My co-founder is rightfully concerned that the NDA terms we've been sent are too lenient in case of information leaks. We work in a competitive drug development space, and any information leaks to a large pharmaceutical company could cause significant harm to our business. We are far from idea stage.
The expert appointed by the fund is currently an academic, but with some clear connections to the pharmaceutical industry.
You should make sure that it covers the information of both parties (i.e., it's mutual and not one-way), and that the term is long enough to protect your IP (3-5 years might be standard; some large companies want shorter terms to shorten their liability window).
Enforcement would be a suit for damages or, in certain cases, injunctive relief that would allow the disclosing party to bring a claim to a judge asking for an injunction that would force the receiving party to do/stop doing whatever it was that violated the NDA.
Hope that helps!