--- title: "Resilience: managed software recovery | Codekeeper" description: "Software escrow with managed recovery: the deposit comes to Codekeeper, and our engineers run the recovery. Resilience Pro proves it builds first." canonical_url: https://codekeeper.co/resilience --- # Software Resilience. Managed Recovery _for the applications you can't risk rebuilding yourself._ Resilience keeps every piece of the application you depend on in a neutral vault, and if the worst happens, our engineers run the recovery. Resilience Pro proves the deposit builds first. From **$369** /mo [Book a demo](https://codekeeper.co/book-a-demo) [View pricing plans](https://codekeeper.co/pricing/resilience) * ISO/IEC 27001:2022 certified * 50+ integrations, synced daily ![Two Codekeeper recovery engineers work through a recovery in an operations room](https://codekeeper.co/hubfs/codekeeper-site/images/resilience/hero-1600.webp) 0:00 / 1:00 **Resilience and Resilience Pro**We run the recovery for you1:00 * Code in a neutral vault * Synced daily * Brought back online by us * Rebuild passed_Pro_ Trusted by 3 500+ teams in over 150 countries, from regulated enterprises to fast-growing software vendors ![Airbus](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/airbus.svg) ![Bayer](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/bayer.svg) ![European Parliament](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/eu-parliament-dark.svg) ![General Motors](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/general-motors.svg) ![Intuit](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/intuit.svg) ![Nestlé](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/nestle.svg) ![PepsiCo](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/pepsico.svg) ![Pfizer](https://codekeeper.co/hubfs/codekeeper-site/logos/customers/pfizer.svg) Why Resilience ## Recovered for you. _By Codekeeper's engineers._ Bringing critical software back after a failure is specialist work that shouldn't have to fall to you. With Resilience, our engineers take it on, start to finish. Your team * Ask for the recoveryOne request * Rebuild the applicationHandled for you * Configure and restart itHandled for you Codekeeper's engineers Recovering Payments Core Managed Recovery * Take in the depositReceived * Rebuild from sourceDone * Configure the environmentDone * Restart and checkHealth checks passed **Back online** Recovered by Codekeeper's engineers Example application. Names and values are illustrative. Recovery risk ## Having the code isn't enough. _Recovery takes three things most teams don't have ready._ Boards and auditors want to know what happens if a critical application fails. A deposit gives you the code, but someone still has to rebuild, configure, and run the application. Taking that on yourself means having all three of these on the day. Expertise ### People who know how this application rebuilds. When a vendor stops, through insolvency, a takeover, or discontinued support, the people who knew the application usually leave with it. Your team is left to work out someone else's software from the deposit. Capacity ### Engineers free to do the work at short notice. Rebuilding under pressure takes skills and time most teams aren't staffed for, and shouldn't need to be. The people you would pull in are already running the rest of the business. Environment ### A place to deploy while production is down. Servers, services, and configuration have to be stood up before a line of the deposit can run, and the setup that worked for the vendor was never written down for you. **Resilience puts Codekeeper's engineers on that job,** on a best-effort basis, so "who brings the application back?" already has an answer. Recovered by us ## What is managed software recovery? Managed software recovery is a resilience solution built on a legal agreement between the vendor, their customers, and Codekeeper that puts specialists in charge of bringing critical software back. * **The vendor** deposits everything the application needs, and offers buyers a recovery with a named operator. * **Codekeeper** keeps it in a secure vault, and takes it in if a release condition is met. * **Our engineers** run the recovery and get the application back online. ![A hospital pharmacist scans medication beside the automated dispensing system, working again](https://codekeeper.co/hubfs/codekeeper-site/images/resilience/pharm-day-1200.webp) **Software resilience agreement**Payments Core · Resilience ProDeposit current **Depositor**Northwind Software Ltd. Vendor **Claimant**Example Bank plc 1 included **Deposit**Source code · Data · DocumentationSynced daily **Release conditions**Insolvency · Discontinued support · Material breachAgreed at signing **Recovery**Run by Codekeeper's engineersManaged Example agreement. Names are fictional. When a release condition is met ## If the worst happens, the recovery is our job. Your team doesn't receive a deposit to work through. The deposit comes to Codekeeper, and our engineers rebuild, configure, and restart the application. 1 ### We confirm the request. Our team checks the request against the release conditions in your software resilience agreement. 