Skip to content

Rights and contracts

Residuals clauses in NDAs: what they mean when AI is involved

By SourceX Editorial · Reviewed by Noah Loul ·

Short answer

A residuals clause in an NDA lets the receiving party use information its people retain in unaided memory without breaching confidentiality. When records or samples go to an AI developer, the clause invites an argument that whatever a model retains is residual too. For any NDA covering data, strike the clause or expressly exclude data and machine retention.

Key takeaways

  • A residuals clause carves information retained in unaided human memory out of an NDA's use restrictions.
  • Most residuals clauses were drafted for people, not systems, which leaves room to argue about model weights and embeddings.
  • For NDAs that cover data samples or evaluation sets, the cleanest position is no residuals clause at all.
  • If a counterparty insists, limit residuals to individuals, exclude data and samples, and exclude any machine retention.
  • A broad residuals clause can weaken the reasonable-measures showing that trade secret protection depends on.

What is a residuals clause in an NDA?#

A residuals clause is an NDA provision that lets the receiving party use general knowledge, ideas and techniques its personnel retain in unaided memory after seeing the other side's confidential information. It exists because people cannot unlearn what they read, and technology companies wanted their engineers free to keep working without a confidentiality claim following every idea.

The clause turns on the phrase unaided memory, meaning information remembered without intentionally memorizing it for later use and without referring back to the documents. Information that qualifies is called residuals, and the receiving party may use it for any purpose, often expressly including the development of competing products.

Most versions keep some limits. They grant no license under patents or copyrights, they do not permit disclosing the source of the information or specific figures, and some exclude categories such as source code, financial information or personal data.

A sample residuals clause, read phrase by phrase#

The illustrative clause below shows the common structure. It is a drafting example for discussion, not recommended language.

Illustrative clause: Recipient may use for any purpose the Residuals resulting from access to Discloser's Confidential Information. Residuals means information in non-tangible form retained in the unaided memory of Recipient's Representatives who had access to the Confidential Information. Memory is unaided if the person has not intentionally memorized the information for the purpose of retaining it and does not refer to any record of it. This section grants no license under Discloser's patents or copyrights and does not permit disclosure of the source of the Residuals.

A sample residuals clause, read phrase by phrase
PhraseWhat it doesQuestion when data is involved
for any purposeRemoves use limits on qualifying informationDoes any purpose include training or tuning a model?
non-tangible formExcludes documents and filesIs a model weight, embedding or cache tangible?
RepresentativesDefines whose memory countsDoes the definition reach affiliates, contractors or automated systems?
unaided memoryExcludes deliberate memorization and looking backCan a system that stored the data ever be unaided?
no license under patents or copyrightsPreserves listed IP claimsIs anything said about trade secrets or compiled data?
  1. 01Your work records
  2. 02Personal details removed
  3. 03You approve the release
  4. 04Licensed to AI developers
How it works with SourceX: Your work records → Personal details removed → You approve the release → Licensed to AI developers.Illustrative

Why AI makes residuals clauses riskier for data suppliers#

AI makes residuals clauses riskier because operational records are valuable precisely as information, and a trained model keeps patterns from that information without keeping a document. A buyer's engineers who examine evaluation samples also form judgments about structure, field definitions and edge cases that a residuals clause may free them to reuse.

Most residuals clauses refer to the memory of individuals, and many lawyers read them as limited to people. Even so, the drafting rarely says so, and Representatives is sometimes defined very broadly. Ambiguity is the risk: whether a model's retained patterns count as residuals is a dispute no supplier wants to have.

There is also a trade secret angle. Under the Defend Trade Secrets Act, information is a trade secret only if its owner has taken reasonable measures to keep it secret, and federal guidance lists confidentiality agreements and need-to-know access among those measures. Signing away use restrictions before sharing detailed records can make that showing harder, which is why counsel often resist residuals clauses around anything that resembles a trade secret.

Strike, narrow or exclude: three negotiating positions#

The residuals clause AI question usually ends in one of three positions, and data suppliers should open with the first.

An AI exclusion can be short. Illustrative wording: Residuals do not include any information stored, encoded or retained in any software, machine learning model, model weights, embeddings, vector index, dataset or other automated system, and do not include any data, samples or records provided under this Agreement.

