Establishing secure connection…Loading editor…Preparing document…

Confidentiality Agreement Annex

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

CONFIDENTIALITY AGREEMENT ANNEX

This Confidentiality Agreement Annex (the "Annex") is made and entered into as of Effective Date: by and between First Party: with principal place of business at and Second Party: with principal place of business at .

RECITALS

WHEREAS, the parties are bound by a primary confidentiality agreement executed by the parties on (the "Master Agreement"); and

WHEREAS, the parties desire to amend, supplement, or specify certain additional categories of Confidential Information and procedures governing disclosure under the Master Agreement as set forth in this Annex; and

WHEREAS, capitalized terms used but not defined in this Annex shall have the meanings assigned in the Master Agreement unless otherwise defined herein.

NOW THEREFORE, in consideration of the mutual covenants set forth herein and other good and valuable consideration, the parties agree as follows:

1. DEFINITIONS

1.1 "Annex Confidential Information" means any information, whether written, oral, electronic, or visual, specifically identified by the Disclosing Party as subject to this Annex and provided to the Receiving Party pursuant to the Master Agreement or in contemplation thereof, including without limitation the categories described in Section 2 below and any notes, analyses, compilations, studies or other materials derived therefrom.

2. ADDITIONAL SCOPE OF CONFIDENTIAL INFORMATION

2.1 The parties agree that, in addition to the Confidential Information defined under the Master Agreement, the following categories are expressly included as Annex Confidential Information:

2.2 Particular focus of protection: The Receiving Party shall treat as Confidential Information any data relating to the Disclosing Party's financial forecasts, customer lists, technical specifications, trade secrets, product roadmaps, and pricing models, whether so designated or reasonably understood to be confidential.

3. EXCLUSIONS

3.1 Annex Confidential Information shall not include information that: (a) is or becomes generally available to the public other than by a breach of this Annex; (b) was rightfully in the Receiving Party's possession prior to disclosure; (c) is rightfully received from a third party without restriction and without breach of an obligation of confidentiality; or (d) is independently developed by or for the Receiving Party without reference to or use of the Disclosing Party's Confidential Information.

4. OBLIGATIONS OF RECEIVING PARTY

4.1 The Receiving Party shall (a) use Annex Confidential Information solely for the purposes set forth in the Master Agreement and this Annex; (b) restrict disclosure of Annex Confidential Information to employees, officers, contractors or agents who have a strict need to know and who are bound by confidentiality obligations at least as protective as those contained in the Master Agreement; and (c) exercise at least the same degree of care to protect Annex Confidential Information as it uses to protect its own confidential information, but in no event less than reasonable care.

4.2 The Receiving Party shall be responsible for any breach of this Annex by its representatives and shall take commercially reasonable steps to prevent unauthorized use or disclosure.

5. PERMITTED DISCLOSURES

5.1 Notwithstanding the foregoing, the Receiving Party may disclose Annex Confidential Information to the following categories of persons, subject to compliance with the Receiving Party's obligations hereunder:

6. TERM

6.1 Unless earlier terminated in accordance with the Master Agreement, the obligations in this Annex with respect to any particular item of Annex Confidential Information shall continue for a period of from the date of disclosure of such item, provided that trade secrets shall remain protected for so long as they qualify as trade secrets under applicable law.

7. RETURN OR DESTRUCTION

7.1 Upon termination of the Master Agreement or upon written request of the Disclosing Party, the Receiving Party shall promptly return or, at the Disclosing Party's election, destroy all materials containing Annex Confidential Information and shall certify in writing the return or destruction within .

8. REMEDIES

8.1 The parties acknowledge that monetary damages may be an insufficient remedy for breach of this Annex and that, in addition to any other remedies available at law or in equity, the Disclosing Party shall be entitled to seek injunctive or other equitable relief to prevent or curtail actual or threatened breaches.

9. CONFIDENTIALITY OF EXISTENCE

9.1 Unless otherwise agreed in writing, the parties shall treat the existence and terms of the Master Agreement and this Annex as Confidential Information subject to the protections and exclusions set forth herein.

10. NOTICES

10.1 All notices, requests, demands or other communications required or permitted under this Annex shall be in writing and delivered to the addresses set forth below (or to such other address as either party may designate by notice to the other):

11. AMENDMENTS; WAIVER; COUNTERPARTS

11.1 This Annex may be amended or modified only by a written instrument signed by duly authorized representatives of both parties. No waiver of any provision shall be effective unless in writing and signed by the waiving party. This Annex may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one instrument.

