NewEscrow Pro, Resilience, Continuity and Agentic Verification: from holding the code to proving it comes back.The new line-up is here.See what's new
SolutionsAll solutionsDORAPRA SS2/21NIS2CRAISO 27001
Why this page looks like this. It replaces production's /solutions/pra-ss221. Production opens on "Secure PRA SS2/21 compliance" and a fear line ("you face immediate operational shutdown and potential PRA enforcement actions"), cites no paragraph of SS2/21, and shows the CRA e-book by mistake. The new page is built on the paragraphs themselves.
  • The headline is the hard part of SS2/21: the stressed exit, where the provider has failed and can't help. Paragraphs 10.10 and 10.24 ask for exactly that to be planned and tested.
  • The visual is the deliverable: a Tested Exit Report with an annex mapped to SS2/21, rebuilt from the deposit only and run without the original developers. Names, dates and contents are fictional and labelled.
  • The CRA e-book is replaced by the sitewide sample evidence pack, here in the hero and in the offer band.
  • New URL: redirect /solutions/pra-ss221 to this page.
PRA SS2/21 · UK

Plan for the stressed exit. Then test it.

SS2/21 expects exit plans for material outsourcing to cover stressed exits and to be tested as far as possible. Codekeeper rebuilds the software without the vendor, so your plan rests on evidence you can put on file.

Book a demo Get the sample evidence pack

Our guidance for material outsourcing: Resilience Pro or Continuity, plus an Exit Exercise. See the levels

  • Trusted by 3,500+ teams
  • ISO/IEC 27001:2022 certified
  • Ready for a PRA SS2/21 file

Example report. Contents vary by application.

Social proof straight after the promise. These are the logos production already uses, loaded from codekeeper.co. Where an image can't load (for example in the preview), the name shows instead. Use the approved set only.

Trusted by 3,500+ teams, from regulated enterprises to fast-growing software vendors

Airbus Bayer European Parliament General Motors Intuit Nestlé PepsiCo Pfizer
Step 1, the exposure, in the PRA's own words. Production cites no SS2/21 paragraph at all. Here:
  • Paragraphs 10.10 and 10.24 are the exact strings in MESSAGING.md §7, rechecked in the current Bank of England PDF (November 2024 version, effective 31 December 2024). 10.10 also appears unchanged in the March 2026 version; we couldn't confirm 10.24 in that version because the fetch was cut short, so recheck it before 18 March 2027.
  • The lead paraphrases paragraph 10.1 (stressed and non-stressed exit) as a label, with its number.
  • Dates fixed. Production's timeline and FAQ disagree ("became effective March 31, 2022" vs "New arrangements from March 31, 2021, onward must comply"). Paragraph 1.4 reconciles them: firms were expected to comply by 31 March 2022, arrangements entered into on or after 31 March 2021 should meet the SS by then, and legacy agreements should be updated at the first appropriate renewal or revision point. The 2026 update is described only as far as the Bank of England page states it: published 18 March 2026 as part of PS7/26 (operational incident and third-party reporting), effective from 18 March 2027.

What SS2/21 asks

Exit plans that cover the stressed exit, and are tested.

For each material outsourcing arrangement, paragraph 10.1 asks for a documented exit strategy that covers two cases: a stressed exit, such as after the provider's failure or insolvency, and a planned, non-stressed exit. The stressed exit is the one SS2/21 asks you to test.

UKPRA SS2/21 · 10.10
“Firms' exit plans should cover stressed exits and be appropriately documented and tested as far as possible.”
PRA Supervisory Statement SS2/21, paragraph 10.10
UKPRA SS2/21 · 10.24
“Firms should take reasonable steps to test exit plans; in particular, those relating to stressed exits.”
PRA Supervisory Statement SS2/21, paragraph 10.24

Codekeeper's evidence supports your assessment. Whether it meets a specific requirement is for you and your assessor to decide.

31 Mar 2022Firms expected to meet SS2/21Paragraph 1.4. Legacy agreements at the first appropriate renewal or revision point.
31 Dec 2024Current version effectivePublished 15 November 2024
18 Mar 2027Updated version takes effectPublished 18 March 2026 with PS7/26
Step 2, the shift: why the stressed exit needs a deposit and a rebuild. The comparison's first row paraphrases paragraph 10.1; the other rows are our explanation, kept factual. The two quotes are verbatim from the November 2024 Bank of England PDF and were read twice. 10.12 matters because it keeps the copy accurate: the PRA doesn't prefer any form of exit, so we don't claim escrow is "the" answer. 10.16 is the only place SS2/21 names escrow, as a temporary measure for a transitional period, and that's how the copy frames it. Production's claims are gone: "Legal framework guarantees access when providers fail", "Documented exit strategies satisfy PRA expectations" and the SM&CR liability line, which we couldn't verify.

The stressed exit

In a stressed exit, the provider can't help you leave.

A planned exit can be negotiated with the provider. A stressed exit can't, because the provider has failed. That's when an independent deposit, rebuilt and tested in advance, makes the difference.

