Software resilience that covers every system you rely on

Software escrow works through a legal arrangement between three parties: the software supplier, the customer, and an escrow agent such as Codekeeper. The supplier lodges its software assets, including source code, documentation, data and build instructions, into secure vaults that the escrow agent looks after. Those deposits are refreshed regularly so the stored versions stay current. Within the agreement, the parties set out defined release conditions, for example a supplier entering administration or liquidation, or withdrawing support. Should any of those conditions arise, the customer may request release of the materials. The escrow agent then reviews the request and, where valid, hands the assets to the customer.

Software escrow lowers business risk and safeguards continuity by keeping the software a business depends on accessible, even when a supplier can no longer support it. For bespoke software investments, it protects against supplier lock-in and the potential loss of mission-critical applications, letting your organisation run the software itself or bring in a third party. The arrangement also helps you meet compliance obligations, backed by documented proof that critical systems stay protected.

Within SaaS escrow, an application means the entire cloud-based software service your customers reach and use across the internet. That covers its source code, databases, configurations, deployment scripts, access credentials and third-party integrations.

Software escrow helps suppliers win enterprise deals by turning pressing continuity worries into a selling point. When a supplier offers escrow cover, it signals serious risk management and a long-term commitment to its customers. For enterprise buyers, escrow gives documented assurance that their software investments and daily operations stay protected, even if the supplier runs into trouble. That reassurance carries procurement teams through sign-off and shortens the path to closing, which counts for most when a smaller supplier is up against larger providers.

Source code protection can be up and running within 24 hours with most modern escrow solutions. We support 50+ integrations across the development platforms teams use most, syncing automatically with your Git repositories, cloud services and deployment systems. On the legal side, our in-house counsel draws up bespoke agreements, which can be governed by English law, and returns them within 24 hours.

The jurisdiction is yours to choose, and English law is available for UK agreements. Codekeeper's in-house legal team drafts your agreement and returns it within 24 hours.

Codekeeper's verification tiers and Software Resilience Certificates provide documented, tested proof that an important business service can be recovered. For firms subject to FCA and PRA operational resilience rules, that helps evidence recoverability and support a workable exit plan. It is one input to your resilience, not a regulatory approval in its own right.