How does the ESCROW safe service work?



The purpose of software escrow is to minimize risks connected with the development and maintenance of information systems. The service is based on safe custody of application source code with an independent escrow agent under a conditional three-party agreement between the user, the software producer and the escrow agent. When the agreed conditions are met, such as supplier termination or SLA breach, the escrow agent may release the source code to the user so software maintenance and development can continue with another partner.

1. The vendor agrees with its client
2. Together we sign an ESCROW agreement
3. The vendor archives the work in UP>SAFE
4. The UP>SAFE safe is locked
5. We release the work to the client under the agreed terms

Store your data with us and define under what conditions, and to whom, it should be released. Our unique custody system creates a digital audit trail, records the existence and content of data over time, and authenticates and authorizes the party entitled to manage it. For developers, we can store GIT-supported repositories, full development environment mirrors, documentation, database models, deployment scripts and related materials. Contact us and we will design the right custody setup for your products.

Store any digital materials with us. In addition to traditional source code escrow, our custody service is well suited for implementation documentation for construction and engineering projects that contain intellectual property and are not handed over to the customer. It can also cover production plans, design materials and technical documentation that later make product modifications much easier.

Store data files containing copyrighted works, including music, marketing images and videos, authored texts, scientific papers and more.

Store digital contract attachments, current versions of published business or purchasing terms, scientific papers and grant materials.

We can also provide professional services, digital content audits and source code validity checks.


UP>SAFE FEATURES

  • gallery 1
  • Data ESCROW

    The purpose of software escrow is to minimize risks connected with the development and maintenance of information systems. The service is based on safe custody of application source code with an independent escrow agent under a conditional three-party agreement between the user, the software producer and the escrow agent. When the agreed conditions are met, such as supplier termination or SLA breach, the escrow agent may release the source code to the user so software maintenance and development can continue with another partner.

  • gallery 2
  • Safe custody

    Customers often ask software vendors to release source code in order to secure continuity of operation and future development of an information system. A traditional solution is notarial or attorney custody. These services are often costly, risky in terms of handling source code and inflexible because they require regular physical manipulation of media such as CDs or flash drives. Due to limited reliability and media lifespan, they may not always fulfil their purpose. In these situations, contracts can be refused either by the vendor, who fears know-how disclosure, or by the customer, who faces additional custody costs.

  • gallery 3
  • Three-party agreement

    Our offer is based on a three-party software escrow agreement between the software producer, the user and Packagestream s.r.o., usually requested by the software user. Source code is released only when the conditions defined in the agreement are met, for example bankruptcy of the producer, termination by the producer or failure to meet SLA obligations.

  • gallery 4
  • Fully digital

    The uniqueness of our solution lies in a fully electronic custody process, simple escrow administration and clear work with beneficiaries. Strong encryption, data archiving and authentication standards are used in line with current legislation.


Pricing

ONE ESCROW
  • 1 Escrow Agreement
  • 1 Data Repository up to 1GB
  • 1 Folder up to 100 MB
  • 2 updates per year
  • Data integrity test
  • Antivirus scan
  • Escrow output report
890 CZK
monthly
billed annually
4990 CZK 
One-time activation fee
0 CZK
100% discount on the activation fee until the end of February

SMALL TEAM
  • 5 Escrow Agreements
  • 5 Data Repositories, each up to 1GB
  • 5 Folders up to 5GB
  • 20 updates per year
  • Data integrity test
  • Antivirus scan
  • Escrow output report
3490 CZK
monthly
billed annually
2490 CZK 
Activation fee per agreement
0 CZK
100% discount on the activation fee until the end of February

LARGER COMPANY
  • 20 Escrow Agreements
  • 20 Data Repositories up to 50GB total
  • 20 Folders up to 50GB
  • Free Repository Updates
  • Data integrity test
  • Antivirus scan
  • Escrow output report
12990 CZK
monthly
or by agreement
890 CZK 
Activation fee per agreement
0 CZK
100% discount on the activation fee until the end of February


REFERENCES
  • partner 1
  • partner 2
  • partner 3
  • partner 4
  • partner 5
  • partner 6

FAQ

How is stored data protected against loss or damage, for example hardware failure?
We prevent loss of escrow material on several levels. Data is stored as a secure archive mirrored across two geographically separate storage locations, Prague and Olomouc. Each location independently performs cyclical file consistency checks. For any exceptional event, such as storage unavailability, a precise recovery procedure is defined to restore the entire custody system to its original state.
How are source codes protected against disclosure?
Our source code protection uses asymmetric cryptography. The material is encrypted with the public key of the software user, making the user the only party able to decrypt it. The user gains access to the encrypted material only after release from escrow. This fulfils a core security principle: combining knowledge of a secret, the private key, with possession of the material.
Could UP>SAFE release source code without authorization or to someone else?
The conditions for releasing source code must always be objectively measurable and clearly defined in the escrow agreement. The recipient is precisely specified and UP>SAFE is obliged to identify that recipient. Typical release events include: software producer bankruptcy breach of the escrow agreement by the software producer breach of obligations arising from the maintenance agreement
How do UP>SAFE services differ from law firms that store source code?
Source code custody with a law firm can be an acceptable solution: it guarantees that the digital material remains untouched and is released only when contractual conditions are met. Law firms, however, usually do not have sufficient technical know-how. They cannot reliably verify that, when needed, the deposited source code can immediately be used to build a working application. By contrast, we offer two levels of verification for stored material. This allows us to confirm whether the deposited source code really belongs to the application installed in the customer's live environment. Once the escrow conditions are fulfilled and the source code is released, an experienced developer should be able to generate fully functional software.
Can escrow be used for digital material other than source code?
Our escrow services can be used by anyone for different types of digital material. What matters is that the parties define what is being deposited and under what conditions the deposited content will be released. Besides source code, escrow can be applied to implementation documentation for construction and engineering projects that carry the contractor's intellectual property and are not handed over to the customer. It may also include production plans, design materials and technical documentation that later make modification of the final product much easier. Another suitable use is the custody of original photographs and source materials used to create marketing outputs. In these cases, the customer often receives only the final product, such as leaflets, templates or billboards. If changes are needed later, even small ones, the customer must go back to the original creator. Escrow services make sense in supplier-customer relationships where the producer needs to protect know-how while the risks for the customer exceed an acceptable level. Unexpected events can happen to any supplier.
Binary files can be decompiled to obtain source code. Why should we store it?
In principle, this is possible. In practice, decompiling machine code produces source code that is difficult to read and lacks items such as the programmer's comments. Source code alone is also far from enough. Other elements are important, including build scripts, build instructions, development tool configuration, technical documentation and third-party tools. In practice, decompilation could only be successful for small, non-complex software programs.