European Union
Global standards
US
UK
Australia
Netherlands
Software Escrow Self-Run Recovery. The software your business runs on, held safe and yours to rebuild.
Software escrow keeps every piece of the application you depend on in a neutral vault, synced daily, and releases it to your team if an agreed condition is met. Escrow Pro proves the deposit builds first.
From $189 /mo
- ISO/IEC 27001:2022 certified
- 50+ integrations, synced daily
- Code in a neutral vault
- Synced daily
- Release terms agreed
- Rebuild passedPro
Trusted by 3 500+ teams in over 150 countries, from regulated enterprises to fast-growing software vendors
Why Escrow
Escrow holds the code. Escrow Pro proves it builds.
Holding a supplier's code used to be enough to pass an audit. Now reviews ask whether you can rebuild the systems you rely on, and Escrow Pro's AI agents give you the proof that you can.
Your sources
50+ integrations, synced daily
Escrow · The vault
Payments Core
Deposit current
- Source code3 repositories
- DatabaseDaily snapshot
- InfrastructureAWS config
- DocumentationBuild notes
Escrow Pro · The proof
Agentic Verification
Run #3 · AI Verification Lab
- Restore the depositRestored
- Isolated compileFrom source
- Start and checkHealth checks
Add Pro to prove the deposit rebuilds
Example application. Values are illustrative.
- Always current.Synced every day from the tools you already use, with no cap on deposits.
- Neutral.Held by Codekeeper and released to your team only on the terms you agreed.
- Proven.Escrow Pro rebuilds the deposit with Codekeeper's AI agents, up to four times a year.
Critical software risk
Whether you build it or buy it, you can't afford to lose software.
Some businesses run production lines, serve clients, and store records on third-party software. Others build their business around selling software. Without a way to recover, operations stay exposed to a sudden software failure.
Support stops overnight.
Insolvency, an acquisition, or a retired product ends updates, and the software runs on with nobody to fix it.
An update breaks the build.
A corrupted release or a missing dependency leaves code that won't compile when it's needed most.
The original team moves on.
Engineers leave, and the know-how behind the build, from setup steps to credentials, leaves with them.
In neutral custody
What is software escrow?
Software escrow, also called source code escrow, is an agreement in which a neutral party holds a vendor's source code, data, and documentation, and releases them to the customer if an agreed condition is met, such as the vendor's insolvency.
- The vendor deposits the source code, data, and documentation, and uses Escrow to win deals.
- Codekeeper keeps them in a secure vault, and releases them if an agreed condition is met.
- The user receives everything needed to bring the software back.
This guards against vendor failure and a breach of contract. For vendors, it removes a common blocker in enterprise deals.
By application
What we hold depends on how your software runs.
Different applications run on different types of components. Match your Escrow plan to how your software runs.
Software
On-premises and installed applications- Source code
- Data
- Documentation
From $199
SaaS
Hosted and subscription applications- Source code
- Data
- Documentation
- Deployment infrastructure
- Third-party services
- Credentials and access
From $299
AI
AI models and AI systems- Models
- Model deployments
- Agents and prompts
- Workflows
From $649
How it works
We set up Escrow with you. The evidence stays on file.
-
Our specialists sit down with you and help decide what each application's deposit should hold.
- Who
- Your team and a Codekeeper specialist, starting with an onboarding call.
- What you decide
- Which parts of each application go in the vault: usually the source code, build scripts, documentation, and data, plus credentials and configuration where relevant.
- You get
- A deposit scope for each application, written into the agreement.
-
Vendor and user sign an agreement that spells out every trigger, so nobody negotiates in a crisis.
- Who
- The vendor, the user, and Codekeeper. The vendor has to sign, since the code can only come from them.
- Your options
- Two-party (bipartite), where the vendor signs once and adds users as they come on board, or three-party (tripartite), where one user signs alongside the vendor from day one.
- You get
- An escrow agreement with the release conditions agreed at signing, such as insolvency, discontinued support, or a material breach.
-
50+ integrations sync each change daily, and a monthly Vault Report documents which agreed materials are in the deposit.
- Who
- Our specialists, working with your developers to connect the first deposits.
- Then
- Each change syncs daily through the integrations.
- You get
- A monthly Vault Report that documents which agreed materials are in the vault.
-
Launch a build test from your account before any review, and add each certificate to your evidence.
- How
- AI agents in the Codekeeper AI Verification Lab rebuild the deposit in isolation, without calling on the vendor.
- If something is missing
- It is flagged, so the vendor can add it before a release.
- You get
- Proof it builds: a Recoverability Certificate, backed by a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile.