Non-stressed exit
Stressed exit
Why you leave
Commercial, performance or strategic reasons
The provider's failure or insolvency, for example
The provider
Still there to agree a transition
May not be there to help at all
What you need
A transition plan and the terms to support it
The code, the data and a way to run them without the provider
What Codekeeper adds
An Exit workbook and SBOM to plan the move
A deposit rebuilt with no vendor help, and an Exit Exercise run without the original developers
UKPRA SS2/21 · 10.12
“The PRA does not prescribe or have a preferred form of exit in stressed scenarios. Its focus is on the outcome of the exit, (ie the continued provision by the firm of important business services provided or supported by third parties), rather than the method by which it is achieved.”
PRA Supervisory Statement SS2/21, paragraph 10.12
UKPRA SS2/21 · 10.16
“Firms should also actively consider temporary measures that can help ensure the ongoing provision of important business services following a disruption and/or a stressed exit, even if these are not suitable long-term solutions, (eg contractual or escrow arrangements), allowing for continued use of a service or technology for a transitional period following termination.”
PRA Supervisory Statement SS2/21, paragraph 10.16

Codekeeper's evidence supports your assessment. Whether it meets a specific requirement is for you and your assessor to decide.

Step 3, the model, applied to SS2/21: four steps, one sentence each. Production's four steps ended on a certificate "ready for PRA review" and "Complete software continuity for SS2/21". Here every step is a confirmed fact: daily sync, four rebuilds a year, and the Exit Exercise with its framework annex.

How it works

From material outsourcing to a tested exit.

1

Name the arrangements

Add the applications behind your material outsourcing arrangements, from a vendor or a SaaS provider.

2

Attach the protection

Resilience Pro or Continuity for each one. The deposit syncs daily from the provider's repositories.

3

Rebuild without the vendor

Run up to four rebuilds a year. Each successful run issues a dated Recoverability Certificate.

4

Test the stressed exit

Add an Exit Exercise. You get a Tested Exit Report with an annex mapped to SS2/21.

Step 4, the proof, mapped to the paragraphs. Each row takes a phrase from a paragraph we read in the Bank of England PDF (10.1, 10.10, 10.16, 10.24 and 10.25) and shows the documents that support it, with the level they come with. Wording stays at "supports" and "evidence for". The Continuity row is careful: we keep the live environment paid and switched on for an agreed period while we recover. It's a temporary measure in the sense of 10.16, not a long-term solution, and the copy doesn't say more.

Evidence for SS2/21

What each document adds to your file.

Every document is dated and tied to one application, so your file shows what was tested, how and when.

What your SS2/21 file needsCodekeeper evidence
Exit plans that cover stressed exits (10.10)Recoverability CertificateRun reportResilience Pro and Continuity (also Escrow Pro). AI agents rebuild the deposit in a sealed sandbox, with no help from the vendor.
Appropriately documented (10.10)Exit workbookBuild stepsSBOMResilience Pro and Continuity (also Escrow Pro). The recovery process step by step, and the components the application needs.
Reasonable steps to test exit plans (10.24)Tested Exit ReportSS2/21 annexExit Exercise, an add-on to any plan. A clean-room rebuild by our specialists, tested against the business functions you nominate, without the original developers.
Plans reviewed periodically (10.25)Dated Recoverability CertificatesFour rebuilds a year included in Resilience Pro and Continuity, run when you choose, for example when your business requirements change.
Temporary measures for a transitional period (10.16)Escrow Agreement or Resilience ArrangementLive environment mapThe agreement sets out release and recovery terms in advance. With Continuity, we keep the live environment paid and switched on for an agreed period while we recover.
A deposit that's held, checked and currentSoftware Resilience CertificateVault reportEvery protection. Deposits sync daily through integrations.

Codekeeper's evidence supports your assessment. Whether it meets a specific requirement is for you and your assessor to decide.

Recommend a level, as guidance, the same way as on the DORA page. Resilience Pro or Continuity for material outsourcing, plus an Exit Exercise when the stressed exit needs testing. The note under the cards says it's guidance, not a compliance promise, and repeats the agreed price logic. Prices are the 6 Oct list. "From $12,000" for the Exit Exercise is confirmed, but no unit is published: confirm how it's quoted before launch.

Our guidance

For material outsourcing.

Choose the protection by who runs the recovery and whether the service has to stay on. Add the Exit Exercise when the stressed exit needs testing, not just a rebuild.

Recovered by us · tested in advance

Resilience Pro

From$649per application per month

Proven before we need it.

  • The deposit comes to Codekeeper and we run the recovery
  • Agentic Verification: 4 rebuilds a year, on supported technology stacks
  • Recoverability Certificate, run report, SBOM and Exit workbook
  • A deployable copy
Kept switched on

Continuity

From$1,449per application per month

Full continuity.

  • Everything in Resilience Pro
  • The live environment mapped at setup and kept current
  • Kept paid and switched on for an agreed period while we recover
  • Bills recharged at cost
Add-on to any plan

Exit Exercise

From$12,000

Your exit plan, exercised.

