NewResilience, Continuity, the Pro levels and Agentic Verification: from safekeeping to proof you can recover.The new line-up is here.See what's new
Why this page looks like this. Production's /document-escrow sells documentation as an asset type of "Software Escrow". In the new model it's one of eight materials a deposit can hold, under any protection. Documentation is the material the Exit Exercise tests best (a rebuild without the original developers), so the page leads there for proof in use.
  • One template for all eight "What we deposit" pages, as production has: hero, why it matters for recovery, what's included, how it gets in and how it's proven, which protection fits, the other seven materials, the evidence pack, FAQ and close. Every page follows the same fictional SaaS application, Booking Hub (also on the SaaS escrow page), so the set reads as one story: one application needs several kinds of material to come back.
  • Headline: keeps the search phrase and says what documentation adds to code: the know-how.
  • Visual: a mock of what this part of the deposit holds. Production's hero image couldn't be opened from the kit to check it for old product names, so it isn't reused; swap it back only after someone has checked it.
  • Dropped: "Book a free demo" (now Book a demo), the closing line "Let's build bulletproof software resilience together", the press quotes with publication logos (Product Hunt and two others; not customer reviews, and the logos need permission), the third-party tool logos, the per-page e-book block (the sample evidence pack band replaces it) and "Unlimited automated deposits", "Assured recovery support" (retired name), "+50 storage and development tools" (production's own typo for 50+), the monthly-versus-annual claim and "start at $125 per month".
What we deposit

Document escrow. The know-how behind the code.

Code tells a team what the application does; documentation tells them how to build, run and fix it. Codekeeper holds both together, kept current and checked, so a recovery doesn't depend on the original developers.

From $199. Per application per month, with the protection you choose.

  • Trusted by 3,500+ teams
  • ISO/IEC 27001:2022 certified
  • AES-256 encryption at rest
Social proof straight after the promise. These are the logos production already uses, loaded from codekeeper.co. Where an image can't load (for example in the preview), the name shows instead. Use the approved set only.

Trusted by 3,500+ teams, from regulated enterprises to fast-growing software vendors

Airbus Bayer European Parliament General Motors Intuit Nestlé PepsiCo Pfizer
Steps 1 and 2: the exposure and the shift, for documentation. Production asks four questions ("What happens if operational knowledge isn't accessible?"…) and closes with "Losing documentation means losing the context, clarity, and instructions your software needs". The point is kept, calmly: recovery that depends on a few people's memory is slow. Production's "Essential documentation is stored independently and always accessible when needed" is an absolute and is gone.

Why it matters for recovery

Code without documentation is a puzzle.

Recovery is slow when it depends on a few people's memory. If the vendor stops, the knowledge of how the application is installed, configured and supported can leave with its team, and yours has to work it out from the code.

Knowledge in people's heads

  • Setup steps known to a few engineers
  • Documents spread across tools, some out of date
  • A new team relearns the system during the outage

Documentation with Codekeeper

  • Installation guides, architecture and runbooks held with the code
  • Kept current through integrations or regular uploads
  • Checked with the rest of the deposit, and tested in practice with an Exit Exercise
Step 3 in detail: what a documentation deposit holds. The four groups are production's FAQ list ("deployment instructions, architecture descriptions, configuration details, operational runbooks"). Production capability claim to confirm: formats. Production shows Microsoft Office, Google Docs, Adobe Creative Cloud, iWork, FreeOffice, LibreOffice, WPS and Dropbox Paper logos under "Codekeeper integrates with +50 storage and development tools"; the page says it in plain words and shows no logos. Production's "Our automated checks confirm the materials are complete, readable, and correctly structured" says more than the confirmed automated check, so the confirmed wording is used.

What's included

What a documentation deposit holds.

The agreement lists exactly what's deposited. The test is simple: could a team that has never seen the application install, run and support it?

  • Installation and deployment instructions. How to set the application up, step by step.
  • Architecture descriptions. How the parts fit together, and the services they rely on.
  • Configuration details. The settings that make it behave the way your business needs.
  • Operational runbooks. How to run, support and maintain it over time.

Documents can be deposited in the formats your teams already use, from office suites and online editors to files kept in a repository.

Usually part of
Software, SaaS and AI deposits
How it gets in
Repository and storage integrations, or secure upload
How it's checked
Automated check, with a vault report
How it's proven in use
An Exit Exercise, without the original developers
Steps 3 and 4: from the wiki to the proof. Documentation kept in a repository arrives with the code; ShareFile has an integration page in the kit. ShareFile is a manual integration (an upload folder), so it is no longer described as syncing daily, which contradicted its own page. "50+ integrations" is production's figure, kept and flagged (agreed: production stats stay, flagged). The hub has setup pages for 24 platforms and production's grid shows 40, so Product must confirm the real count.md. "Sync daily" is a production claim, flagged. The proof steps are confirmed facts: an automated check with a vault report and a Software Resilience Certificate with every protection; on Escrow Pro, Resilience Pro and Continuity Pro, Agentic Verification (the Codekeeper AI Verification Lab, no vendor help, hours, missing items flagged, monitoring between runs). The ladder is the agreed proof ladder, kept short; its last line keeps the agreed wording on release rights. A rebuild writes up the build steps it followed, which is a confirmed deliverable; the page doesn't claim the agents grade the documentation. The real test of documentation is a team without the original developers, which is the Exit Exercise, so step 4 says that. 16 Oct: Continuity Pro added; base Continuity no longer includes Agentic Verification, so the Recoverability Certificate rung names Continuity Pro.

How it gets in, and how it's proven

Kept with the code. Tested by a new team.

Documents arrive through integrations or secure upload, and they're checked with the rest of the deposit. The best proof is a rebuild without the people who wrote them.

1

Connect or upload

Documentation in a repository or connected storage arrives through our 50+ integrations and syncs daily. Upload anything else securely, or through a ShareFile folder.

2

Checked and certified

An automated check confirms what's in the deposit, with a vault report, and you receive a Software Resilience Certificate.

3

Rebuilt, with Pro

AI agents rebuild the application from the deposit alone, in the Codekeeper AI Verification Lab, and write up the build steps they followed. Anything missing is flagged.

4

Tested by people, with an Exit Exercise

Our specialists rebuild the application by hand in a clean room, without the original developers, and test the business functions you nominate.

Escrow · Resilience · Continuity

Software Resilience Certificate

The documents are held with the code, and an automated check confirms what's there, with a vault report.

Proves: it's there.

Escrow Pro · Resilience Pro · Continuity Pro

Recoverability Certificate

AI agents rebuild the application from the deposit in the Codekeeper AI Verification Lab, with no help from the vendor, in hours. You also get the run report, an SBOM and an Exit workbook.

Proves: it builds. Agentic Verification

Add-on to any plan

Tested Exit Report

Our specialists rebuild by hand in a clean room, from the deposit and its documentation, and test the business functions you nominate, without the original developers.

Proves: you could exit and keep working. Exit Exercise

The higher you go, the more it proves. The Recoverability Certificate documents the rebuild; release rights come from the agreement. How verification works

Step 3 continued: which protection to attach. The three-job cards appear on every deposit page, each with one line on what that job means for this material on the day it's needed. The "from" prices are the 6 Oct list (Software row); the lead is the price logic sentence, word for word. Every protection can hold documentation, so no card is outlined. 16 Oct: Continuity Pro added (from $1,699, setup $999) to the fine print; base Continuity no longer includes Agentic Verification. 17 Oct: the recovery models are named, as in the launch film (Danny): Self-Run Recovery for Escrow, Managed Recovery for Resilience and Continuity.

Which protection fits

Choose whose team reads it.

Escrow means the deposit is released to you and you run the recovery. Resilience costs more because we do the recovery. Continuity costs more again because we also keep the live environment switched on.

Released to you

Escrow

Released to you→Self-Run Recovery

The documentation is released to you with the code, so a new team can pick the application up. Explore Escrow

From $199

Recovered by us

Resilience

Comes to us→Managed Recovery

It comes to Codekeeper, and our engineers use it to bring the application back for you. Explore Resilience

From $399

Stays online

Continuity

Live service kept on+Managed Recovery

We recover with it while the live environment stays paid and switched on for an agreed period. Explore Continuity

From $1,449

Software list prices, per application per month; SaaS and AI have their own rows. Escrow Pro (from $449), Resilience Pro (from $649) and Continuity Pro (from $1,699) add Agentic Verification. Setup is $499 per arrangement, or $999 for Continuity and Continuity Pro. See all prices

Close the loop on the story: one application, eight kinds of material. Production's "Cover your full software infrastructure" block links to only two to five of the other asset pages, and files them under three old products (Software, SaaS and Continuity Escrow). Here all eight appear in the same order on every page, with this one marked, because one application usually needs several of them to come back. The order follows a recovery: what it's built from, how it's built, what it runs on, how to run it, what it calls, the thinking behind it, where it runs and the keys to it. The names match the footer. The links underneath go to the application pages, which say which materials each application type usually deposits, and to the guides hub instead of production's per-page e-book block.
The secondary conversion, on every page. Visitors who aren't ready to talk can still leave their email. The sample evidence pack is the same offer on every page, so the site has one lead magnet instead of a different e-book per page. It also carries the launch story: proof, not promises. The button goes to the sample evidence pack page.

Sample evidence pack

See what your auditor would receive.

An anonymised set of outputs from a real Agentic Verification run, so you can judge the evidence before you talk to us.

  • Recoverability Certificate
  • Run report
  • SBOM and Exit workbook excerpts
Get the sample evidence pack
Production's questions that still apply, reworded. Kept: what it is, who needs it, and what to include. New: formats (the production claim, in plain words, flagged in the section above) and how to know the documentation is good enough, which routes to the proof ladder. Removed: "start at $125 per month", "ISO 27001-aligned environments" and "Getting started is simple".

Questions

Document escrow, answered.

What is document escrow?

An agreement in which a software vendor deposits the documentation needed to operate, support or restore its software with a neutral party such as Codekeeper. If an agreed release condition is met, the documents are released to the beneficiary so recovery work can begin.

What should the documentation cover?

Enough for a team that has never seen the application to install, run and support it: installation and deployment steps, architecture, configuration and runbooks. The agreement lists what's included.

Which formats can we deposit?

The formats your teams already use, from office documents and online editors to files kept in a repository. If something is unusual, bring it to a demo.

How do we know the documentation is good enough?

The automated check confirms it's in the deposit. With Pro, a rebuild shows the application builds from the deposit alone and writes up the steps. An Exit Exercise goes further: our specialists rebuild by hand without the original developers and test the functions you nominate.

Who needs document escrow?

Vendors use it to meet procurement requirements and win enterprise deals. Customers use it to keep the operational knowledge they'd need if the vendor couldn't provide it.

The same close on every page. The close repeats the headline: documentation is the know-how that turns a deposit into a working application. Every page ends on the same two actions in the same order: Book a demo, then the sample evidence pack.

Keep the know-how with the code.

We'll look at what a new team would need to run your application, and what a deposit would hold.

Chat widget goes here. Production runs HubSpot chat in this corner. Keep it on launch: it catches visitors with a quick question who won't book a demo yet. Route it to sales during office hours.