Definition of Protected Information
Explicitly list categories of information covered, reference classification markings or contract exhibits, and state whether derivatives and analyses are included to avoid interpretive gaps.
This agreement clarifies classification levels, handling rules, permitted disclosures, and legal consequences, reducing ambiguity for employees, contractors, and vendors while aligning contractual protections with statutory secrecy regimes and procurement requirements.
The Official Secrets Act Agreement is used by organizations that handle regulated or classified information and by individuals with access to that information.
Tailor signer roles and authentication levels to match the sensitivity of the material and any applicable statutory or contract-based obligations.
A contracting officer or government program manager who executes on behalf of an agency or prime contractor. Their signature confirms access authorization, applicable classification guidance, and any required security clearances or facility safeguards.
An authorized representative of a cleared contractor who receives classified or sensitive materials. Signing binds the contractor to handling rules, reporting duties, and indemnities required by prime contract or statute.
Explicitly list categories of information covered, reference classification markings or contract exhibits, and state whether derivatives and analyses are included to avoid interpretive gaps.
Describe who may access the information, the required security clearances or facility requirements, and responsibilities to notify when clearances lapse or are revoked.
Specify narrow exceptions such as compelled disclosures to courts or regulators, including required notice procedures and protective measures for such disclosures.
Set retention periods, secure destruction methods, and certification procedures for destruction tied to contract termination or declassification.
Allow audits, access logs, and compliance checks; detail remedies for non-compliance including corrective plans and financial remedies.
Identify the governing jurisdiction, injunctive relief options, liquidated damages if appropriate, and survival of confidentiality obligations.
Describe storage, labeling, electronic access controls, and physical protections tailored to classification level, including minimum encryption and compartmentalization standards.
Set timeframes and contacts for reporting suspected breaches, required preservation steps, and cooperation obligations during investigations.
Require flow-down obligations to subcontractors, right-to-audit, and prior approval for any subprocessing or overseas transfers of covered information.
Provide procedures and timelines for declassification, return, or certified destruction when information is no longer subject to protection.
Terms agreed and exhibits finalized.
All authorized parties sign and dates recorded.
Ongoing access controls and audits conducted.
Return/destruction and certification executed.
Notify within 5 business days of compelled disclosure.
Report suspected unauthorized disclosure within 72 hours to designated contact.
Annual review of retention and classification exhibits.
Provide certified destruction within 30 days of termination when required.
Remediate findings within 60–90 days per corrective action plan.
| Field | Configuration |
|---|---|
| Signer Authentication | Email + SMS OTP or higher |
| Role Order | Sequential or parallel routing |
| Audit Trail | Capture IP, timestamp, actions |
| Document Encryption | AES-256 at rest |
| Criteria | Official Secrets Act Agreement | Standard NDA |
|---|---|---|
| Scope Precision | high specificity | broad language |
| Statutory Alignment | ||
| Government Clearance Required | often | rarely |
| Audit & Retention Rules | detailed | general |
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial, no card | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Available (Business Premium) | Available | Available | Available | Varies |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |