Source code escrow
Source code escrow, built to recover.
With source code escrow, a neutral third party holds your source code and the materials needed to rebuild the software, and releases them to the beneficiary only under the conditions written into the escrow agreement.
How source code escrow works.
One linear path, built around the recovery: set up once, then mostly invisible until the day you need it.
What's in the deposit.
Source code escrow fails not from a missing deposit but an incomplete one. A usable deposit holds what a new team would need to rebuild and run the software, not just a copy of the code. To harden the code before it is ever deposited, see how to protect source code.
- Source code
- Build scripts & toolchain
- Dependencies
- Environment & config
- Credentials & keys
- Documentation
Running SaaS, where source code alone won't keep you live? See SaaS escrow →
Tested, not just stored.
Escrow you've never tested is a promise, not a guarantee. You choose how far to verify that the deposit would actually recover, while a problem is still fixable.
Match the level to your risk. Verification is not automatic on every deposit; the top of the ladder is never standard or included by default. See verification options →
Choose your structure.
Source code escrow comes in a few shapes. Pick the one that matches how your deal is actually put together, not a form that almost fits.
One customer, one agreement
The most direct structure: one customer protected under one escrow agreement.
Many customers, one deposit
Cover many of your customers under a single managed deposit, without re-depositing for each.
Several vendors, held together
When your software leans on more than one vendor, protect the whole stack in one structure.
Looking for the commercial overview? See software escrow → · Want the numbers first? See pricing →
Two vaults. One in a granite mountain.
Deposits are held in two physical, US-based vaults, one inside a granite mountain, monitored around the clock. The provider has to satisfy the people who approve the deal, and EscrowTech is the one their legal teams already recognize.
Source code escrow, explained.
What it protects, how it is set up, what a usable deposit holds, and exactly when code is released.
What source code escrow protects.
The software your business runs on is usually built, hosted, and maintained by someone else. While the vendor is healthy, that dependency is invisible. It surfaces the day the vendor is acquired, sunsets the product, or files for bankruptcy: updates stop, support goes quiet, and the code that keeps your operation running sits with a company that no longer answers.
Source code escrow closes that gap. A neutral third party holds the vendor's source code and the materials needed to rebuild the software, and releases them to the licensee only if a condition agreed in advance actually occurs.
For the licensee, it is a recovery path: the code your team needs to keep the software running, instead of a forced replacement mid-operation. For the vendor, it is assurance without exposure. Ownership never transfers, and the code is deposited with EscrowTech, not shared with the customer.
Why a license isn't enough.
A common assumption is that a software license protects you if the vendor goes bankrupt. Often it does not. Under Section 365(n) of the U.S. Bankruptcy Code, a trustee can reject the contract, and your rights to the underlying intellectual property depend on specific elections and on having the materials in hand.
Escrow is the practical mechanism that puts those materials within reach. The license gives you the right to use the software; the escrow deposit gives you the means to keep it running.
How the arrangement is set up.
- The agreement. The parties agree the release conditions, and EscrowTech drafts the escrow agreement around them. It does not draft or negotiate the underlying software contract. See escrow agreements.
- The deposit. The vendor deposits the source code, build instructions, dependencies, and documentation with EscrowTech as a neutral third party.
- Verification, if you choose it. You decide how far to confirm the deposit would rebuild, from a file listing to a full build. It is matched to risk, not automatic on every account.
- The release. If an agreed condition occurs, the materials are released, and your team can rebuild, run, and maintain the software.
When source code is released.
Release is never automatic, and never at the licensee's discretion alone. It happens only when a condition defined in the agreement occurs. The common ones:
- The vendor ceases business or files for bankruptcy
- The vendor stops supporting or maintaining the software
- The vendor breaches a maintenance obligation written into the agreement
When a release is requested, EscrowTech administers it on the agreed terms. It confirms the stated condition is met under the agreement and does not decide the underlying commercial dispute. That neutrality is what makes escrow acceptable to both sides.
What a usable deposit includes.
Source code is the start, not the whole picture. A deposit a new team can actually rebuild usually holds the source, build instructions and toolchain, dependencies, configuration and environment details, and documentation or runbooks.
For hosted applications, code alone will not bring the service back; the running environment is the job of SaaS escrow. Firmware, data, and AI models fall under technology escrow. What belongs in a deposit is always scoped to what recovery would require.
Will the deposit actually work?
The question most buyers forget to ask: if the code were released tomorrow, could your team rebuild and run it? An unexamined deposit is a promise, not a guarantee, and an incomplete one is usually discovered at the worst possible moment.
EscrowTech offers verification as a menu, from confirming what is in the deposit to a full build and test, matched to the risk the deal carries. The depth is your decision. See verification options.
Source code vs. software escrow.
In practice, "source code escrow" and "software escrow" are used interchangeably. Software escrow can be broader, because a deposit may include data and documentation as well as code. Technology escrow is the modern umbrella, covering firmware, AI model weights, and encryption keys, and SaaS escrow is the variant for hosted applications. For independent background, see this overview of source code escrow.
Source code escrow, answered.
The questions vendors, licensees, and their counsel ask most often.
What is source code escrow?
Source code escrow is an arrangement where a neutral third party holds a vendor's source code and the materials needed to rebuild the software, and releases them to the beneficiary only if a condition written into the escrow agreement is met. It lets a customer safely depend on software they do not control.
How does source code escrow work?
The vendor deposits the source code and rebuild materials with EscrowTech, who holds them neutrally while the vendor keeps supporting the software. If an agreed release condition is met, the materials are released to the beneficiary, who can then run and maintain the software.
What is included in a source code escrow deposit?
A usable deposit holds what a new team would need to rebuild and run the software: source code, build scripts and toolchain, dependencies, environment and configuration, credentials and keys, and documentation. Source code on its own is rarely enough to recover from.
What are the release conditions in a source code escrow?
The triggers that release the deposit, such as the vendor ceasing business, filing for bankruptcy, or failing to support the software. They are written into the escrow agreement to fire in the situations the beneficiary is actually worried about.
What is the difference between source code escrow and software escrow?
They describe the same protection. Software escrow is the broad term; source code escrow names the asset at the center of it, the source code and the materials needed to rebuild the software. EscrowTech also escrows non-code assets under technology escrow.
Who drafts the source code escrow agreement?
EscrowTech's in-house counsel drafts the escrow agreement and stays neutral between the parties. It drafts the escrow arrangement, not the underlying commercial contract between the vendor and the beneficiary, and it does not decide the parties' dispute.
Is the deposited source code verified?
Verification is a menu of options matched to your risk, from confirming what is in the deposit to a full build and run. It is not automatic on every deposit, and full build verification is never standard or included by default. You choose the depth.
How long does source code escrow take to set up?
Most source code escrow arrangements are drafted, reviewed, and signed in about two weeks. Escrow being the slow part of a deal is usually a provider problem, not an escrow problem.
Priced to your risk, no surprises.
You shouldn't have to guess what this costs. Source code escrow starts at $1,595 a year, custom-priced to your structure and how far you verify, so you know what you're committing to before you begin. See software escrow pricing →
Make it safe to depend on.
Tell us what your software runs on. We'll structure the escrow and the verification around it.
Thanks, we've got it.
A member of our team will be in touch shortly.