Global standards
US
Australia
Netherlands
Failure
Your vendor's outage becomes yours
A faulty CrowdStrike update crashed 8.5 million Windows machines, and Delta cancelled 7 000 flights over the following five days.
Software resilience
Keep your software running. Whatever happens.
Safeguard the applications your organisation can't do without, whether you build them in-house or buy them in. If one fails, have it released to your team, recovered on your behalf, or kept live while it's brought back.
- ISO/IEC 27001:2022 certified
- Securing software for 10+ years
Evidence that it builds, ready to hand to your auditor.Recoverability CertificateRebuild Report and SBOM Framework references for PRA SS2/21 and DORA
Trusted by 3 500+ teams to build software resilience, from regulated enterprises to fast-scaling software vendors
The risk in third-party software
Your business runs on software you don't control.
Bought in or built in-house, a failing application hits your operations before anyone else's. With no plan agreed in advance, the recovery turns into guesswork.
These organisations believed they were protected as well.
Attack
Attackers seize control of your systems
A cyberattack forced Jaguar Land Rover to shut down every system, and not one car came off the line for 5 weeks.
Non-compliance
A supplier's code lands you the fine
Ticketmaster was fined £1.25M under GDPR after a third-party chatbot on its payment page exposed customers' card details.
Incidents like these are frequent enough that we log them as they happen. Follow the News Ticker
Why CodekeeperDesigned to get software back up and running.
Codekeeper has stood between software builders and the organisations relying on their work as the neutral party for more than 10 years. Whatever goes wrong, our job is making sure the software returns.
Neutral from the ground up.
What's yours stays yours. We keep the copy and release it only under the terms you signed up to.
Your code remains confidential.
Verification happens in a secure environment, powered by AI models Codekeeper runs itself.
Certified to ISO 27001.
Your copy is protected to a security standard that independent auditors review every year.
Three routes back
If your software goes down, you have three routes to recovery.
Released to you · Escrow Pro
Run the software in-house. Your team receives its code, already verified to build, and carries on.
Escrow Pro
Recovered for you · Resilience Pro
Let us handle the recovery. Working from the copy in our care, our engineers rebuild the software and restart it, on a best-effort basis.
Resilience Pro
Kept switched on · Continuity Pro
Stay up and running during the repair. We keep the service available while the recovery takes place.
Continuity ProWhat's new
From holding the code to proving you can get it back.
Holding the code is only the first step; the real aim is getting your application running again. Escrow Pro, Resilience, Continuity, and Agentic Verification carry your software protection the rest of the way.
Explore the changes →Chapters
More films
Verification
Verification now happens before you need it, run by Codekeeper's own AI models
Until now: verifying software meant weeks of manual work.
Recovery
Codekeeper can now take charge of the recovery
Until now: escrow ended with the code in your hands and the recovery on your team's plate.
Continuity
Your services remain online throughout the recovery
Until now: services stayed offline until the recovery had finished.
Pick the protection, and stay in control.
All the applications you can't afford to lose live in one account, alongside the evidence that backs them up.
Looking for daily backups of systems you run yourself? Take a look at Software Backup. See every pricing plan
Our proof
Proof counts for more than promises.
Anyone can say your software can be recovered. We rebuild it to show you.
Two ways to get the proof.
Two ways to get the proof.
Included with every Pro planAgentic Verification. A copy of your software, ready to run whenever you ask.
Codekeeper's own models power AI agents that map how your software fits together, then rebuild it from the copy in our care as many as four times a year, on supported technology stacks.
Available as an add-on to any planExit Exercise. The most thorough test we run on your software.
Working from the deposit alone, with no vendor or original developers involved, our specialists recover your software, restore the data, deploy it, and test the business functions you choose.
What each plan includes
Standard on every planEscrow · Resilience · Continuity
- Plan Certificate
- Vault Certificate
- Vault Report
ProvesIt's there.
Pro plansAdds Agentic Verification
- Recoverability Certificate
- Rebuild Report
- SBOM
- Tested isolated compile
- Exit workbook
ProvesIt builds.
