Confidential Inquiry and NDA Handling: How to Deal with Sensitive RFQs Before You Quote

BOTrento Team30 October 20267 min read

Why confidential enquiries need their own process

An ordinary enquiry costs you time. A confidential one can also cost you freedom to operate. Typical problems:

• The NDA is signed by one person, but the whole team and subcontractors then handle the material.
• The clause is so broad that it blocks you from working for the customer's competitors.
• The details sit in a shared inbox, a CRM note or an AI tool nobody has checked against the NDA.
• Nobody notes the end date, so you keep obligations long after the project is gone.

Event agencies, equipment rental firms and B2B service providers see this often: a product launch, an unannounced tender, a client who doesn't want their name on the enquiry.

Step by step: what to do when an NDA arrives with an RFQ

1. Pause and flag it. Mark the enquiry as confidential in your inbox or CRM (a label in Gmail or Outlook, a tag in Pipedrive or HubSpot). Restrict who can see it.
2. Separate the NDA from the content. Read the agreement before the project attachments. If the NDA covers anything you open, opening them first is already a commitment.
3. Check the basics (see the checklist below).
4. Ask what you actually need. Often you can quote from a short, non-confidential summary: dates, quantities, location type, budget range.
5. Decide: sign, amend or decline. Give the decision to a named person, not whoever happens to be in the inbox.
6. Log it. Record the signing date, the end date, who has access and what you may keep after the project.
7. Only then quote, using the information the NDA lets you use.

NDA checklist: what to check before you sign

Parties and scope

• Is the signing party the real customer, or an agency acting for an unnamed client?
• Is it mutual or one-way? A one-way NDA binds only you.
• Does the definition of confidential information cover "everything", or only marked material?

Duration and exceptions

• How long do the obligations last, and is there a clear end date?
• Are the usual exceptions there: information already public, already known to you, or independently developed?

Practical obligations

• Can you share the information with employees and subcontractors who need it to prepare the quote?
• What happens to documents afterwards: return, delete or keep for legal reasons?
• Are there penalty clauses or unlimited liability? Those need a lawyer's eye.
• Which law and courts apply?

Hidden restrictions

• Non-compete or exclusivity language tucked into an NDA.
• A ban on even admitting that the enquiry exists.

Competitor and disclosure questions

If the enquiry looks like a competitor's project, or you already work for a rival of the customer, don't guess. Check three things: does your existing contract limit you, does the new NDA limit you, and can you keep the two teams and files apart in practice? If you can't, say so early. It's better to decline in the first reply than to discover a conflict after the kick-off call.

Never use information from one customer's enquiry to shape a quote for another. That holds even without an NDA, and it matters more with one.

Email templates: clarify, amend or decline

Asking for a summary before signing

Hello [Name],

Thank you for your enquiry. We're happy to work under an NDA. To prepare a realistic quote, could you share a short non-confidential outline: dates, approximate scale, location type and budget range? We'll review your NDA in parallel and come back within [x] working days.

Best regards,
[Your name]

Requesting changes to the NDA

Hello [Name],

We've reviewed the NDA. Before we sign, we'd like to adjust three points: (1) make it mutual, (2) set an end date for the obligations, (3) allow us to share information with subcontractors bound by equivalent terms. Marked-up version attached.

Best regards,
[Your name]

Declining politely

Hello [Name],

Thank you for thinking of us. Unfortunately we can't agree to the NDA in its current form, and we'd rather tell you now than slow your process. If your terms change, we'd be glad to look again.

Best regards,
[Your name]

When to decline before spending time on a quote

Walk away, or at least pause, if:

• the NDA is one-way, unlimited in time and has penalty clauses, and the customer won't discuss changes;
• you can't tell who the real customer is and the agency won't say;
• signing would conflict with an existing customer;
• the customer refuses any non-confidential outline, so you can't price anything;
• the deadline is too short to review the NDA properly.

A fast, polite "no" keeps the relationship. For the general routine of qualifying enquiries, see our guide on how to reply to sales enquiries faster.

Confidential enquiries, AI drafts and GDPR

If you use an AI tool to draft replies, treat NDA material as something that must not go into it unless your agreement and the tool's terms allow it. Know where data is stored, who the processor is and what text is sent to a language model. Our related guides cover this in detail: seven questions to ask an AI vendor and what EU server hosting does and doesn't cover. For anything involving personal data in a specific case, consult a lawyer.

How BOTrento helps you keep this under control

BOTrento Chief of Staff is a managed process for enquiries and quotes. It watches your mailbox and uploaded data, shows you an overview each working day morning, and prepares draft replies and quotes. Nothing is sent without a person approving it, so a draft that mentions a confidential project never leaves by accident.

It also captures promises such as "I'll send the signed NDA by Friday" and reminds you. BOTrento can't read attachments: it works from the email text. So an NDA in a PDF still needs a human to read it. Data is stored on servers in Germany (EU), and the text needed for a task is processed by a model provider through its API, so check this against your own NDA terms first. Details are on what BOTrento is, and you can see a sample of the process.

You can try it for 14 days free on your own data, with no card and no API key of your own. The 14 days start with your first successful data upload. Start the free trial.