Strike, narrow or exclude: three negotiating positions
PositionWhat the NDA saysWhen it fits
StrikeNo residuals clause; all confidential information stays under use restrictionsAny NDA covering data samples, evaluation sets, schemas or exports
NarrowResiduals limited to named individuals' unaided memory, excluding data, samples, source code and personal informationGeneral commercial talks where the counterparty will not drop the clause
Narrow plus AI exclusionThe narrow version plus a statement that nothing retained in any model, dataset, embedding, index or automated system is a residualTalks with AI developers where the clause cannot be removed entirely

Checklist: reviewing an NDA before sharing data samples#

Review the NDA as if the samples were the final dataset, because for confidentiality purposes they often are. A short list catches most problems.

  • Search the draft for residuals, unaided memory, general knowledge and retained in memory; the language sometimes sits inside a section titled Exceptions.
  • Check whether Representatives includes affiliates, contractors, consultants or non-human systems.
  • Confirm that samples and evaluation data are Confidential Information whether or not they are marked.
  • Add a use restriction: evaluation only, with no training, tuning or retention in any model or index.
  • Require deletion of samples and anything derived from them at the end of evaluation, with written confirmation.
  • Make sure confidentiality for data outlasts the evaluation and any license negotiation that follows.
  • Add precedence language so a later license agreement and the NDA do not contradict each other.

Residuals in your own client NDAs cut the other way#

Residuals clauses in your existing client NDAs do not give you rights to license client information. Some companies assume that a residuals clause in an NDA with a client lets them reuse what their team learned on the engagement. That reading rarely holds, because residuals clauses protect individual know-how, not the transfer of client records to a third party.

When client NDAs come up in a rights review, the real questions are whether the records you want to license contain the client's confidential information at all and, if they do, whether it can be removed. A residuals clause is not a route around either question.

Illustrative: a software company redlines a buyer's standard NDA#

Illustrative: a fictional B2B software company with years of Jira issues, GitHub pull requests and Zendesk tickets is asked to share a small evaluation sample with a prospective buyer. The buyer sends its standard mutual NDA, which includes a residuals clause covering its Representatives, defined to include affiliates and service providers.

The company's general counsel strikes the clause. The buyer's counsel replies that the template is used across many vendors and proposes a narrow version instead. The parties settle on residuals limited to named individuals, a carve-out for all data and samples, an express exclusion for any model, embedding or index, and deletion of the sample with written confirmation after evaluation. Only then is the sample shared.

How SourceX treats confidentiality before data moves#

SourceX keeps the initial fit check to metadata, so no records are exposed while confidentiality terms are still being negotiated. When a buyer needs samples, they move only after the supplier approves the terms that govern them, in line with the Approval step of the SourceX five-step transaction.

Permitted use, including evaluation-only limits and deletion duties, is recorded in the SourceX Evidence Packet, so the supplier and the buyer work from the same written record of what samples may be used for.

Frequently asked questions

Are residuals clauses enforceable?

Courts generally enforce contract terms as written, so a residuals clause can matter in a dispute. How far it reaches depends on its exact wording, the governing law and the facts, including how information was retained. Because outcomes turn on drafting, the practical protection is to keep the clause out of data-sharing NDAs or narrow it expressly.

Is residual knowledge the same as general skills and know-how?

They overlap but are not the same. Many NDAs already exclude general skills and experience from confidentiality without any residuals clause. A residuals clause goes further by freeing specific information retained in memory, which is why it deserves closer scrutiny than a general know-how carve-out.

Does deleting samples after evaluation remove the risk?

Deletion helps but does not answer the residuals question, because the clause is about what remains after documents are gone. Pair a deletion duty with an express statement that nothing retained in a model, embedding or index counts as residuals, and ask for written confirmation of deletion.

Should a mutual NDA have a mutual residuals clause?

Mutuality sounds balanced, but in a data evaluation the parties rarely disclose comparable information. The supplier shares records and the buyer shares little. A mutual residuals clause therefore benefits the buyer almost entirely, which is a fair point to raise when asking to strike it.

What if we signed an earlier NDA with the same company?

An older NDA may still govern related discussions if its scope is broad. Check whether a prior agreement with the counterparty contains a residuals clause and whether the new NDA supersedes it. Clear precedence language avoids two inconsistent confidentiality regimes covering the same samples.

Sources

  • Under 18 U.S.C. 1839(3), as amended by the Defend Trade Secrets Act of 2016, information is a trade secret only if its owner has taken reasonable measures to keep it secret and it derives independent economic value from not being generally known. Source
  • DOJ guidance says trade secret protective measures must be reasonable under the circumstances, citing examples such as limiting access on a need-to-know basis and requiring confidentiality agreements. Source

Related resources

See if your company qualifies

A short company assessment. No data uploads are needed.

See if your company qualifies