Assuming (purely for the sake of argument) that a case might be made for some form of NDA, it seems that the law does not permit the company to avoid its responsibility on the grounds that no NDA has been signed.