12. GOVERNING LAW; ENTIRE AGREEMENT; SEVERABILITY

12.1 Governing Law. This Annex shall be governed by and construed in accordance with the laws of the State of , without regard to its conflicts of law principles.

12.2 Entire Agreement. This Annex, together with the Master Agreement, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, understandings and communications, whether written or oral.

12.3 Severability. If any provision of this Annex is held to be illegal, invalid or unenforceable under applicable law, such provision shall be severed and the remaining provisions shall remain in full force and effect.

ADDITIONAL TERMS

First Party:

By:

Date:

Second Party:

By:

Date:

Enter text✕
Prepare your document for signing right on this page
  • 01 Edit the text and complete the fields
  • 02 Click Sign Now and on the next screen add recipients and signature fields in SignNow
  • 03 Start your free trial to sign and send your doc
Sign Now

What a Confidentiality Agreement Annex Is and when it applies

A Confidentiality Agreement Annex is a focused addendum to a primary confidentiality agreement or non-disclosure agreement (NDA) that records supplemental terms: specific categories of confidential information, additional permitted disclosures, extended retention or destruction obligations, and tailored handling instructions. It clarifies scope where a main agreement is general or where a particular project, dataset, or counterparty requires bespoke rules. Annexes can define technical safeguards, storage locations, permitted third parties, and procedures for returning or destroying materials at termination while preserving the underlying NDA’s structure.

Why add a Confidentiality Agreement Annex to an NDA

An annex lets parties target confidentiality rules to a specific project, dataset, or timeframe without renegotiating the main NDA, reducing ambiguity and litigation risk while documenting operational controls and disclosure exceptions.

Why add a Confidentiality Agreement Annex to an NDA

Who typically prepares and signs an annex

Organizations use annexes when a transaction or engagement requires narrower or additional safeguards than the base NDA provides.

  • In-house legal and contracts teams who need precise, enforceable clauses for a single project or dataset.
  • Procurement and vendor managers onboarding suppliers who will access sensitive systems or data.
  • Healthcare or research administrators attaching PHI-specific obligations and privacy addenda.

Annexes are useful for recurring projects, cross-border data transfers, partnerships, vendor onboarding, and any situation needing documented handling rules beyond the master agreement.

Core clauses to include in a professional Confidentiality Agreement Annex

A clear annex groups the most important, transaction-specific terms: a precise definition of confidential information, permitted disclosures and recipients, security and handling requirements, duration and return/destruction obligations, remedies or liquidated damages if applicable, and governing law or dispute resolution specifics that supplement the master NDA.

Confidential Definition

Narrow, itemized categories and examples to avoid ambiguity and scope creep.

Permitted Disclosures

List third parties and purposes (e.g., subcontractors, auditors) and required safeguards.

Security Controls

Specify technical and administrative measures such as encryption, access controls, or location limits.

Retention & Return

Obligations for returning, destroying, or certifying destruction of materials and copies.

Remedies

Injunctions, liquidated damages, or indemnity provisions tailored to the annex scope.

Governing Law

State choice and venue that interpret both the NDA and annex consistently.

Step-by-step: complete and execute the annex

Follow these sequential steps to prepare, review, sign, and store the Confidentiality Agreement Annex so it integrates cleanly with the master NDA and operational workflows.

  • 01
    Draft Annex: Identify scope, data types, and controls to include.
  • 02
    Internal Review: Have legal, IT, and compliance review the language and controls.
  • 03
    Signatures: Collect signatures from authorized signatories, using eSignature if permitted.
  • 04
    Archive: Store executed annex with the master NDA and update access logs.

How to configure a digital signing workflow for the annex

Set up the annex as a reusable template in your e-sign platform and configure authentication, field types, and retention settings to match the annex requirements.

Field Configuration
Authentication Email + SMS code or stronger KBA where required
Field Types Signature, initial, date, checkbox, text fields
Conditional Fields Show specific clauses only when relevant
Retention Settings Automatic archiving and export to secure storage

Where to send and how signed annexes are routed

Signed annexes should be routed to legal counsel, the contracting parties, and compliance or recordkeeping systems; document each transfer and retention destination for audit purposes.

  • Upload Document: Add the annex to your template library or upload final PDF.
  • Place Fields: Assign signature, initials, and date fields to each signer.
  • Send to Signers: Use secure email links or authenticated invites for recipients.
  • Store & Log: Save executed copy and audit trail in records repository.

Technical and platform considerations for e-signing annexes

Choose a platform that supports standard formats, secure transport, and the authentication level you need for the annex.

  • File Formats: PDF and DOCX supported
  • Authentication: Email, SMS, or KBA options
  • Integrations: Salesforce, NetSuite, Box, Google Workspace

Key timing and deadlines for annex lifecycle

Track execution timing, revocation windows, and retention start points to maintain compliance and meet notice obligations tied to the annex.

Execution Deadline:

Complete signatures by the project start date to avoid delays.

Revocation Window:

Specify any period during which consent can be withdrawn.

Retention Start:

Retention typically begins on the effective date of the annex.

Notice Periods:

State any required advance notice for permitted disclosures.

Renewal/Extension:

Document how annex terms extend or terminate with the NDA.

Milestones: drafting to archived storage

Use this milestone sequence to manage signoffs and preserve evidence from drafting through final archiving and possible future audits.

01

Drafting Completed

Final language approved by project stakeholders and legal.

02

Counterparty Review

Counterparty reviews and proposes edits within agreed timeframe.

03

Execution

All signers execute the annex and receive copies.

04

Archival & Audit

Signed annex and audit trail stored in secure repository.

Primary penalties and legal risks of a flawed annex

Breach Liability: Compensatory damages possible
Injunction Risk: Court-ordered restraints or specific performance
Data Breach Fines: Regulatory penalties and mitigation costs
Contract Voidance: Ambiguous terms may be unenforceable
HIPAA Penalties: Civil fines under HIPAA where PHI involved
Reputational Harm: Loss of trust and business interruption

Common drafting and execution mistakes to avoid

  • Vague definitions that rely on the master NDA without explicit annex references lead to scope disputes and inconsistent enforcement.
  • Failing to list permitted recipients or third-party safeguards creates gaps and increases downstream disclosure risk and audit findings.
  • Using inconsistent dates or mismatched party names between the annex and the main NDA can render the annex unenforceable in litigation.
  • Neglecting data classification and technical control language delays compliance reviews and can cause operational confusion during incident response.

Essential data points and security measures to record in the annex

Party Names: Full legal names
Effective Date: MM/DD/YYYY
Data Types: Specific categories
Storage Location: On-site or cloud
Encryption: AES-256 at rest
Transport: TLS 1.2/1.3 in transit

Who may sign and represent each party

General Counsel

Corporate counsel or authorized in-house attorney typically signs or approves annex language to ensure consistency with corporate policy and risk tolerance; signatory must be empowered by board resolution or delegation if required by bylaws.

Authorized Officer

An officer (CEO, CFO, VP) with contracting authority may sign for the entity; verify signing authority thresholds in procurement policy and attach proof when necessary.

Two practical scenarios showing how an annex is used

These concise examples show typical contexts for an annex and how specific clauses solve real operational problems during collaboration.

Project-Specific Data Sharing

A software vendor and a client need to exchange test datasets under stricter controls than the master NDA provides

  • The annex lists allowed data types and masking requirements
  • The annex reduced ambiguity, required encryption at rest, and limited access to named individuals, enabling safe data sharing while preserving the master NDA terms.

Health Research Collaboration

A research hospital shares de-identified PHI with an academic partner for a clinical study

  • The annex adds HIPAA-aligned safeguards and breach notification steps
  • The annex clarified retention, audit rights, and vendor obligations so the study complied with institutional review board requirements and HIPAA recordkeeping rules.

Practical drafting and execution tips to reduce risk

Follow these best practices when preparing an annex to ensure clarity, enforceability, and operational readiness across signatory teams.

Be Specific
Define confidential categories and exclusions clearly; specificity avoids overbroad interpretations and reduces litigation risk by limiting disputes about scope and intent.
Align with IT Controls
Match annex language to actual technical and administrative controls in place so operational teams can comply and auditors can verify implementation.
Confirm Signing Authority
Verify each signer's authority against corporate signing policies and attach any necessary delegation or board approval to the contract record.
Preserve Audit Evidence
Capture an immutable audit trail of execution (timestamps, IP, certificate) and store the executed annex with the NDA to support enforceability and regulatory examinations.

eSignature vendor comparison for executing a Confidentiality Agreement Annex

This pricing comparison highlights per-user starting prices and common features across providers; signNow is listed first per vendor convention and pricing reflects standard annual billing where applicable.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Varies by plan Varies by plan Varies by plan Varies by plan
Bulk Send Yes Yes Yes Yes No
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Yes Yes No No

Frequently asked questions about the Confidentiality Agreement Annex

Answers to common legal, technical, and process questions about drafting, signing, and storing an annex, with references to applicable U.S. legal frameworks where relevant.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users
Sign Now
Company
Forms
Pricing
Resources
Knowledge base
Other Products
© 2026 airSlate Inc. All rights reserved.