Exit Exercise add-onAdds an exit that's been tested
- Exit Exercise Report
- Exit Exercise Certificate
- SBOM
- Framework annex
ProvesYou could exit and keep working.
Before speaking to us, browse an illustrative evidence pack filled with example values.
Regulators now expect exit plans that hold up in practice.
Financial regulators no longer stop at "is there a contract?"; they now ask "could you really leave, and keep operating?"
European UnionDORA
Regulation (EU) 2022/2554
Art. 28(8)Exit plans shall be comprehensive, documented and, in accordance with the criteria set out in Article 4(2), shall be sufficiently tested and reviewed periodically.
United KingdomPRA SS2/21
PRA Supervisory Statement SS2/21
¶ 10.24Firms should take reasonable steps to test exit plans; in particular, those relating to stressed exits.
Your assessment draws on Codekeeper's evidence, but judging whether it meets a given requirement rests with you and your assessor.
Whether you build software or buy it in.
- You buy software and have the skills to recover itRelease rights are settled before you sign. If the vendor can no longer support it, the copy is released to you.Best fitEscrow
- You buy software and would rather we recovered itWe hold the same copy. Should the software fail, our engineers get it running again for you.Best fitResilience
- You sell software to large organisationsShow buyers the software is safeguarded and proven to build, so deals keep moving.
Best fitResilience Pro - You run a system that must stay onlineWe keep paying for the services underneath it, so it stays live throughout the recovery.Best fitContinuity
Read what customers say about protecting their software with Codekeeper.
“Their team was responsive and helpful, and that made the process nice and smooth. Codekeeper is providing us with an escrow platform which we needed in order to secure an enterprise sales agreement with a new customer.”
Daniel K.
Co-Founder & CEO, Small business
“We've had a great experience with CodeKeeper. The setup process was smooth, and the team made everything very straightforward. Knowing our critical software assets are securely protected gives us real peace of mind.”
Jordan Adler
Google review
“We worked with Codekeeper as our escrow provider for major enterprise deployments and found them to be extremely professional, responsive, and flexible throughout.”
Ross Kilshaw
Google review
Connect once. Your deposit stays current.
We rebuilt software protection from first principles to offer more flexibility, more features, and better value than traditional providers. A single connection to your systems brings automatic daily syncs, fresh backups, and deposits that stay current.
- 50+ integrations, from GitHub, GitLab, and Bitbucket to AWS, Azure, and Google Cloud
- Deposits sync daily, with no per-deposit fees
- Certified to ISO 27001, with AES-256 encryption for stored data
- Beneficiaries get access once the release is verified
Frequently asked questions
Questions worth asking first.
How do Escrow, Resilience, and Continuity differ?
Escrow, Resilience, and Continuity differ in who brings your software back, and whether it stays online in the meantime. With Escrow, the copy is released to you and your own team handles the recovery. With Resilience, our engineers handle it for you. Continuity works with either one, keeping the hosting and services your software relies on paid and switched on for an agreed period, with the bills recharged at cost, so it stays online while it's recovered.
How do you define an "application"?
We define an application as any system your organisation can't afford to lose: vendor software, a SaaS platform, an AI system, or something built in-house. You pay per application, with separate rates for software, SaaS, and AI.
Is my code secure with Codekeeper?
Yes, your code is secure with Codekeeper. We're ISO/IEC 27001:2022 certified, and every copy is encrypted both in transit and at rest. Agentic Verification runs on our own models, so your code never reaches a public AI. The Trust Center has the full detail.
Can Codekeeper make us DORA or NIS2 compliant?
No, Codekeeper can't make you DORA or NIS2 compliant on its own, and no product can. What we provide is evidence that backs it up: certificates, Rebuild Reports, SBOMs, and Exit Exercise Reports. They inform your own compliance assessment rather than replacing it.
Protect the software your business can't run without.
Start with the application whose failure would bring your business down. We'll go through your stack with you and show what each protection covers.