--- title: For software vendors | Codekeeper description: "For software vendors: answer the customer who asks what happens if you stop. Escrow in the contract, Resilience set up once, and proof from the Pro plans." canonical_url: https://codekeeper.co/software-vendors --- For software vendors # When a customer asks what happens if you stop, _have the answer ready._ Enterprise and regulated customers want to know their software can be recovered if their supplier can't continue. With Codekeeper, you give them a clear answer in the contract, a team ready to run the recovery, and dated proof that your software builds. [Book a demo](https://codekeeper.co/book-a-demo) Get the sample evidence pack The customer or the vendor can pay: **sponsor the protection** as part of your offer, or let your customer pay for it. * 10+ years securing software * ISO/IEC 27001:2022 certified * Deposits sync from your repositories ![A software vendor's account lead meets an enterprise customer's procurement and IT leads](https://codekeeper.co/hubfs/codekeeper-site/images/scenes/software-vendors-1200.webp) 0:00 / 1:07 **For software vendors**The answer when customers ask1:07 One minute: the question, the three answers, and the proof. Where the question comes up ## Enterprise and regulated customers ask before they sign. For banks, insurers, and other regulated buyers, it isn't a preference. Under [DORA](https://codekeeper.co/solutions/dora) , financial entities need exit strategies for the ICT services that support their critical or important functions. ### In supplier questionnaires Answer "what happens if the supplier stops?" with an arrangement, not a promise. ### From regulated customers Give them evidence for their exit plan and their regulator, under DORA, PRA SS2/21, and similar rules. ### In security and risk reviews Hand over certificates and reports they can put on file, so the review moves on. Three ways to answer ## Pick how your customers get their software back. Every protection has a Pro plan that adds Agentic Verification. In the contract ### Escrow Released to your customer_→_Self-Run Recovery Your source code is held by a neutral party under an agreement that sets out who receives it, and when. Deposits stay in sync with your repositories, and we check and certify what's there. [Explore Escrow](https://codekeeper.co/escrow) From $199 Set it up once ### Resilience Comes to us _→_ Managed Recovery One arrangement for the application, and each new customer is simply added to the list. No negotiating, explaining, or setting up, one customer at a time. If a recovery is needed, Codekeeper runs it. One customer is included; more are an add-on. [Explore Resilience](https://codekeeper.co/resilience) From $399 For SaaS that can't stop ### Continuity Live service kept on_+_the recovery you choose The Escrow or Resilience recovery you choose, plus the live environment kept paid and switched on for an agreed period while the software is recovered. [Explore Continuity](https://codekeeper.co/continuity) From $1,449 Proof your software builds ## Proof your customers can file, without your engineers. Escrow Pro, Resilience Pro, and Continuity Pro include Agentic Verification: AI agents rebuild your deposit in the Codekeeper AI Verification Lab, sealed off, in hours. ### Up to four rebuilds a year Included in every Pro plan, on supported technology stacks. Run one before an audit or after a release. ### No engineers to book When the deposit is complete, the agents work out how your software is built on their own. If something is missing, the run flags it so you can add it. ### A certificate to show A passed rebuild issues a Recoverability Certificate. It documents the rebuild and doesn't grant release rights. ### Your code stays private Runs on Codekeeper's own models. No third-party AI sees the deposit, and your source code never leaves Codekeeper's environment. [See Agentic Verification](https://codekeeper.co/agentic-verification) ### When a customer needs their exit tested. The customer or the vendor can request an Exit Exercise: our specialists recover your software from the deposit alone, without your team or the original developers, bring back the data, deploy it as scoped, and test the functions your customer nominates. The result goes into an Exit Exercise Report and an Exit Exercise Certificate. Add it to any plan, from $12,000. [See the Exit Exercise](https://codekeeper.co/exit-exercise) Frequently asked questions ## Before you offer it to your customers. Does my customer get my source code? No, your customer doesn't get your source code unless a release condition in the agreement is met, and that only applies to Escrow. With Resilience, the deposit comes to Codekeeper, and we run the recovery. Continuity follows whichever of the two you choose. How much of my engineers' time does it take? It takes very little of your engineers' time. Connect your repositories once, and deposits stay in sync. When the deposit is complete, Agentic Verification rebuilds it on its own; if something is missing, the run flags it so you can add it. What does the Recoverability Certificate prove? The Recoverability Certificate proves that your deposit was rebuilt successfully on a given date, in the Codekeeper AI Verification Lab. You can show it to the customers who ask. It documents the rebuild and doesn't grant release rights. Which repositories can deposits come from? Deposits can come from GitHub, GitLab, Bitbucket, Azure DevOps, and many more repositories. See [all integrations](https://codekeeper.co/integrations) . Anything without one can be uploaded by hand. Who pays for the protection? The customer or the vendor can pay for the protection. You can sponsor it as part of your offer, or your customer can pay for it. Can I add customers later? Yes, you can add customers later. With Resilience, each new customer is added to the arrangement's list. One is included; more are an add-on. Does Agentic Verification work for every application? Agentic Verification works on supported technology stacks, not every application. Tell us what your application is built with, and we'll confirm it's supported. ## Escrow for the software you sell. _Proof for the customers who rely on it._ Book a demo, and we'll set up the protection that fits how you sell. [Book a demo](https://codekeeper.co/book-a-demo) Get the sample evidence pack