalAdvice

FAQ

Can I write my own non-disclosure agreement?

Yes, nothing in Singapore law requires a lawyer to draft an NDA, and many founders start from a template. The risk sits in overbroad or vague definitions of confidential information, which is the most common reason NDAs fail to hold up when tested.

How serious is a non-disclosure agreement?

An NDA is a binding contract, and Singapore courts can issue injunctions or award damages for breach once the information’s confidential quality and the circumstances of disclosure are established. Treat it with the same seriousness as any other commercial contract you sign.

In what cases can you break an NDA?

Courts generally accept exceptions where the information was already public, independently developed, or disclosed under legal compulsion such as a court order or regulatory requirement. Whistleblower disclosures made in the public interest can also fall outside an NDA’s reach, a distinction explored further by Serendib Law Firm.

Is NDA mandatory?

No single law requires an NDA for every business relationship in Singapore. It becomes a practical necessity whenever you share trade secrets, client data, or unreleased plans with a vendor, nominee director, or co-founder who has no other confidentiality obligation in place.

Recommended

• First 90 Days: PDPA Compliance Playbook for Singapore Founders
• Singapore Due Diligence Checklist: 14 Points for Foreign Founders
• Same Day Compliance: Singapore Resident Director for Foreign Founders
• The Foreign Founder’s Guide to Incorporating a Company in Singapore (2026)