--- title: "Software escrow: Escrow and Escrow Pro · Codekeeper" description: Keep the application you rely on in a neutral vault with software escrow, and add Agentic Verification with Escrow Pro to test that it rebuilds. canonical_url: https://codekeeper.co/en-gb/escrow --- # Software Escrow Self-Run Recovery. The software your business runs on, _held safe and yours to rebuild._ With software escrow, every part of the application you rely on sits in a neutral vault, synced each day, ready for release to your team once an agreed condition is met. Escrow Pro shows the deposit builds before any release. From **$189** /mo [Book a demo](https://codekeeper.co/book-a-demo) [View pricing plans](https://codekeeper.co/pricing/escrow) * ISO/IEC 27001:2022 certified * Daily syncs across 50+ integrations ![Two engineers review an escrow's deposits in the Codekeeper app](https://codekeeper.co/hubfs/codekeeper-site/images/escrow/hero-1600.webp) 0:00 / 1:09 **Escrow and Escrow Pro**Keep the code safe and show that it builds1:09 * Code in a neutral vault * Synced daily * Release terms agreed * Rebuild passed_Pro_ Relied on by 3 500+ teams across more than 150 countries, from regulated enterprises to software vendors growing at pace ![Airbus](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/airbus.svg) ![Bayer](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/bayer.svg) ![European Parliament](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/eu-parliament-dark.svg) ![General Motors](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/general-motors.svg) ![Intuit](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/intuit.svg) ![Nestlé](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/nestle.svg) ![PepsiCo](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/pepsico.svg) ![Pfizer](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/pfizer.svg) Why Escrow ## Escrow holds the code. _Escrow Pro proves it builds._ Once, holding a supplier's code was enough to satisfy an audit. Today's reviews want to know whether the systems you depend on can be rebuilt, and Escrow Pro's AI agents supply that proof. Escrow Escrow Pro Where your deposit comes from * ![GitHub](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/github.svg) * ![Bitbucket](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/bitbucket.svg) * ![AWS](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/aws.svg) * ![Azure](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/azure.svg) * ![Google Cloud](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/gcp.svg) * ![Stripe](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/stripe.svg) Daily syncs from **50+ integrations** Escrow · The vault Payments Core Deposit current Synced today * Source code_3 repositories_ * Database_Daily snapshot_ * Infrastructure_AWS config_ * Documentation_Build notes_ Vault Report · monthly check done Escrow Pro · The proof Agentic Verification Run #3 · AI Verification Lab Pro * Restore the deposit_Restored_ * Isolated compile_From source_ * Start and check_Health checks_ **Passed** Recoverability Certificate issued Add Pro to prove the deposit rebuilds A sample application with illustrative values. * **Always current.**Synced every day from the tools you already use, with no cap on deposits. * **Neutral.** Codekeeper holds it and releases it to your team only under the terms you signed up to. * **Proven.** With Escrow Pro, Codekeeper's AI agents rebuild the deposit as many as four times a year. The risk to critical software ## Whether you make software or buy it, losing it is a risk you can't take. Some organisations rely on third-party software to run production lines, serve clients, and keep records. Others exist to sell software. With no route to recovery, a sudden failure leaves operations exposed. ### Support ends without warning. An insolvency, a takeover, or a discontinued product halts updates, leaving the software running with no one to fix it. ### A new release breaks the build. A corrupted release or a dependency that's gone missing means the code won't compile at the worst possible moment. ### The people who built it leave. When engineers move on, the knowledge behind the build goes too, from setup steps to credentials. Held neutrally ## Software escrow, explained. Software escrow, sometimes known as source code escrow, is an agreement under which a neutral party keeps a vendor's source code, data, and documentation, and passes them to the customer when an agreed condition, such as the vendor's insolvency, is met. * **The vendor** puts its source code, data, and documentation on deposit, which helps it close enterprise deals. * **Codekeeper** holds everything in a secure vault until an agreed condition calls for a release. * **The user** gets everything required to restore the software. It protects against vendor failure and breach of contract, and for vendors it clears a frequent obstacle in enterprise sales. ![A vendor and a customer sign an escrow agreement](https://codekeeper.co/hubfs/codekeeper-site/images/escrow/agreement-1200.webp) **Escrow agreement**Atlas Payroll · Escrow ProDeposit current **Depositor**Northwind Software Ltd. Vendor **Beneficiary**Example Logistics Group1 included **Deposit**Source code · Data · DocumentationSynced daily **Release conditions**Insolvency · Discontinued support · Material breachAgreed at signing **Latest check**Vault Report issued2 days ago A sample agreement with made-up names. Application types ## How your software runs decides what we hold. Applications are built from different kinds of components, so your Escrow plan should fit the way your software runs. [Software Installed and on-premises applications Source code Data Documentation From **$189** Software escrow](https://codekeeper.co/software-escrow) [SaaS Subscription and hosted applications Source code Data Documentation Deployment infrastructure Third-party services Credentials and access From **$279** SaaS escrow](https://codekeeper.co/saas-escrow) [AI AI systems and models Models Model deployments Agents and prompts Workflows From **$599** AI escrow](https://codekeeper.co/ai-escrow) How it works ## We set up Escrow with you. _The evidence stays on file._ 1. 1Define the scope for each application. Our specialists work through it with you, deciding what each application's deposit needs to contain. Show details Who Your team and a Codekeeper specialist, starting with an onboarding call. What you decide Which parts of each application go in the vault: usually the source code, build scripts, documentation, and data, plus credentials and configuration where relevant. You get A deposit scope for each application, written into the agreement. 2. 2Lock in when a release happens. Vendor and user sign one agreement naming every trigger in advance, which spares everyone a negotiation in the middle of a crisis. Show details Who The vendor, the user, and Codekeeper. The vendor has to sign, since the code can only come from them. Your options Two-party (bipartite), where the vendor signs once and adds users as they come on board, or three-party (tripartite), where one user signs alongside the vendor from day one. You get An escrow agreement with the release conditions agreed at signing, such as insolvency, discontinued support, or a material breach. 3. 3Plug in the tools your developers use. Changes sync daily through 50+ integrations, while a monthly Vault Report shows which agreed materials sit in the deposit. Show details Who Our specialists, working with your developers to connect the first deposits. Then Each change syncs daily through the integrations. You get A monthly Vault Report that documents which agreed materials are in the vault. 4. 4Put the rebuild to the test with Escrow Pro. Before any review, run a build test from your account and add the certificate it produces to your evidence. Show details How AI agents in the Codekeeper AI Verification Lab rebuild the deposit in isolation, without calling on the vendor. If something is missing It is flagged, so the vendor can add it before a release. You get Proof it builds: a Recoverability Certificate, backed by a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile. Play with voice If a release condition is met, we verify the condition and release the deposit to you. Your team runs the recovery. [Talk it through with a specialist](https://codekeeper.co/book-a-demo) Escrow or Escrow Pro ## Give your recovery a trial run first. Escrow keeps all you'd need for a recovery complete and ready for release. Escrow Pro goes further and tests the deposit, with Codekeeper's AI agents rebuilding your software whenever you choose, so if a release ever happens, you already know the software builds. ### Escrow From **$189** per month Everything you need to be protected. Included * Software held by a neutral party * Syncs every day through 50+ integrations * Missing files caught each month * Deposit released to your team for recovery [Choose Escrow](https://codekeeper.co/pricing/build-a-plan?prot=escrow&level=base) ### Escrow Pro Recommended From **$419** per month Prove the rebuild before a recovery is ever needed. Everything in Escrow, plus * Agentic Verification, with as many as four rebuilds a year on supported technology stacks * Sovereign AI agents in the Codekeeper AI Verification Lab * Any missing files flagged during each rebuild * A tested isolated compile you can deploy * An exit workbook to guide the recovery * Recoverability Certificates and SBOMs on file [Choose Escrow Pro](https://codekeeper.co/pricing/build-a-plan?prot=escrow&level=pro) ![An example Escrow Certificate, issued by Codekeeper for a fictional application](https://codekeeper.co/hubfs/codekeeper-site/images/certificates/escrow-1200.webp) Escrow**Escrow Certificate**Confirms the deposit is held and lists its contents. Values are examples. ![An example Recoverability Certificate for a passed rebuild of a fictional application](https://codekeeper.co/hubfs/codekeeper-site/images/certificates/recoverability-1200.webp) Escrow Pro**Recoverability Certificate**Records the rebuild and its outcome. Release rights stay with the agreement. Values are examples. Get the sample evidence pack [See Agentic Verification in action](https://codekeeper.co/agentic-verification) Included with Escrow ## Expect much more than a vault. ### Agreements shaped around your deal. Pick a template or a bespoke contract for however many parties you need, with the release conditions built in. ### A jurisdiction that suits you. Choose the governing law that fits your business, and let our