Email Confidentiality Disclaimer: 15 Samples You Can Copy (2026)

An email confidentiality disclaimer, also called a confidentiality notice or confidentiality statement, is the short block at the bottom of a business email that says the message is confidential and intended only for the addressee. It tells anyone who receives it by mistake to notify the sender and delete it.

Below are 15 confidentiality disclaimer samples you can copy for different situations, plus an honest look at what they do and don't protect in 2026, where to put them, and how to apply one consistently across a whole company.

General information, not legal advice. Have counsel approve wording for regulated or high-risk communications.

What is an email confidentiality disclaimer?

It's a notice attached to outgoing emails that usually does four things:

1. Says the message and attachments are confidential, and sometimes legally privileged.
2. Limits the intended audience to the named recipient.
3. Tells an unintended recipient to notify the sender, delete the message, and not use, copy or forward it.
4. Sometimes adds related notices about viruses, no contract formation, monitoring, or regulatory status.

"Confidentiality notice," "confidentiality statement," "confidential email footer" and "privileged and confidential disclaimer" all describe the same thing with slightly different emphasis.

Are email confidentiality disclaimers legally binding?

Usually not on their own. A recipient generally hasn't agreed to anything by receiving an email, so a footer rarely creates an enforceable obligation. Courts have treated boilerplate added to every email as weak evidence that a particular message was actually confidential. That said, disclaimers still do real work:

• They give a wrong recipient instructions. Many people will follow a clear request to notify and delete.
• They support privilege arguments. In the US, ABA Model Rule 4.4(b) requires a lawyer who receives a document they know was sent by mistake to notify the sender. A clear notice makes the mistake obvious.
• They show you treat the information as confidential. That supports trade-secret protection and your internal policies.
• They carry required disclosures. In some places the footer is where mandatory information goes. For example, UK companies must show their registered name, number and office on business emails.

The practical takeaway: keep the notice short and specific, use it where confidentiality is real, and back it with access controls and encryption. A disclaimer is a label, not a lock.

15 confidentiality disclaimer samples

1. Standard confidentiality notice

CONFIDENTIALITY NOTICE: This email and any attachments are confidential and intended solely for the use of the addressee. If you are not the intended recipient, please notify the sender immediately and delete this message. Any review, use, disclosure or distribution by others is prohibited.

2. Short confidentiality statement (replies and mobile)

Confidential: intended only for the addressee. If received in error, please notify the sender and delete it.

3. Privileged and confidential (legal)

PRIVILEGED AND CONFIDENTIAL: This message may contain attorney-client communications or attorney work product. It is intended only for the named recipient. If you received it in error, do not read, copy or forward it. Notify the sender by reply and delete all copies. Inadvertent disclosure does not waive any privilege.

Law firms should pair this with a compliant signature block. See our attorney email signature guide.

4. External email warning (internal mail from outside)

CAUTION: This email originated outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

This is a banner added to incoming mail, usually by your mail server, and it's often confused with a disclaimer. Use both.

5. Confidentiality plus no contract formation

This email is confidential and intended only for the addressee. Nothing in this message is intended to create a binding contract unless expressly stated and signed by an authorized representative of [Company].

6. Confidentiality plus virus notice

This message is confidential and may be privileged. If you are not the intended recipient, please notify us and delete it. Although we scan for viruses, we accept no liability for any damage caused by this email or its attachments. Please check attachments before opening them.

7. Proprietary and confidential footer (trade secrets)

PROPRIETARY AND CONFIDENTIAL: This email contains proprietary information of [Company], including trade secrets, provided under an existing confidentiality agreement. Do not share it outside your organization without written consent.

8. Under NDA (partners and vendors)

This communication is subject to the non-disclosure agreement between [Company] and [Partner] dated [date]. If you are not an intended recipient under that agreement, please notify the sender and delete this message.

9. HR and employee data

This email may contain personal employee information and is intended only for authorized recipients. Do not forward it. If you received it in error, notify the sender and delete it.

10. Financial services

This message is confidential and for the intended recipient only. It is not an offer or solicitation to buy or sell any security. [Firm] is registered with [regulator / registration number]. If you received this in error, please notify us and delete it.

Regulated firms usually need license numbers too. See email signatures for finance.

11. Healthcare (PHI)

This email may contain protected health information. It is intended only for the named recipient. If you are not the intended recipient, notify the sender, delete it, and do not use or share its contents.

See 10 more variants in our HIPAA email disclaimer templates.

12. Personal data (GDPR)

This email may contain personal data processed in accordance with our privacy notice: [link]. If you received it in error, please inform the sender, delete it, and do not retain any copies.

More options: GDPR email disclaimer examples.

13. Monitoring notice

Emails sent to and from [Company] may be monitored and recorded for security, compliance and training purposes, in accordance with applicable law.

14. Internal only

INTERNAL: Do not forward outside [Company].

15. Education and student records

This message may contain student education records protected by FERPA. It is intended only for the addressee. If you received it in error, notify the sender and delete it.