2 ### We start from the deposit. Everything you agreed on, as last synced and checked, plus the latest Rebuild Report on Resilience Pro. 3 ### We run the recovery. Our engineers do the work while you keep running the business. ![A Codekeeper recovery engineer on a headset confirms that the customer's application is back online](https://codekeeper.co/hubfs/codekeeper-site/images/resilience/engineer-1200.webp) By application ## Built for how your application runs. On-premises software, SaaS, and AI each need different things in the vault. Match your Resilience plan to how your application runs, so our engineers have what they need to bring it back. [Software On-premises and installed applications Source code Data Documentation From **$399** Software resilience pricing](https://codekeeper.co/pricing/resilience?type=software) [SaaS Hosted and subscription applications Source code Data Documentation Deployment infrastructure Third-party services Credentials and access From **$499** SaaS resilience pricing](https://codekeeper.co/pricing/resilience?type=saas) [AI AI models and AI systems Models Model deployments Agents and prompts Workflows From **$949** AI resilience pricing](https://codekeeper.co/pricing/resilience?type=ai) How it works ## Sign once and leave the rebuild to our engineers. 1. 1Scope each application. Our specialists sit down with you and work out what our engineers would need to bring each application back. Show details Who Your team and a Codekeeper specialist, from the first onboarding call. What you decide Which parts of each application go in the vault: usually the source code, build scripts, documentation, and data, plus credentials and configuration where relevant. You get A deposit scope for each application, written into the software resilience agreement. 2. 2Settle your release conditions. The vendor and their customers sign one agreement that names who relies on the application and when a recovery starts. Show details Who The vendor, their customers, and Codekeeper. For vendor software, the vendor signs, since the code can only come from them. Your options Two-party (bipartite), where the vendor signs once and adds claimants as they come on board, or three-party (tripartite), where one claimant signs alongside the vendor from day one. You get A software resilience agreement with the release conditions agreed at signing, such as insolvency, discontinued support, or a material breach. 3. 3Link your development tools. 50+ integrations sync each change daily, and a monthly Vault Report documents which agreed materials are in the deposit. Show details Who Our specialists, working with your developers to connect the first deposits. Then Each change syncs daily, and the deposit is checked automatically every month. You get A Vault Report each month, a Vault Certificate, and a Resilience Certificate that shows the arrangement is in place. 4. 4Test the rebuild with Resilience Pro. Launch a build test from your account whenever you choose, and add each certificate to your evidence. Show details How AI agents in the Codekeeper AI Verification Lab rebuild the deposit in isolation, without calling on the vendor. If something is missing It is flagged, so the vendor can add it before a recovery is ever needed. You get Proof it builds: a Recoverability Certificate, backed by a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile. 5. 5Let our engineers bring your application back. If a release condition is met, the deposit comes to Codekeeper, and our engineers get your application back online. Show details Who Codekeeper's engineers, working from the deposit in the vault. First We verify the release condition before any recovery work starts. You get A recovery run for you, so your own team can stay on the business. Play with voice Want to see how a recovery would run for your applications? [Talk it through with a specialist](https://codekeeper.co/book-a-demo) Resilience or Resilience Pro ## Recovered by us. _Proven before you need it._ Resilience keeps everything our engineers would need to restore your application complete and ready for recovery. Resilience Pro puts the deposit to the test: Codekeeper's AI agents rebuild your software when you choose, so our engineers start any recovery from a deposit they know builds. ### Resilience From **$399** per month Everything you need to be protected. Included * A copy of your software in a neutral vault * Daily sync through 50+ integrations * Monthly checks for missing files * Recovery run by our engineers, best effort [Choose Resilience](https://codekeeper.co/pricing/build-a-plan?prot=resilience&level=base) ### Resilience Pro Recommended From **$649** per month Test the rebuild before you need a recovery. Everything in Resilience, plus * Agentic Verification: up to four rebuilds a year, on supported technology stacks * Codekeeper's own AI, off public models * Missing files flagged in each rebuild * A tested isolated compile, ready to deploy * An exit workbook for the recovery * Recoverability Certificates and SBOMs [Choose Resilience Pro](https://codekeeper.co/pricing/build-a-plan?prot=resilience&level=pro) ![An example Resilience Certificate, issued by Codekeeper for a fictional application](https://codekeeper.co/hubfs/codekeeper-site/images/certificates/resilience-1200.webp) Resilience**Resilience Certificate**Shows the agreement is in place and the deposit is checked. Example values. ![An example Recoverability Certificate for a passed rebuild of a fictional application](https://codekeeper.co/hubfs/codekeeper-site/images/certificates/recoverability-1200.webp) Resilience Pro**Recoverability Certificate**Documents the rebuild and its result. It doesn't grant release rights; those come from the agreement. Example values. Get the sample evidence pack [How Agentic Verification works](https://codekeeper.co/agentic-verification) Every Resilience plan ## Agreements, deposits, and security, handled for you. ### Legal framework included. Pick two-party, three-party, or multi-party terms, drafted by our in-house counsel around your conditions. ### Negotiation and jurisdiction handled. Set the governing law you prefer, and leave every round of talks with the counterparty to our legal team. ### No cap on deposits. Store every version you need, whether versions sync daily through our 50+ integrations or you upload them by