Enhance your software protection.

Choose where your deposit is stored.

Data residency rules, from GDPR to national sovereignty laws, often decide where copies of software and data may sit. Pick the storage region once, limit vault access to approved IP ranges, and keep the full history of every upload.

Available with: Every plan, including Software Backup

Connect custom-built and proprietary platforms to your vault.

Internal source control, package registries, and custom deployment tooling get a connector built for them, so they sync every day alongside the tools connected through our 50+ integrations.

Available with: Every plan, including Software Backup

Protect several apps sold as one product as a single application.

Some products bundle several apps, sometimes mixing software, SaaS, and AI. App Suites holds them in one deposit, checks them together, and prices the suite on what it contains.

Available with: Escrow, Resilience, and Continuity

Keep your CRA technical file next to your code.

The Cyber Resilience Act asks manufacturers to keep technical documentation for their products. Your technical file, SBOM, and release notes sit next to your deposit, version by version, so the current file is ready whenever a regulator asks for it.

Available with: Escrow and Resilience

Add more businesses that rely on the same software.

Bring in users, partners, or subsidiaries as more parties rely on the software. Each one joins under the same release conditions, checks, and evidence, under the same agreement.

Available with: Escrow, Resilience, and Continuity

The cost of a recovery, under an agreed service level.

Cost coverage puts the cost of a recovery under an agreed service level, quoted per agreement, based on the application and the recovery it would need.

Available with: Resilience and Continuity, at both levels

Receive a release on physical media, with no network transfer.

Some users run software in environments that can't connect to the internet. Offline handover delivers the released deposit on physical media the receiving party controls, so the release stays inside its own security boundary.

Available with: Escrow, and Continuity built on Escrow

Let our specialists handle your compliance paperwork.

Our specialists take on the routine documentation that comes with your plan, from vendor assessments to security audit responses. Deposits that hold personal or health data are handled in line with GDPR and HIPAA.

Available with: Escrow, Resilience, and Continuity

Raise liability limits to match enterprise-sized exposure.

Enterprise contracts often set minimum liability terms. Raise the limits to match what an outage would cost the business, so the contract doesn't hold up procurement on either side.

Available with: Escrow, Resilience, and Continuity

Extend the agreed period for recoveries that take longer.

Complex applications, or a move to new hosting providers, can take longer to recover. The Coverage Length SLA keeps the bills paid beyond the period in your agreement. Cover still starts on the release condition in your agreement; only its length changes.

Available with: Continuity

Bring less common hosting providers under payment cover.

Some applications run on legacy or specialist hosting. Advanced Continuity Integrations connect those platforms and keep their account details current in your vault, so their bills can be covered like any other.

Available with: Continuity

Keep your SaaS data in your deposit.

Code and infrastructure bring a SaaS application back, and its users need their records too. Data export adds schemas and regular exports to your deposit, so the recovered service starts from real data.

Available with: Continuity, for SaaS applications

Need hands on the live service?

Our engineers can operate it for you: monitoring, incidents, and fixes. Best effort, billed by the hour, with no service level.

Available with: Continuity and Continuity Pro

Add a rebuild whenever a release calls for one.

Pro plans include up to four Agentic Verification rebuilds a year, on supported technology stacks. An extra run credit adds one whenever a release calls for it, with a fresh Rebuild Report and, if it passes, a Recoverability Certificate.

Available with: Escrow Pro, Resilience Pro, and Continuity Pro

Prove your software can be restored from the deposit alone.

Our specialists recover the application from the deposit alone, without the vendor or the original developers, bring the data back, deploy it, and test the business functions you rely on. Frameworks like DORA expect exit plans to be tested, and the Exit Exercise Report and certificate give your file that evidence.

Available with: Escrow, Resilience, and Continuity

Map your evidence to the regulations you report under.

Each certificate and report in your plan is lined up against the requirement it supports, for frameworks like DORA and ISO 27001, so reviewers can follow the trail without a walkthrough.

Available with: Escrow, Resilience, and Continuity

Get alerts when a software component turns vulnerable.

A dependency that was safe at upload can pick up a published vulnerability months later. Component watch checks the SBOM from each successful rebuild against new CVEs, so you can answer third-party risk questions with current data.

Available with: Escrow Pro, Resilience Pro, and Continuity Pro

Let a named third party rely on your certificates and reports.

An auditor, regulator, or key user can work from Codekeeper's certificates and reports directly, so your team doesn't rebuild the evidence pack for every review.

Available with: Escrow, Resilience, and Continuity

Know where every vendor stands.

Vendor Risk & Compliance keeps your third-party oversight current: each vendor assessed against the frameworks you report to, with a written verdict signed by an analyst. It runs alongside your Codekeeper protections.

Available with: Your Codekeeper account