- The headline sells both levels in five words. "Hold the code" is Escrow. "Prove it builds" is Escrow Pro.
- The base level is never weak. Escrow is "everything you need to be protected", as agreed.
- The existing Escrow Pro film sits in the hero, where it does the most work.
Hold the code. Prove it builds.
Escrow keeps your vendor's source code with a neutral party, under clear release terms, checked and certified. Escrow Pro adds Agentic Verification, so you know the deposit builds long before you need it.
Escrow from $199. Escrow Pro from $449. Per application per month.
- Trusted by 3,500+ teams
- ISO/IEC 27001:2022 certified
- 50+ integrations, synced daily
Trusted by 3,500+ teams, from regulated enterprises to fast-growing software vendors
Why escrow
Protection starts with the code.
Every business depends on software it didn't build, and every vendor can fail, be acquired or simply stop. Escrow gives you a right to your vendor's source code, a neutral custodian and clear release terms, agreed before you need them.
If the vendor stops
Insolvency, a takeover or discontinued support. The agreement says what happens next, so nobody has to negotiate it in a crisis.
Clear terms, agreed up front
The Escrow Agreement names the depositor, the beneficiary, what's deposited and exactly when it's released.
A neutral custodian
Codekeeper holds the deposit for both sides. The vendor keeps its IP private; the customer keeps a way back.
How it works
Four steps, then it runs itself.
Add the application
The vendor software your business, or your deal, depends on: software, SaaS or AI.
Put the agreement in place
Two-party, three-party or multi-party, managed in the app. Everyone knows where they stand before they sign.
Keep the deposit current
Connect the vendor's repositories once and deposits sync daily. We check what's deposited and issue a Software Resilience Certificate.
Release when conditions are met
If a release condition in the agreement is met, we verify it and release the deposit to the beneficiary. You run the recovery.
Choose your level
Escrow and Escrow Pro.
Both release the deposit to you. Pro proves it builds before you need it.
Escrow
From$199per application per month
Everything you need to be protected.
- Custody of the deposit by a neutral party
- Release to the beneficiary under the Escrow Agreement
- Automated check of what's deposited, with a vault report
- Software Resilience Certificate
Escrow Pro
From$449per application per month
Everything you need to recover.
- Everything in Escrow
- Agentic Verification: isolated rebuilds by AI agents, on supported technology stacks
- 4 rebuilds a year, run when you choose
- Build steps, SBOM, Exit workbook and a deployable copy
- Recoverability Certificate
Setup $499 per arrangement. One claimant included; more as an add-on. Escrow means the deposit is released to you and you run the recovery. If you'd rather we ran it, that's Resilience. See full pricing
The proof
One certificate shows it's there. The other shows it builds.
Shows the deposit is held and what's in it. Example values.
Documents the rebuild and its result. It doesn't grant release rights; those come from the agreement. Example values.
Who it's for
When a relationship needs clear terms.
Buying critical vendor software
Put release rights in writing before you sign, not after the risk arrives.
Selling to enterprises
Show buyers the application is protected, and with Pro that it builds, so due diligence doesn't stall the deal.
Partnerships and M&A
Show the code is held and certified today, and with Pro that it can be rebuilt without the original team.
By application
What we hold depends on what you run.
Software
On-premise and licensed applicationsSource code, build scripts, documentation and data.
Escrow $199 · Pro $449
Software escrowSaaS
Hosted and subscription applicationsCode, infrastructure, data exports and the access to bring it back.
Escrow $249 · Pro $599
SaaS escrowAI
AI models and AI systemsModels, prompts, pipelines and the workflows around them.
Escrow $649 · Pro $849
AI escrowNeed more than the code?
Escrow, Resilience or Continuity.
Escrow means the deposit is released to you and you run the recovery. Resilience costs more because we do the recovery. Continuity costs more again because we also keep the live environment switched on.
Escrow
Deposit→Released to you→You recover
When the agreed conditions are met, the deposit is released to the beneficiary.
From $199
Resilience
Deposit→Comes to us→We recover
If the application fails, Codekeeper runs the recovery for you. Explore Resilience
From $399
Continuity
Live service kept on+We recover
Everything in Resilience Pro, plus the live environment kept paid and switched on for an agreed period. Explore Continuity
From $1,449
Sample evidence pack
See what your auditor would receive.
An anonymised set of outputs from a real Agentic Verification run, so you can judge the evidence before you talk to us.
- Recoverability Certificate
- Run report
- SBOM and Exit workbook excerpts
Questions
Before you sign.
What gets deposited?
Whatever it takes to rebuild and run the application: source code, build scripts, documentation, data and, where relevant, credentials and configuration. The agreement lists it, and the automated check confirms it's there.
What triggers a release?
The release conditions in your Escrow Agreement, for example the vendor's insolvency, discontinued support or a material breach. When one is met, we verify it and release the deposit to the beneficiary.
How quickly do we get the code after a release?
Once release conditions are verified, beneficiaries typically have access within two to three hours.
Who runs the recovery?
With Escrow, you do: the deposit is released to you. If you'd rather Codekeeper ran the recovery, choose Resilience.
What does Escrow Pro add?
Agentic Verification. AI agents rebuild the deposit in a sealed sandbox up to four times a year, with no help from the vendor. Each successful rebuild issues a Recoverability Certificate, with build steps, an SBOM, an Exit workbook and a deployable copy.
Which kinds of agreement can we use?
Two-party agreements between the vendor and Codekeeper, so protection can extend to any client who asks. Three-party agreements that name one beneficiary. Multi-party agreements that name several, each with its own release conditions.
Protect the applications that close your deals.
We'll map the application, the agreement and the right level with you.