hand. * ![GitHub](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/github.svg) * ![Bitbucket](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/bitbucket.svg) * ![AWS](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/aws.svg) * ![Microsoft Azure](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/azure.svg) * ![Google Cloud](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/gcp.svg) * ![Shopify](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/shopify.svg) * ![Stripe](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/stripe.svg) * ![Chargebee](https://codekeeper.co/hubfs/codekeeper-site/logos/integrations/chargebee.svg) ### One dashboard for both sides. Follow every action with a full log, and pull certified software resilience evidence anytime. ### Security built into every deposit. Lock each copy behind AES-256 encryption and MFA, in immutable storage no one can alter. ### 24/7/365 release processing. Flag a failure day or night, and our team checks the release conditions before our engineers take over. Other protections ## Not the right fit for your application? If you'd rather take care of the recovery in-house, or need to keep critical services running during a recovery, we've got you covered. Self-Run Recovery ### Escrow **For the software your own team can bring back.** Place a copy of critical software in neutral hands, so your team can run the recovery once an agreed condition is met. From **$199** [Explore**Escrow**](https://codekeeper.co/escrow) Full Continuity ### Continuity **For the services that just can't go offline.** Protect uptime for critical applications by covering their hosting and service bills for an agreed period while the recovery runs. From **$1,449** [Explore**Continuity**](https://codekeeper.co/continuity) [Compare plans](https://codekeeper.co/pricing/compare) ## Put Managed Recovery behind the applications _that matter._ When critical software fails, recovery is a race against the clock. Talk it through with a resilience specialist. The call covers: * A review of the critical applications you depend on * A setup plan, from the agreement to the first deposit * Answers on release terms, recovery work, and verification [Book a demo](https://codekeeper.co/book-a-demo) [Build a plan](https://codekeeper.co/pricing/build-a-plan) Frequently asked questions ## Before you put recovery in our hands. How is Resilience different from Escrow? The difference between Resilience and Escrow is who runs the recovery. With Escrow, the deposit is released to you, and your team brings the application back. Resilience is software escrow with managed recovery: the deposit comes to Codekeeper, and our engineers run the recovery for you. Does the vendor have to take part? Yes, for vendor software the vendor has to take part, because only the vendor can deposit their source code. A two-party agreement lets the vendor set up once and add claimants later, while a three-party agreement brings one claimant in from the start. Can we use Resilience for applications we built ourselves? No, Resilience is for software you rely on from a vendor. For applications your own team builds and runs, [Software Backup](https://codekeeper.co/software-backup) is the better fit: daily backups of the code, data, configuration, and documents, restorable from your dashboard. What gets deposited? A Resilience deposit holds whatever our engineers would need to rebuild and run the application: source code, build scripts, documentation, data, and, where relevant, credentials and configuration. A recovery needs far more than the code, so a Resilience deposit goes well beyond source code escrow. Your software resilience agreement lists every item, and the monthly automated check documents what's there. Do we have to set the deposit up ourselves? No, you don't have to set up the deposit yourselves. We set up the first deposits and integrations together with your team, starting with an [onboarding call](https://codekeeper.co/book-onboarding-call) . What triggers a recovery? A recovery is triggered when one of the release conditions in your software resilience agreement is met, for example the vendor's insolvency, discontinued support, or a material breach. We verify the condition first, and the deposit comes to Codekeeper for our engineers to recover the application. What does "best effort" mean? "Best effort" means we run the recovery, but Resilience on its own doesn't come with a recovery service level. If you need the cost of a recovery covered under an agreed service level, add Cost Coverage. It's quoted per agreement, based on the application and the recovery it would need. Is there anything to pay besides the monthly price? Besides the monthly price, there's a one-time setup fee of $499 per agreement, on Resilience and Resilience Pro alike, and release processing at $199 per hour if a release is ever requested. One claimant is included, and you can add more as an add-on. If a recovery is ever run, the work is billed to the claimants who need it; the monthly price covers custody, the checks, and the certificates, plus Agentic Verification on Resilience Pro. What does Resilience Pro add? Resilience Pro adds Agentic Verification: AI agents rebuild a complete deposit on their own in the sealed Codekeeper AI Verification Lab, up to four times a year, on supported technology stacks. Each successful rebuild issues a Recoverability Certificate, with a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile. Tell us what you run, and we'll confirm your stack during the demo. What if the application can't stop at all? If the application can't stop at all, you need [Continuity](https://codekeeper.co/continuity) : on the Escrow or Resilience recovery you choose, we keep the live environment paid and switched on for an agreed period, with its bills recharged at cost. Continuity Pro adds Agentic Verification.