For broader examples (environmental, liability, marketing), see our email disclaimer examples, and for the legal background, read what an email legal disclaimer is.

How to write a confidentiality disclaimer that works

• Be specific. "May contain confidential client information" is more credible than a paragraph of absolutes.
• Keep it short. Aim for 30 to 60 words. Long footers get ignored and make threads hard to read on a phone.
• Use plain text, not an image. Images get blocked, aren't searchable, and fail accessibility checks.
• Separate it visually. Put it below the signature, in a smaller, lighter font, with a line or space above.
• Match it to the context. Use the full notice on new external mail, a short one on replies, and an internal label inside the company.
• Don't over-label. Marking every lunch invite "privileged" weakens the label where it matters.
• Review it yearly with legal, and whenever you enter a new market.

More on layout and placement: best practices for your disclaimer email footer.

Confidentiality disclaimer vs. other email notices

Notice	Purpose	Typical placement
Confidentiality disclaimer	Limit the audience and tell wrong recipients what to do	Below the signature on outgoing mail
Privilege notice	Flag legal privilege on legal communications	Top label plus footer, for legal matters only
Liability or no-contract disclaimer	Prevent accidental commitments and limit reliance on advice	Footer, combined with the confidentiality text
Company disclosure	Show legally required company details (name, registration, office)	Footer, required in some countries
External sender warning	Warn your staff about phishing	Top of incoming mail, added by the mail server
Marketing unsubscribe text	Meet anti-spam rules on bulk mail	Footer of newsletters, not of one-to-one email

Common mistakes with confidentiality notices

• Putting the disclaimer above the message. It hides the content and trains people to scroll past it.
• Making it longer than the email. A 250-word footer on a two-line reply looks automated, because it is.
• Threatening language. Phrases like "you are legally bound" are rarely accurate and can annoy clients.
• Adding it only on desktop. Mobile replies are where notices usually go missing.
• Different wording for every employee. Inconsistent text undermines the claim that you have a policy.
• Using "privileged" on everything. Overuse can weaken the label for communications that really are privileged.

How to add a confidentiality disclaimer to every company email

Asking every employee to paste the notice into their signature doesn't hold up for long. Here are the central options:

Method	How	Watch out for
Microsoft 365	Exchange admin center > Mail flow > Rules > Apply disclaimers. Append the text to outbound mail.	Added below the entire thread. Not visible while composing. One rule per variant.
Google Workspace	Admin console > Apps > Gmail > Compliance > Append footer, by org unit.	Managed separately from the signature. Limited formatting.
Signature management tool	Add the disclaimer to the signature template once. It's deployed with every employee's signature.	Paid. Pick server-side if you need coverage on every device.

With Scribe, legal disclaimers are part of the signature template on every plan, including Free. You write the notice once and it appears in every assigned teammate's signature. Scribe re-applies the approved signature whenever someone composes in Outlook or Gmail, so the disclaimer can't be deleted locally. On paid plans, you can use a short disclaimer in reply and internal variants with Microsoft 365 or server-side installation (not the standard Gmail integration). When legal changes the wording, one edit updates the whole company. Deploy through Microsoft 365 or Google Workspace, or use the server-side option to cover phones and third-party apps too. IT teams can read how this fits their workflow on Scribe for IT.

For the bigger picture of templates, ownership and rollout, see company-wide email signature management.

Frequently asked questions

What is a confidentiality statement in an email?

It's a short notice, usually below the signature, saying the email is confidential and intended only for the addressee. It asks anyone who received it in error to notify the sender and delete it.

Are email confidentiality disclaimers enforceable?

Generally not as a contract, because the recipient hasn't agreed to anything. They're still useful: they instruct accidental recipients, support privilege and trade-secret positions, and carry required company information in some countries.

Where should a confidentiality notice go: top or bottom?

Put it at the bottom, below the signature, for routine mail. Put a one-line "Confidential" or "Privileged" label at the top only for messages that are actually sensitive, so the reader sees it before the content.

What's the difference between confidential and privileged?

"Confidential" means the information isn't for public or third-party disclosure. "Privileged" is a legal status, such as attorney-client privilege, that protects certain communications from disclosure in litigation. Only use "privileged" when it plausibly applies.

Should internal emails have a confidentiality disclaimer?

Usually a short internal label is enough. Many companies use a minimal internal signature without the full external notice, to keep threads readable.

Can I use one disclaimer for every country?

Often, for the confidentiality part. Mandatory company information differs by country (the UK and Germany, for example, require registration details on business emails), so international companies often use regional template variants.

How do I stop disclaimers repeating in long threads?

Use a signature tool with reply variants, so replies carry a short notice, or add a mail flow rule exception for subjects starting with "RE:" or "FW:".

Next step

Choose two or three samples (external, reply and internal), get them approved, and deploy them once. You can add a disclaimer to a Scribe template and see it on every teammate's signature with the 14-day free trial.