- One template for all eight "What we deposit" pages, as production has: hero, why it matters for recovery, what's included, how it gets in and how it's proven, which protection fits, the other seven materials, the evidence pack, FAQ and close. Every page follows the same fictional SaaS application, Booking Hub (also on the SaaS escrow page), so the set reads as one story: one application needs several kinds of material to come back.
- Headline: says what this material is in plain words: the designs behind the software.
- Visual: a mock of what this part of the deposit holds. Production's hero image couldn't be opened from the kit to check it for old product names, so it isn't reused; swap it back only after someone has checked it.
- Dropped: "Book a free demo" (now Book a demo), the closing line "Let's build bulletproof software resilience together", the press quotes with publication logos (Product Hunt and two others; not customer reviews, and the logos need permission), the third-party tool logos, the per-page e-book block (the sample evidence pack band replaces it) and "Unlimited automated deposits", "supports all formats required to reconstruct or maintain your software" (an absolute), "Lock down your intellectual property" and "start at $195 per month".
- For legal: the FAQ says a release gives access to materials and doesn't by itself transfer ownership. It follows the agreed line that rights come from the agreement; please check the wording.
IP escrow. The designs behind the software.
Some of what an application needs isn't code: the designs, architecture diagrams, algorithms and research behind it. Codekeeper holds them as part of the deposit, kept current and checked, and releases them only under the terms your agreement sets.
From $199. Per application per month, with the protection you choose.
- Trusted by 3,500+ teams
- ISO/IEC 27001:2022 certified
- AES-256 encryption at rest
Trusted by 3,500+ teams, from regulated enterprises to fast-growing software vendors
Why it matters for recovery
The code shows what it does. The designs show why.
Algorithms, design decisions and specifications often live outside the repository. If the vendor stops, rebuilding or extending the application without them means rediscovering work that was already done. For the vendor, the same materials are IP to keep private until a release.
IP outside the deposit
- Designs and specifications held only by the vendor
- Algorithms reconstructed from the code, if at all
- The vendor's IP either shared too widely or not at all
IP held with Codekeeper
- Designs, diagrams, algorithms and research held with the code
- Kept private, and released only under the agreement
- Checked with the rest of the deposit, with a vault report and a Software Resilience Certificate
What's included
What an IP deposit holds.
The agreement lists exactly what's deposited. Only the items it names are required. Most IP deposits include:
- Design files. Interface, product and engineering designs, including CAD and 3D assets.
- Architecture diagrams. How the system is put together, and why.
- Algorithms and specifications. The proprietary logic that defines how the application works.
- Research materials. The studies, test results and notes behind the design.
Files can come from the design, CAD and 3D tools your teams use, in their own formats.
- Usually part of
- Any deposit, where the agreement lists it
- How it gets in
- Repository and storage integrations, or secure upload
- How it's checked
- Automated check, with a vault report
- Released
- Only under the agreement's release conditions
How it gets in, and how it's proven
Deposited privately. Released only on the agreed terms.
IP arrives through integrations or secure upload and is checked with the rest of the deposit. It leaves the vault only when the agreement says it should.
Connect or upload
Designs kept in a repository or connected storage arrive through our 50+ integrations and sync daily. Upload design files, diagrams and research securely.
Checked and certified
An automated check confirms what's in the deposit, with a vault report, and you receive a Software Resilience Certificate.
Alongside the rebuild, with Pro
AI agents rebuild the application from the deposit in the Codekeeper AI Verification Lab. Designs and research aren't built, but they're held in the same deposit as the code they explain.
Released only under the agreement
If a release condition in the agreement is met, we verify it and release the deposit to the beneficiary.
Software Resilience Certificate
The designs, diagrams and research are held with the code, and an automated check confirms what's there, with a vault report.
Proves: it's there.
Recoverability Certificate
AI agents rebuild the application from the deposit in the Codekeeper AI Verification Lab, with no help from the vendor, in hours. You also get the run report, an SBOM and an Exit workbook.
Proves: it builds. Agentic Verification
Tested Exit Report
Our specialists rebuild by hand in a clean room, from the deposit and its designs, and test the business functions you nominate, without the original developers.
Proves: you could exit and keep working. Exit Exercise
The higher you go, the more it proves. The Recoverability Certificate documents the rebuild; release rights come from the agreement. How verification works
Which protection fits
Choose who works from the designs.
Escrow means the deposit is released to you and you run the recovery. Resilience costs more because we do the recovery. Continuity costs more again because we also keep the live environment switched on.
Escrow
Released to you→Self-Run Recovery
If a release condition is met, the designs are released to you with the code, under the terms of the agreement. Explore Escrow
From $199
Resilience
Comes to us→Managed Recovery
They come to Codekeeper, and our engineers use them in the recovery we run for you. Explore Resilience
From $399
Continuity
Live service kept on+Managed Recovery
We recover with them while the live environment stays paid and switched on for an agreed period. Explore Continuity
From $1,449
Software list prices, per application per month; SaaS and AI have their own rows. Escrow Pro (from $449), Resilience Pro (from $649) and Continuity Pro (from $1,699) add Agentic Verification. Setup is $499 per arrangement, or $999 for Continuity and Continuity Pro. See all prices
Everything else we deposit
One application. Eight kinds of material.
An application usually needs more than one of these to come back. The agreement lists which ones your deposit holds, and they're checked together.
Source code
The codebase, scripts and libraries the application is built from.
Source code escrowDeployment assets
Build scripts, pipelines and infrastructure definitions that turn code into a running system.
Deployment assets escrowData
Database exports, reference data and the files the application needs to work.
Data escrowDocuments
Installation guides, architecture and runbooks: how to build, run and support it.
Document escrowThird-party dependencies
What it takes to maintain or replace the services and packages it relies on.
Third-party dependencies escrowIP and designs
The designs, diagrams, algorithms and research behind the application.
You're on this pageHosting environment
Where it runs and the accounts it depends on, mapped and kept current.
Hosting environment escrowCredentials
The logins, billing roles and keys needed to manage where it runs.
Credentials escrowSample evidence pack
See what your auditor would receive.
An anonymised set of outputs from a real Agentic Verification run, so you can judge the evidence before you talk to us.
- Recoverability Certificate
- Run report
- SBOM and Exit workbook excerpts
Questions
IP escrow, answered.
What is IP escrow?
An agreement in which a software vendor deposits its proprietary materials, such as designs, architecture diagrams, algorithms and research, with a neutral party such as Codekeeper. If an agreed release condition is met, they're released to the beneficiary so development, recovery or operations can continue.
What types of IP can be deposited?
Any intellectual property behind the application that the agreement names: design assets, architecture diagrams, algorithms and specifications, technical documentation and research materials.
Does a release transfer ownership of the IP?
No. A release gives the beneficiary access to the deposited materials. What they may do with them is set by the agreement and their licence, not by the deposit itself.
Is our IP safe with you?
Codekeeper is ISO/IEC 27001:2022 certified, and deposits are encrypted at rest with AES-256 and in transit with TLS. The deposit is released only when a release condition in the agreement is met and verified. See the Trust Center.
How is it different from source code escrow?
Source code escrow holds what the application is built from. IP escrow holds what explains and defines it: designs, diagrams, algorithms and research. Most deposits combine both. Source code escrow
Keep the thinking with the code.
We'll look at the designs and research behind your application, and how a deposit would hold them.