  • Clean-room rebuild by our specialists, from the deposit alone
  • Tests of the business functions you nominate
  • No involvement from the original developers
  • Tested Exit Report with an SS2/21 annex

This is our guidance, not a compliance promise: your assessment of each arrangement decides. Setup is $499 per arrangement for Resilience Pro and $999 for Continuity. Escrow means the deposit is released to you and you run the recovery. Resilience costs more because we do the recovery. Continuity costs more again because we also keep the live environment switched on. Prefer to run the recovery yourself? Escrow Pro produces the same Recoverability Certificate. See full pricing

Scope in the Bank of England's words, plus the vendors who serve these firms. The first two cards follow the scope sentence on the Bank of England's SS2/21 page. Production also listed "Credit unions and non-directive firms" as if fully in scope; paragraph 1.3 applies only parts of the SS to them, so that's in the FAQ instead. The vendor card speaks to software companies selling into UK financial services, who production ignores here.

Who it's for

PRA-regulated firms, and the vendors they rely on.

Banks and building societies

UK banks, building societies and PRA-designated investment firms, and UK branches of overseas banks.

Insurers and reinsurers

Firms and groups in scope of Solvency II, including the Society of Lloyd's and managing agents, and UK branches of overseas insurers.

Their software vendors

Your customers have to plan a stressed exit from you. Show them the deposit builds, with Escrow Pro, before they ask.

The secondary conversion, on every page. Visitors who aren't ready to talk can still leave their email. The sample evidence pack is the same offer on every page, so the site has one lead magnet instead of a different e-book per page. It also carries the launch story: proof, not promises. The button goes to the sample evidence pack page.

Sample evidence pack

See what your auditor would receive.

An anonymised set of outputs from a real Agentic Verification run, so you can judge the evidence before you talk to us.

  • Recoverability Certificate
  • Run report
  • SBOM and Exit workbook excerpts
Get the sample evidence pack
Production's FAQ, corrected. The effective-date answer now follows paragraph 1.4. The Fundamental Rules answer is fixed: production says they are "10 principles"; the PRA Rulebook lists eight, and paragraph 2.7 of SS2/21 names Rules 2, 3, 5, 6 and 7 for all third-party arrangements. The 2027 answer says only what the Bank of England page says. The compliance answer repeats the disclaimer. Production's claims that escrow "transforms theoretical exit strategies into practical capabilities that satisfy SS2/21" and creates "documentation demonstrating operational self-sufficiency for PRA compliance" are gone.

Questions

SS2/21, answered.

What is PRA SS2/21?

Supervisory Statement 2/21, Outsourcing and third party risk management. In the Bank of England's words, it “sets out the Prudential Regulation Authority's (PRA) expectations of how PRA-regulated firms should comply with regulatory requirements and expectations relating to outsourcing and third party risk management.” It was first published on 29 March 2021.

Who does SS2/21 apply to?

UK banks, building societies and PRA-designated investment firms; insurance and reinsurance firms and groups in scope of Solvency II, including the Society of Lloyd's and managing agents; and UK branches of overseas banks and insurers. Paragraph 1.3 applies only parts of it to credit unions and non-directive firms.

When did SS2/21 take effect?

Paragraph 1.4 expected firms to comply by 31 March 2022. Outsourcing arrangements entered into on or after 31 March 2021 should have met it by then. Legacy agreements should be reviewed and updated at the first appropriate contractual renewal or revision point.

Is SS2/21 changing?

An updated version was published on 18 March 2026 as part of PS7/26, on operational incident and third-party reporting. It takes effect on 18 March 2027. The Bank of England's SS2/21 page has both versions.

What is a stressed exit?

Paragraph 10.1 describes it as leaving an outsourcing arrangement “in stressed circumstances, (eg following the failure or insolvency of the service provider (stressed exit))”, as opposed to a planned and managed exit for commercial, performance or strategic reasons.

Does SS2/21 mention escrow?

Yes. Paragraph 10.16 lists “contractual or escrow arrangements” among the temporary measures firms should consider, allowing continued use of a service or technology for a transitional period following termination.

What are the PRA Fundamental Rules?

The PRA Rulebook sets out eight Fundamental Rules, the high-level rules for the firms the PRA regulates. Paragraph 2.7 of SS2/21 reminds firms that Fundamental Rules 2, 3, 5, 6 and 7 apply to all third-party arrangements, whether or not they count as outsourcing.

Will this make us compliant with SS2/21?

Codekeeper gives you evidence for your SS2/21 file: certificates, run reports, SBOMs, Exit workbooks and Tested Exit Reports with an annex mapped to SS2/21. Whether it meets a specific requirement is for you and your assessor to decide.

The same close on every page. The SS2/21 close names the case the page is about, the stressed exit, and offers a working session rather than a compliance promise. Every page ends on the same two actions in the same order: Book a demo, then the sample evidence pack.

Test the stressed exit before you need it.

We'll walk through your material outsourcing arrangements and show you the evidence each one can produce.

Book a demoGet the sample evidence pack