If a release condition is met, we verify the condition and release the deposit to you. Your team runs the recovery. Talk it through with a specialist
Escrow or Escrow Pro
Put your recovery through a dry run.
Escrow keeps everything you'd need to recover complete and ready to release. Escrow Pro tests the deposit: Codekeeper's AI agents rebuild your software whenever you choose, so if the deposit is ever released, you already know your software builds.
Escrow
From$199per month
Everything you need to be protected.
Included
- A copy of your software in a neutral vault
- Daily sync through 50+ integrations
- Monthly checks for missing files
- Released to your team to recover
Escrow Pro
RecommendedFrom$449per month
Test the rebuild before you need a recovery.
Everything in Escrow, plus
- Agentic Verification: up to four rebuilds a year, on supported technology stacks
- Codekeeper's own AI, off public models
- Missing files flagged in each rebuild
- A tested isolated compile, ready to deploy
- An exit workbook for the recovery
- Recoverability Certificates and SBOMs
EscrowEscrow CertificateShows the deposit is held and what's in it. Example values.
Escrow ProRecoverability CertificateDocuments the rebuild and its result. It doesn't grant release rights; those come from the agreement. Example values.Every Escrow plan
Get far more than a vault.
Agreements built for your deal.
Choose a template or custom contract for as many parties as you need, with release conditions written in.
Jurisdiction set to suit you.
Name the governing law that fits your business, and leave the negotiation up to our in-house counsel.
Deposits that update themselves.
Hook up GitHub, GitLab, or any of our 50+ integrations, and new versions reach the vault daily, without limit.
Activity and proof in one place.
Monitor all activity with full audit trails, and share certified software resilience evidence on request.
Every version locked down.
Keep each snapshot encrypted with AES-256, behind MFA, in immutable storage no one can alter.
Releases handled 24/7/365.
Raise a request at any hour, and our team confirms the conditions are met before passing the deposit on.
Other protections
Rather have us on the recovery?
Every plan protects your access to critical software. What changes is who handles a recovery, and whether other supporting services stay switched on in the meantime.
Resilience
For the software you can't risk rebuilding yourself. Return critical third-party software to working order, with Codekeeper's engineers taking on the recovery.
From$399
ExploreResilienceContinuity
For the services that just can't go offline. Prevent downtime for critical applications, with their hosting and service bills paid for an agreed period.
From$1,449
ExploreContinuityAlways have a way back to working software.
Software is only as safe as your ability to recover it. Talk it through with an escrow specialist. The call covers:
- A review of the critical applications you depend on
- A setup plan, from the agreement to the first deposit
- Answers on release terms, jurisdiction, and verification
Frequently asked questions
Learn how Escrow works for everyone involved.
Does the vendor have to take part?
Yes, the vendor has to take part, because only the vendor can deposit the source code. A two-party agreement lets the vendor set up escrow once and add users later, while a three-party agreement brings one user in from the start.
Can several users rely on one deposit?
Yes, several users can rely on one deposit: a multi-party agreement covers each of them, under the release conditions you agree on together.
What gets deposited?
A software escrow deposit holds whatever it takes to rebuild and run the application: source code, build scripts, documentation, data, and, where relevant, credentials and configuration. That's far more than code, even though the service is often called source code escrow. The agreement lists every item, and the automated check documents which of them are there.
Do we have to set the deposit up ourselves?
No, you don't have to set up the deposit yourselves. We set up the first deposits and integrations with your team, starting with an onboarding call.
Is there anything to pay besides the monthly price?
Besides the monthly price, there's a one-time setup fee of $499 per agreement, on Escrow and Escrow Pro alike, and release processing at $199 per hour if a release is ever requested. One beneficiary is included, and you can add more as an add-on.
What triggers a release?
A release is triggered when one of the release conditions in your escrow agreement is met, for example the vendor's insolvency, discontinued support, or a material breach. We verify the condition first, then release the deposit to the beneficiary.
How quickly do we get the code after a release?
You get the code as soon as the release is verified. We check each request first, with a legal review, verification of the release condition, and authentication of the beneficiary, then release the deposit to you.
Will Codekeeper recover the software after a release?
No, Codekeeper doesn't recover the software after a release on Escrow. Software escrow releases the deposit to you, and your team or a partner of your choice runs the recovery. If you'd rather Codekeeper ran the recovery, choose Resilience.
What does Escrow Pro add?
Escrow Pro adds Agentic Verification: AI agents rebuild a complete deposit on their own in the Codekeeper AI Verification Lab, up to four times a year, on supported technology stacks. Each successful rebuild issues a Recoverability Certificate, with a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile.