--- title: "Software escrow: Escrow and Escrow Pro | Codekeeper" description: "Software escrow that keeps the application you depend on safe in a neutral vault. Escrow Pro adds Agentic Verification: rebuild tests that prove recovery." canonical_url: https://codekeeper.co/escrow --- # Software Escrow Self-Run Recovery. The software your business runs on, _held safe and yours to rebuild._ Software escrow keeps every piece of the application you depend on in a neutral vault, synced daily, and releases it to your team if an agreed condition is met. Escrow Pro proves the deposit builds first. From **$189** /mo [Book a demo](https://codekeeper.co/book-a-demo) [View pricing plans](https://codekeeper.co/pricing/escrow) * ISO/IEC 27001:2022 certified * 50+ integrations, synced daily ![Two engineers review escrow deposits in the Codekeeper app](https://codekeeper.co/hubfs/codekeeper-site/images/escrow/hero-1600.webp) 0:00 / 1:09 **Escrow and Escrow Pro**Hold the code, and prove it builds1:09 * Code in a neutral vault * Synced daily * Release terms agreed * Rebuild passed_Pro_ Trusted by 3 500+ teams in over 150 countries, from regulated enterprises to fast-growing software vendors ![Airbus](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/airbus.svg) ![Bayer](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/bayer.svg) ![European Parliament](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/eu-parliament-dark.svg) ![General Motors](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/general-motors.svg) ![Intuit](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/intuit.svg) ![Nestlé](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/nestle.svg) ![PepsiCo](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/pepsico.svg) ![Pfizer](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/pfizer.svg) Why Escrow ## Escrow holds the code. _Escrow Pro proves it builds._ Holding a supplier's code used to be enough to pass an audit. Now reviews ask whether you can rebuild the systems you rely on, and Escrow Pro's AI agents give you the proof that you can. Escrow Escrow Pro Your sources * ![GitHub](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/github.svg) * ![Bitbucket](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/bitbucket.svg) * ![AWS](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/aws.svg) * ![Azure](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/azure.svg) * ![Google Cloud](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/gcp.svg) * ![Stripe](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/stripe.svg) **50+ integrations** , synced daily Escrow · The vault Payments Core Deposit current Synced today * Source code_3 repositories_ * Database_Daily snapshot_ * Infrastructure_AWS config_ * Documentation_Build notes_ Vault Report · monthly check done Escrow Pro · The proof Agentic Verification Run #3 · AI Verification Lab Pro * Restore the deposit_Restored_ * Isolated compile_From source_ * Start and check_Health checks_ **Passed** Recoverability Certificate issued Add Pro to prove the deposit rebuilds Example application. Values are illustrative. * **Always current.**Synced every day from the tools you already use, with no cap on deposits. * **Neutral.**Held by Codekeeper and released to your team only on the terms you agreed. * **Proven.**Escrow Pro rebuilds the deposit with Codekeeper's AI agents, up to four times a year. Critical software risk ## Whether you build it or buy it, you can't afford to lose software. Some businesses run production lines, serve clients, and store records on third-party software. Others build their business around selling software. Without a way to recover, operations stay exposed to a sudden software failure. ### Support stops overnight. Insolvency, an acquisition, or a retired product ends updates, and the software runs on with nobody to fix it. ### An update breaks the build. A corrupted release or a missing dependency leaves code that won't compile when it's needed most. ### The original team moves on. Engineers leave, and the know-how behind the build, from setup steps to credentials, leaves with them. In neutral custody ## What is software escrow? Software escrow, also called source code escrow, is an agreement in which a neutral party holds a vendor's source code, data, and documentation, and releases them to the customer if an agreed condition is met, such as the vendor's insolvency. * **The vendor** deposits the source code, data, and documentation, and uses Escrow to win deals. * **Codekeeper** keeps them in a secure vault, and releases them if an agreed condition is met. * **The user** receives everything needed to bring the software back. This guards against vendor failure and a breach of contract. For vendors, it removes a common blocker in enterprise deals. ![A vendor and a customer sign an escrow agreement](https://codekeeper.co/hubfs/codekeeper-site/images/escrow/agreement-1200.webp) **Escrow agreement**Atlas Payroll · Escrow ProDeposit current **Depositor**Northwind Software Ltd. Vendor **Beneficiary**Example Logistics Group1 included **Deposit**Source code · Data · DocumentationSynced daily **Release conditions**Insolvency · Discontinued support · Material breachAgreed at signing **Latest check**Vault Report issued2 days ago Example agreement. Names are fictional. By application ## What we hold depends on how your software runs. Different applications run on different types of components. Match your Escrow plan to how your software runs. [Software On-premises and installed applications Source code Data Documentation From **$199** Software escrow](https://codekeeper.co/software-escrow) [SaaS Hosted and subscription applications Source code Data Documentation Deployment infrastructure Third-party services Credentials and access From **$299** SaaS escrow](https://codekeeper.co/saas-escrow) [AI AI models and AI systems Models Model deployments Agents and prompts Workflows From **$649** AI escrow](https://codekeeper.co/ai-escrow) How it works ## We set up Escrow with you. _The evidence stays on file._ 1. 1Scope each application. Our specialists sit down with you and help decide what each application's deposit should hold. Show details Who Your team and a Codekeeper specialist, starting with an onboarding call. What you decide Which parts of each application go in the vault: usually the source code, build scripts, documentation, and data, plus credentials and configuration where relevant. You get A deposit scope for each application, written into the agreement. 2. 2Settle your release conditions. Vendor and user sign an agreement that spells out every trigger, so nobody negotiates in a crisis. Show details Who The vendor, the user, and Codekeeper. The vendor has to sign, since the code can only come from them. Your options Two-party (bipartite), where the vendor signs once and adds users as they come on board, or three-party (tripartite), where one user signs alongside the vendor from day one. You get An escrow agreement with the release conditions agreed at signing, such as insolvency, discontinued support, or a material breach. 3. 3Link your development tools. 50+ integrations sync each change daily, and a monthly Vault Report documents which agreed materials are in the deposit. Show details Who Our specialists, working with your developers to connect the first deposits. Then Each change syncs daily through the integrations. You get A monthly Vault Report that documents which agreed materials are in the vault. 4. 4Test the rebuild with Escrow Pro. Launch a build test from your account before any review, and add each certificate to your evidence. Show details How AI agents in the Codekeeper AI Verification Lab rebuild the deposit in isolation, without calling on the vendor. If something is missing It is flagged, so the vendor can add it before a release. You get Proof it builds: a Recoverability Certificate, backed by a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile. Play with voice If a release condition is met, we verify the condition and release the deposit to you. Your team runs the recovery. [Talk it through with a specialist](https://codekeeper.co/book-a-demo) Escrow or Escrow Pro ## Put your recovery through a dry run. Escrow keeps everything you'd need to recover complete and ready to release. Escrow Pro tests the deposit: Codekeeper's AI agents rebuild your software whenever you choose, so if the deposit is ever released, you already know your software builds. ### Escrow From **$199** per month Everything you need to be protected. Included * A copy of your software in a neutral vault * Daily sync through 50+ integrations * Monthly checks for missing files * Released to your team to recover [Choose Escrow](https://codekeeper.co/pricing/build-a-plan?prot=escrow&level=base) ### Escrow Pro Recommended From **$449** per month Test the rebuild before you need a recovery. Everything in Escrow, plus * Agentic Verification: up to four rebuilds a year, on supported technology stacks * Codekeeper's own AI, off public models * Missing files flagged in each rebuild * A tested isolated compile, ready to deploy * An exit workbook for the recovery * Recoverability Certificates and SBOMs [Choose Escrow Pro](https://codekeeper.co/pricing/build-a-plan?prot=escrow&level=pro) ![An example Escrow Certificate, issued by Codekeeper for a fictional application](https://codekeeper.co/hubfs/codekeeper-site/images/certificates/escrow-1200.webp) Escrow**Escrow Certificate**Shows the deposit is held and what's in it. Example values. ![An example Recoverability Certificate for a passed rebuild of a fictional application](https://codekeeper.co/hubfs/codekeeper-site/images/certificates/recoverability-1200.webp) Escrow Pro**Recoverability Certificate**Documents the rebuild and its result. It doesn't grant release rights; those come from the agreement. Example values. Get the sample evidence pack [How Agentic Verification works](https://codekeeper.co/agentic-verification) Every Escrow plan ## Get far more than a vault. ### Agreements built for your deal. Choose a template or custom contract for as many parties as you need, with release conditions written in. ### Jurisdiction set to suit you. Name the governing law that fits your business, and leave the negotiation up to our in-house counsel. ### Deposits that update themselves. Hook up GitHub, GitLab, or any of our 50+ integrations, and new versions reach the vault daily, without limit. * ![GitHub](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/github.svg) * ![Bitbucket](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/bitbucket.svg) * ![AWS](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/aws.svg) * ![Microsoft Azure](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/azure.svg) * ![Google Cloud](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/gcp.svg) * ![Shopify](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/shopify.svg) * ![Stripe](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/stripe.svg) * ![Chargebee](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/chargebee.svg) ### Activity and proof in one place. Monitor all activity with full audit trails, and share certified software resilience evidence on request. ### Every version locked down. Keep each snapshot encrypted with AES-256, behind MFA, in immutable storage no one can alter. ### Releases handled 24/7/365. Raise a request at any hour, and our team confirms the conditions are met before passing the deposit on. Other protections ## Rather have us on the recovery? Every plan protects your access to critical software. What changes is who handles a recovery, and whether other supporting services stay switched on in the meantime. Managed Recovery ### Resilience **For the software you can't risk rebuilding yourself.** Return critical third-party software to working order, with Codekeeper's engineers taking on the recovery. From **$399** [Explore**Resilience**](https://codekeeper.co/resilience) Full Continuity ### Continuity **For the services that just can't go offline.** Prevent downtime for critical applications, with their hosting and service bills paid for an agreed period. From **$1,449** [Explore**Continuity**](https://codekeeper.co/continuity) [Compare plans](https://codekeeper.co/pricing/compare) ## Always have a way back _to working software._ Software is only as safe as your ability to recover it. Talk it through with an escrow specialist. The call covers: * A review of the critical applications you depend on * A setup plan, from the agreement to the first deposit * Answers on release terms, jurisdiction, and verification [Book a demo](https://codekeeper.co/book-a-demo) [Build a plan](https://codekeeper.co/pricing/build-a-plan) Frequently asked questions ## Learn how Escrow works for everyone involved. Does the vendor have to take part? Yes, the vendor has to take part, because only the vendor can deposit the source code. A two-party agreement lets the vendor set up escrow once and add users later, while a three-party agreement brings one user in from the start. Can several users rely on one deposit? Yes, several users can rely on one deposit: a multi-party agreement covers each of them, under the release conditions you agree on together. What gets deposited? A software escrow deposit holds whatever it takes to rebuild and run the application: source code, build scripts, documentation, data, and, where relevant, credentials and configuration. That's far more than code, even though the service is often called source code escrow. The agreement lists every item, and the automated check documents which of them are there. Do we have to set the deposit up ourselves? No, you don't have to set up the deposit yourselves. We set up the first deposits and integrations with your team, starting with an [onboarding call](https://codekeeper.co/book-onboarding-call) . Is there anything to pay besides the monthly price? Besides the monthly price, there's a one-time setup fee of $499 per agreement, on Escrow and Escrow Pro alike, and release processing at $199 per hour if a release is ever requested. One beneficiary is included, and you can add more as an add-on. What triggers a release? A release is triggered when one of the release conditions in your escrow agreement is met, for example the vendor's insolvency, discontinued support, or a material breach. We verify the condition first, then release the deposit to the beneficiary. How quickly do we get the code after a release? You get the code as soon as the release is verified. We check each request first, with a legal review, verification of the release condition, and authentication of the beneficiary, then release the deposit to you. Will Codekeeper recover the software after a release? No, Codekeeper doesn't recover the software after a release on Escrow. Software escrow releases the deposit to you, and your team or a partner of your choice runs the recovery. If you'd rather Codekeeper ran the recovery, choose [Resilience](https://codekeeper.co/resilience) . What does Escrow Pro add? Escrow Pro adds Agentic Verification: AI agents rebuild a complete deposit on their own in the Codekeeper AI Verification Lab, up to four times a year, on supported technology stacks. Each successful rebuild issues a Recoverability Certificate, with a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile.