European Union
Global standards
US
UK
Australia
Netherlands
Software Escrow Self-Run Recovery. The software your business runs on, held safe and yours to rebuild.
With software escrow, every part of the application you rely on sits in a neutral vault, synced each day, ready for release to your team once an agreed condition is met. Escrow Pro shows the deposit builds before any release.
From $189 /mo
- ISO/IEC 27001:2022 certified
- Daily syncs across 50+ integrations
- Code in a neutral vault
- Synced daily
- Release terms agreed
- Rebuild passedPro
Relied on by 3 500+ teams across more than 150 countries, from regulated enterprises to software vendors growing at pace
Why Escrow
Escrow holds the code. Escrow Pro proves it builds.
Once, holding a supplier's code was enough to satisfy an audit. Today's reviews want to know whether the systems you depend on can be rebuilt, and Escrow Pro's AI agents supply that proof.
Where your deposit comes from
Daily syncs from 50+ integrations
Escrow · The vault
Payments Core
Deposit current
- Source code3 repositories
- DatabaseDaily snapshot
- InfrastructureAWS config
- DocumentationBuild notes
Escrow Pro · The proof
Agentic Verification
Run #3 · AI Verification Lab
- Restore the depositRestored
- Isolated compileFrom source
- Start and checkHealth checks
Add Pro to prove the deposit rebuilds
A sample application with illustrative values.
- Always current.Synced every day from the tools you already use, with no cap on deposits.
- Neutral. Codekeeper holds it and releases it to your team only under the terms you signed up to.
- Proven. With Escrow Pro, Codekeeper's AI agents rebuild the deposit as many as four times a year.
The risk to critical software
Whether you make software or buy it, losing it is a risk you can't take.
Some organisations rely on third-party software to run production lines, serve clients, and keep records. Others exist to sell software. With no route to recovery, a sudden failure leaves operations exposed.
Support ends without warning.
An insolvency, a takeover, or a discontinued product halts updates, leaving the software running with no one to fix it.
A new release breaks the build.
A corrupted release or a dependency that's gone missing means the code won't compile at the worst possible moment.
The people who built it leave.
When engineers move on, the knowledge behind the build goes too, from setup steps to credentials.
Held neutrally
Software escrow, explained.
Software escrow, sometimes known as source code escrow, is an agreement under which a neutral party keeps a vendor's source code, data, and documentation, and passes them to the customer when an agreed condition, such as the vendor's insolvency, is met.
- The vendor puts its source code, data, and documentation on deposit, which helps it close enterprise deals.
- Codekeeper holds everything in a secure vault until an agreed condition calls for a release.
- The user gets everything required to restore the software.
It protects against vendor failure and breach of contract, and for vendors it clears a frequent obstacle in enterprise sales.
Application types
How your software runs decides what we hold.
Applications are built from different kinds of components, so your Escrow plan should fit the way your software runs.
Software
Installed and on-premises applications- Source code
- Data
- Documentation
From $189
SaaS
Subscription and hosted applications- Source code
- Data
- Documentation
- Deployment infrastructure
- Third-party services
- Credentials and access
From $279
AI
AI systems and models- Models
- Model deployments
- Agents and prompts
- Workflows
From $599
How it works
We set up Escrow with you. The evidence stays on file.
-
Our specialists work through it with you, deciding what each application's deposit needs to contain.
- Who
- Your team and a Codekeeper specialist, starting with an onboarding call.
- What you decide
- Which parts of each application go in the vault: usually the source code, build scripts, documentation, and data, plus credentials and configuration where relevant.
- You get
- A deposit scope for each application, written into the agreement.
-
Vendor and user sign one agreement naming every trigger in advance, which spares everyone a negotiation in the middle of a crisis.
- Who
- The vendor, the user, and Codekeeper. The vendor has to sign, since the code can only come from them.
- Your options
- Two-party (bipartite), where the vendor signs once and adds users as they come on board, or three-party (tripartite), where one user signs alongside the vendor from day one.
- You get
- An escrow agreement with the release conditions agreed at signing, such as insolvency, discontinued support, or a material breach.
-
Changes sync daily through 50+ integrations, while a monthly Vault Report shows which agreed materials sit in the deposit.
- Who
- Our specialists, working with your developers to connect the first deposits.
- Then
- Each change syncs daily through the integrations.
- You get
- A monthly Vault Report that documents which agreed materials are in the vault.
-
Before any review, run a build test from your account and add the certificate it produces to your evidence.
- How
- AI agents in the Codekeeper AI Verification Lab rebuild the deposit in isolation, without calling on the vendor.
- If something is missing
- It is flagged, so the vendor can add it before a release.
- You get
- Proof it builds: a Recoverability Certificate, backed by a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile.
If a release condition is met, we verify the condition and release the deposit to you. Your team runs the recovery. Talk it through with a specialist
Escrow or Escrow Pro
Give your recovery a trial run first.
Escrow keeps all you'd need for a recovery complete and ready for release. Escrow Pro goes further and tests the deposit, with Codekeeper's AI agents rebuilding your software whenever you choose, so if a release ever happens, you already know the software builds.
Escrow
From $189 per month
Everything you need to be protected.
Included
- Software held by a neutral party
- Syncs every day through 50+ integrations
- Missing files caught each month
- Deposit released to your team for recovery
Escrow Pro
RecommendedFrom $419 per month
Prove the rebuild before a recovery is ever needed.
Everything in Escrow, plus
- Agentic Verification, with as many as four rebuilds a year on supported technology stacks
- Sovereign AI agents in the Codekeeper AI Verification Lab
- Any missing files flagged during each rebuild
- A tested isolated compile you can deploy
- An exit workbook to guide the recovery
- Recoverability Certificates and SBOMs on file
EscrowEscrow CertificateConfirms the deposit is held and lists its contents. Values are examples.
Escrow ProRecoverability CertificateRecords the rebuild and its outcome. Release rights stay with the agreement. Values are examples.Included with Escrow
Expect much more than a vault.
Agreements shaped around your deal.
Pick a template or a bespoke contract for however many parties you need, with the release conditions built in.
A jurisdiction that suits you.
Choose the governing law that fits your business, and let our in-house counsel handle the negotiation.
Self-updating deposits.
Connect GitHub, GitLab, or any of our 50+ integrations, and fresh versions arrive in the vault every day, with no limit.
All activity and evidence together.
Track every action through full audit trails, and share certified software resilience evidence whenever it's requested.
Each version secured.
Store every snapshot with AES-256 encryption and MFA, in immutable storage that can't be changed.
Releases processed 24/7/365.
Submit a request at any time of day, and our team checks the conditions are met before the deposit is passed on.
Other ways to protect
Prefer us to handle the recovery?
All plans safeguard your access to critical software. They differ in who carries out a recovery, and whether the supporting services stay running meanwhile.
Resilience
For the software you can't risk rebuilding yourself. Get critical third-party software working again, with Codekeeper's engineers in charge of the recovery.
From$369
ExploreResilienceContinuity
For the services that just can't go offline. Keep critical applications free of downtime, with their hosting and service bills covered for an agreed period.
From$1,339
ExploreContinuityAlways have a way back to working software.
Your software is only as safe as your ability to bring it back. Speak to an escrow specialist, and the call will cover:
- Your critical applications, reviewed one by one
- A setup plan that takes you from agreement to first deposit
- Straight answers on release terms, jurisdiction, and verification
Frequently asked questions
See how Escrow works for each party involved.
Must the vendor be involved?
Yes, the vendor must be involved, since only the vendor can deposit the source code. With a two-party agreement, the vendor sets up escrow once and adds users later, while a three-party agreement includes one user from day one.
Can more than one user depend on a single deposit?
Yes, more than one user can depend on a single deposit, with a multi-party agreement covering every one of them under release conditions you all agree.
What goes into the deposit?
Everything needed to rebuild and run the application goes into a software escrow deposit: source code, build scripts, documentation, data, and, where it applies, credentials and configuration. That goes well beyond code, even though the service often goes by the name source code escrow. Each item is listed in the agreement, and the automated check records which ones are present.
Are we responsible for setting up the deposit?
No, you aren't responsible for setting up the deposit on your own. Your team and ours set up the first deposits and integrations together, starting with an onboarding call.
Are there costs on top of the monthly price?
Yes, on top of the monthly price there's a one-off setup fee of $499 per agreement, the same for Escrow and Escrow Pro, plus release processing at $199 per hour should a release ever be requested. One beneficiary comes included, and further beneficiaries are available as an add-on.
What sets off a release?
A release is set off when one of the release conditions in your escrow agreement applies, such as the vendor's insolvency, discontinued support, or a material breach. We verify the condition before releasing the deposit to the beneficiary.
How soon is the code in our hands after a release?
The code is in your hands as soon as the release is verified. Every request is checked first, through a legal review, verification of the release condition, and authentication of the beneficiary, before the deposit is released to you.
Does Codekeeper handle the recovery after a release?
No, Codekeeper doesn't handle the recovery after a release on Escrow. Software escrow puts the deposit in your hands, and your team or a partner you choose carries out the recovery. If you'd prefer Codekeeper to run it, choose Resilience.
What extra does Escrow Pro include?
Escrow Pro includes Agentic Verification as its extra: AI agents independently rebuild a complete deposit in the Codekeeper AI Verification Lab, as many as four times a year, on supported technology stacks. Every successful rebuild issues a Recoverability Certificate, along with a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile.