Every so often your best possible reference is also your least usable one. The customer loves the product, the results are impressive, and they would happily tell a peer about you over coffee — but they are bound by a non-disclosure agreement, or they work somewhere with a blanket "we don't endorse vendors" policy. It is tempting to write these customers off as social-proof dead ends. That is a mistake. An NDA restricts what can be said and how it can be attributed; it rarely forbids a satisfied customer from being helpful entirely. The job is to find the version of the endorsement that stays inside the lines.
First, understand what the NDA actually restricts
People throw the word "NDA" around loosely, and half the time the real constraint is narrower than the customer assumes. Before you decide a testimonial is impossible, get specific about what is genuinely off-limits. Usually it falls into one of three buckets:
- Attribution. The customer cannot let you use their company name, logo, or their own name publicly. This is the most common restriction and the easiest to work around.
- Specifics. They cannot disclose particular numbers, internal processes, or the fact that a certain project even exists. Often the metrics are confidential but the sentiment is not.
- Any acknowledgment at all. The strictest case — they cannot confirm a vendor relationship in any form. This is rarer than people think and usually applies to regulated industries or pre-announcement work.
Ask the customer directly which bucket they are in. You are not pushing them to bend the rules; you are helping them see how much room they actually have. Many will realize they can say more than they first assumed.
The anonymized testimonial done right
When attribution is the only problem, an anonymized testimonial is your answer — but a lazy anonymization ("A happy customer said...") converts poorly because it reads as invented. The fix is to replace the identity with credibility markers that a prospect can relate to without exposing who the customer is.
Instead of a name and logo, attribute the quote to a described role and context:
"It cut our monthly close from nine days to four." — VP of Finance, mid-market fintech (name withheld under NDA)
That attribution carries weight because it tells the prospect three things: the seniority of the person, the industry, and the honest reason the name is missing. "Withheld under NDA" is itself a subtle trust signal — it implies the customer is real and serious enough to have one. For more on keeping anonymized quotes believable, see how to anonymize a testimonial when the customer can't be named.
Strip the confidential specifics, keep the feeling
If the numbers are the sensitive part, remember that the emotional core of a testimonial is usually not the number — it is the relief, the confidence, the time recovered. You can often keep the persuasive substance while dropping the confidential detail.
- Replace an exact figure with a proportional one: "cut our reporting time by more than half" instead of the raw hours.
- Trade a named project for its shape: "during a high-stakes migration" instead of the project codename.
- Keep the verb, lose the object: "it caught an error before it reached our customers" without naming the customer or the error.
Run the softened version back past the customer. When they see that you are actively protecting them rather than trying to extract more than they can give, they relax — and a relaxed customer approves faster and offers more.
Escalate to the version that needs a sign-off
Sometimes the person who loves your product genuinely cannot approve anything alone, and a real quote requires their legal or communications team to bless it. That is not a dead end either; it is just a longer path. When you reach that point, the process of getting formal approval is its own skill — see how to get a testimonial approved by a customer's legal team for how to make that request easy to say yes to.
Alternatives when no public quote is possible at all
For the strictest cases, stop trying to force a public testimonial and use the endorsement in channels the NDA does not touch:
- A private reference call. The customer speaks one-to-one with a prospect. Nothing is published, so most confidentiality concerns evaporate.
- An aggregate stat. "Teams in regulated industries cut their audit prep by an average of 40%" reveals no single customer and is often fully compliant.
- A logo-free category signal. "Used by three of the ten largest US credit unions" names no one while still borrowing their credibility.
The one rule that never bends
Whatever route you take, the customer must explicitly approve the exact wording and format before it goes anywhere near a public page. Never publish an anonymized quote and assume the anonymity protects you — if the customer can be identified from context, or if they never agreed to the phrasing, you have created a problem far larger than a missing testimonial. Get the yes in writing, keep it on file, and treat the customer's confidentiality as more valuable than any single piece of social proof. Handled this way, an NDA becomes a constraint you design around, not a wall.