in-house counsel handle the negotiation. ### Self-updating deposits. Connect GitHub, GitLab, or any of our 50+ integrations, and fresh versions arrive in the vault every day, with no limit. * ![GitHub](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/github.svg) * ![Bitbucket](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/bitbucket.svg) * ![AWS](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/aws.svg) * ![Microsoft Azure](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/azure.svg) * ![Google Cloud](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/gcp.svg) * ![Shopify](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/shopify.svg) * ![Stripe](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/stripe.svg) * ![Chargebee](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/chargebee.svg) ### All activity and evidence together. Track every action through full audit trails, and share certified software resilience evidence whenever it's requested. ### Each version secured. Store every snapshot with AES-256 encryption and MFA, in immutable storage that can't be changed. ### Releases processed 24/7/365. Submit a request at any time of day, and our team checks the conditions are met before the deposit is passed on. Other ways to protect ## Prefer us to handle the recovery? All plans safeguard your access to critical software. They differ in who carries out a recovery, and whether the supporting services stay running meanwhile. Managed Recovery ### Resilience **For the software you can't risk rebuilding yourself.** Get critical third-party software working again, with Codekeeper's engineers in charge of the recovery. From **$369** [Explore**Resilience**](https://codekeeper.co/resilience) Full Continuity ### Continuity **For the services that just can't go offline.** Keep critical applications free of downtime, with their hosting and service bills covered for an agreed period. From **$1,339** [Explore**Continuity**](https://codekeeper.co/continuity) [Compare plans](https://codekeeper.co/pricing/compare) ## Always have a way back _to working software._ Your software is only as safe as your ability to bring it back. Speak to an escrow specialist, and the call will cover: * Your critical applications, reviewed one by one * A setup plan that takes you from agreement to first deposit * Straight answers on release terms, jurisdiction, and verification [Book a demo](https://codekeeper.co/book-a-demo) [Build a plan](https://codekeeper.co/pricing/build-a-plan) Frequently asked questions ## See how Escrow works for each party involved. Must the vendor be involved? Yes, the vendor must be involved, since only the vendor can deposit the source code. With a two-party agreement, the vendor sets up escrow once and adds users later, while a three-party agreement includes one user from day one. Can more than one user depend on a single deposit? Yes, more than one user can depend on a single deposit, with a multi-party agreement covering every one of them under release conditions you all agree. What goes into the deposit? Everything needed to rebuild and run the application goes into a software escrow deposit: source code, build scripts, documentation, data, and, where it applies, credentials and configuration. That goes well beyond code, even though the service often goes by the name source code escrow. Each item is listed in the agreement, and the automated check records which ones are present. Are we responsible for setting up the deposit? No, you aren't responsible for setting up the deposit on your own. Your team and ours set up the first deposits and integrations together, starting with an [onboarding call](https://codekeeper.co/book-onboarding-call) . Are there costs on top of the monthly price? Yes, on top of the monthly price there's a one-off setup fee of $499 per agreement, the same for Escrow and Escrow Pro, plus release processing at $199 per hour should a release ever be requested. One beneficiary comes included, and further beneficiaries are available as an add-on. What sets off a release? A release is set off when one of the release conditions in your escrow agreement applies, such as the vendor's insolvency, discontinued support, or a material breach. We verify the condition before releasing the deposit to the beneficiary. How soon is the code in our hands after a release? The code is in your hands as soon as the release is verified. Every request is checked first, through a legal review, verification of the release condition, and authentication of the beneficiary, before the deposit is released to you. Does Codekeeper handle the recovery after a release? No, Codekeeper doesn't handle the recovery after a release on Escrow. Software escrow puts the deposit in your hands, and your team or a partner you choose carries out the recovery. If you'd prefer Codekeeper to run it, choose [Resilience](https://codekeeper.co/resilience) . What extra does Escrow Pro include? Escrow Pro includes Agentic Verification as its extra: AI agents independently rebuild a complete deposit in the Codekeeper AI Verification Lab, as many as four times a year, on supported technology stacks. Every successful rebuild issues a Recoverability Certificate, along with a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile.