Trade secret carve-outs in confidentiality clauses

Most confidentiality clauses include a survival period, three years, five years, seven years, after which the Recipient's obligations end. That works for the bulk of what gets shared in a typical business conversation: pricing, roadmaps, customer lists, operational details that decay in value over time. It does not work for trade secrets. A trade secret's legal protection is tied to its secrecy, and a clause that caps protection at five years effectively destroys the trade-secret status of the information at year five, whether anyone has actually disclosed it or not.

The trade secret carve-out is the drafting mechanism that prevents this. It's usually a single sentence inside the confidentiality survival clause, and it reshapes the entire protection regime for the subset of information that qualifies as a trade secret. A well-drafted carve-out preserves indefinite protection for the genuinely sensitive material without burdening the Recipient with a perpetual obligation on every email, deck, and spreadsheet that crossed the table during due diligence.

This is a walkthrough of what the carve-out actually does, the drafting patterns that appear in real agreements, and the mistakes that commonly neutralize it.

Why trade secrets need separate treatment

A trade secret, under US and most comparable legal frameworks, is information that derives economic value from not being generally known and is the subject of reasonable efforts to maintain its secrecy. The definition is functional: the information's status depends on whether it remains secret and whether the owner has taken reasonable steps to keep it that way.

Two properties flow from that definition and matter for drafting:

1. Trade secret status is perpetual as long as the secrecy holds. There's no inherent clock. Coca-Cola's formula, Google's ranking algorithms, and most manufacturing processes can qualify for trade-secret protection indefinitely.
2. Trade secret status can be lost through inadequate protection. If the owner allows the information to become public, fails to require confidentiality from recipients, or lets protections lapse, the trade-secret status goes away.

A confidentiality clause with a fixed survival period runs straight into both properties. If the clause says obligations end after five years, the information has been contractually released after five years, which looks a lot like failing to take reasonable efforts to maintain secrecy. The trade-secret status erodes along with the contractual protection.

The carve-out fixes this by splitting the confidentiality regime in two: general Confidential Information gets a finite survival period; information that constitutes a trade secret gets indefinite protection, for as long as it remains a trade secret under applicable law.

What a clean carve-out looks like

A typical well-drafted carve-out, nested inside the survival clause:

"The confidentiality obligations set forth in Section 3 shall survive for a period of five (5) years following termination of this Agreement; provided, however, that with respect to any Confidential Information that constitutes a Trade Secret under applicable law, such obligations shall continue for so long as such information remains a Trade Secret."

That sentence does three things:

• It establishes the default survival period (five years) for the bulk of Confidential Information.
• It defines a separate regime for information that qualifies as a Trade Secret.
• It ties the trade-secret protection to continued trade-secret status rather than a fixed date.

The phrase "for so long as such information remains a Trade Secret" is load-bearing. If the information loses its trade-secret status for reasons unrelated to the Recipient's breach, public disclosure, independent development, reverse engineering from a lawful source, the obligation also ends. The carve-out isn't perpetual in the absolute sense; it's perpetual for as long as the underlying protection would exist anyway.

Variations and when they appear

A few variations on the standard pattern show up in real agreements, and the differences matter.

"For so long as" vs. "in perpetuity"

Some clauses extend trade-secret protection "in perpetuity" or "indefinitely" without tying the obligation to continued trade-secret status. That's stronger-sounding but often problematic for the Recipient, because it survives loss of trade-secret status in the ordinary course. A Recipient who learned a process subject to an NDA is still bound indefinitely, even after the process becomes public through the Discloser's own later disclosure or a third-party's independent discovery.

The "for so long as" formulation tracks the law more closely and is generally easier to negotiate.

"Under applicable law" vs. specific statute references

Broad references to "applicable law" accommodate different jurisdictions and statutory schemes. Specific statute references, for example, to the US Defend Trade Secrets Act or state Uniform Trade Secrets Act analogs, can be sharper but risk gaps if the agreement operates in multiple jurisdictions or the parties later relocate.

Most agreements use the generic "applicable law" phrasing unless there's a specific reason to anchor to a particular statute.

Explicit vs. implicit definition

Some agreements define "Trade Secret" in the definitions section, often by reference to a statutory definition. Others leave it to be determined under applicable law at the time a dispute arises. The defined-term approach produces more predictability; the undefined approach provides more flexibility but leaves more room for argument.

A defined-term version might read:

"'Trade Secret' means information that constitutes a trade secret under the Defend Trade Secrets Act or any comparable state or foreign law."

That's workable and reasonably portable across jurisdictions.

Identification requirements

A small number of clauses require the Discloser to identify specific information as a trade secret at the time of disclosure, either by marking or notice. That's favorable to the Recipient, it shifts operational burden to the Discloser and limits surprise claims that unmarked information was a trade secret all along.

The counterargument is that trade secrets don't always announce themselves at the moment of disclosure, and marking requirements can cause valid trade-secret information to lose carve-out protection over a drafting failure. Most agreements stop short of marking requirements for trade secrets, even when they include marking requirements for general Confidential Information.

Where the carve-out gets neutralized

A carve-out that looks correct on first read can be undermined by other provisions in the same agreement. The most common neutralizers:

Residuals clauses that sweep in trade secrets

A residuals clause (see the adjacent post on this) permits the Recipient to use information retained in "unaided memory" after the engagement. If the residuals clause doesn't expressly exclude trade secrets, the residuals carve-out can eat the trade-secret carve-out. An employee who remembers a trade-secret process can use it freely under the residuals language, notwithstanding the perpetual protection elsewhere in the agreement.

Balanced drafting explicitly excludes trade secrets from the residuals clause, typically with language like "this residuals provision shall not apply to any information that constitutes a Trade Secret."

Broad definitions of "publicly available"

Most confidentiality clauses exclude "publicly available" information from their protections. If "publicly available" is defined too loosely, for example, to include any information "accessible through commercial means", the exception can reach trade secrets that were leaked, reverse-engineered by a third party, or posted briefly online before being taken down.

Tight drafting limits the exclusion to information that is publicly available through no fault of the Recipient and requires the Recipient to have a reasonable basis to believe the information is genuinely public.

Independent development carve-outs without evidentiary requirements

Every confidentiality clause has an independent-development exception: information the Recipient developed on its own without reference to the Discloser's information isn't subject to the confidentiality obligations. The exception is necessary and appropriate, but it's also exploitable when there's no evidentiary requirement.

A provision like "nothing in this Agreement restricts Recipient's use of information independently developed by Recipient's personnel who did not have access to Confidential Information" is reasonable. A provision that permits independent development with no documentation requirement can be used to launder trade-secret information through a claim of parallel invention.

Compelled-disclosure provisions without notice

Confidentiality clauses typically permit disclosure when required by law, court order, or regulatory process. The standard protective measure is a notice requirement: the Recipient must notify the Discloser of the compelled disclosure (where legally permitted) so the Discloser can seek a protective order.

If the compelled-disclosure provision omits the notice requirement, the Recipient can disclose trade secrets in response to a subpoena without giving the Discloser any chance to protect the information. Trade-secret status can be compromised by a single uncontested compelled disclosure.

Commercial implications

The trade-secret carve-out has practical consequences beyond the legal framework:

• The Recipient carries indefinite obligations on a narrow category of information. Trade-secret protection doesn't expire, so the Recipient's obligation to maintain confidentiality continues through personnel changes, system migrations, and corporate restructuring. Operational systems need to support that.
• The Discloser carries ongoing diligence obligations. Trade-secret status depends on "reasonable efforts" to maintain secrecy. A Discloser who negotiates a trade-secret carve-out but then shares the same information without NDAs in other contexts undermines the status, and, by extension, the carve-out.
• Disputes tend to be harder to resolve. Disputes over general Confidential Information within a fixed survival period are often resolved on the clock ("it's been more than five years, the obligation has expired"). Trade-secret disputes require litigating whether the information actually qualifies as a trade secret, which is fact-intensive.

Common negotiation outcomes

In practice, trade-secret carve-outs are usually accepted by sophisticated Recipients, but the specific language gets negotiated. Typical outcomes:

• Acceptance of the "for so long as" formulation, not the "in perpetuity" formulation.
• Express exclusion of trade secrets from residuals clauses, where residuals clauses exist.
• Retention of the standard exceptions (public domain, independent development, third-party receipt) applied to trade secrets too, so the carve-out doesn't operate as an absolute perpetual obligation.
• Clarification that the carve-out doesn't create a separate affirmative protection regime beyond the contractual confidentiality obligations, it extends the time period, but doesn't change the substance of what counts as a breach.

The bottom line

The trade-secret carve-out is a short, important provision that keeps perpetual protection available for the category of information that legally warrants it, without imposing a perpetual obligation on every piece of Confidential Information that crosses the table. A clean carve-out uses the "for so long as" formulation, references applicable law rather than a specific statute, and coordinates with the other exceptions in the agreement, residuals, public domain, independent development, compelled disclosure, so those exceptions don't accidentally eat the protection the carve-out is meant to preserve.

The agreements that create problems later are usually the ones where the carve-out was added in isolation, without adjusting the surrounding provisions to match. A trade-secret carve-out in the survival clause and a trade-secret-swallowing residuals clause on the next page are a common pairing, and the residuals clause usually wins when the information actually leaks.

Reading the carve-out against the rest of the confidentiality section, at signature, is the point where the protection regime is actually built or broken.