SaaS Escrow Solutions

Our distinctive service ensure continuity for AWS, Microsoft Azure, Google Cloud, and other cloud-hosted software in cases where the software vendor is unwilling or unable to deliver services.

What is SaaS Escrow?

SaaS Escrow involves a three-party agreement between the SaaS vendor, the end user, and a trusted third-party, where essential deposit materials are securely deposited and verified for completeness and usability.

SaaS applications provide companies with increased efficiency and flexibility often at reduced costs. Along with the benefits of SaaS applications come increased risks. In most situations, the SaaS vendor maintains control and storage of your data.

The most efficient way to protect your company is to implement a SaaS Escrow solution.
Together with our team of AWS, Microsoft Azure and Google Cloud engineers, Escrow London prides itself on providing a range of cost effective, innovative and bespoke solutions depending on individual client requirements. We have a pragmatic approach and the ability and experience to think ‘outside the box’ when it comes to SaaS business continuity solutions.

The Escrow Company SaaS Continuity Escrow Solutions

Verified Software Escrow

The secure deposit of cloud assets necessary for the autonomous construction and deployment of the software is ensured. The Escrow Company conducts an annual verification of the software's build and deployment process.

Software Escrow for SaaS

Ensuring the secure deposit of essential cloud assets for the autonomous construction and deployment of the SaaS application.

SaaS Access Continuity

Ensuring secure access to the cloud production environment in the event of a software vendor failure.The access credentials to the cloud environment are deposited with The Escrow Company.

Enterprise Saas Continuity Escrow

Offering a 90-day live continuity service hosted by The Escrow Company in the event of a software vendor failure.

Solution 1

Verified Software Escrow for SaaS

Everything you need to build and deploy the SaaS environment – Verified on an annual basis

The Verified Software Escrow for SaaS service encompasses the deposit of all essential cloud assets required for the build and deployment of the SaaS application and cloud environment.

How It Works:

This solution typically involves an automated deposit of the following source materials from the SaaS vendor:

Source code from the developer’s git repos
Deployment scripts (Infrastructure as Code) such as Terraform or CloudFormation
Containers
Virtual Machine images
Database backups

Escrow Release Event:

In the event of an escrow release trigger, the verified Deposit Materials are released to the Beneficiary.

Included Verification:

This service comprises an annual verification, ensuring that all information, files, and source materials, including deployment scripts required to build and deploy the software, have been deposited into escrow. This verification assesses completeness and usability, including testing the functionality of the database. This provides additional assurances to the Beneficiary that the materials and databases have been tested, and processes documented, crucially aiding in a release situation.

Solution 2

Software Escrow for SaaS

Includes the deposit of all necessary cloud assets for SaaS environment recovery, the Software Escrow for SaaS service involves the inclusion of essential components required to build and deploy the SaaS application and cloud environment.

How It Works:

This solution typically involves an automated deposit of the following assets from the SaaS vendor:

Source code from the developer’s git repos
Deployment scripts (Infrastructure as Code) such as Terraform or CloudFormation
Containers
Virtual Machine images
Database backups

What happens following an escrow release event?

In the event of an escrow release trigger, the Deposit Materials are released to the Beneficiary.

Verification Options:

To offer additional recovery assurance, the Beneficiary may opt for The Escrow Company to conduct any of the following verification tests:

1. Cloud Deployment Verification:

This test ensures that all necessary information, files, and source materials, including deployment scripts required to build the software, have been deposited into escrow. The Escrow Company consultant observes the Depositor performing a compilation/deployment and documents the process, verifying completeness and usability.

2. Cloud Deployment Verification with Code Quality Audit:

This comprehensive audit provides the Beneficiary with independent assurance. In addition to the deployment process covered in a Cloud Deployment Verification, The Escrow Company consultant conducts a thorough examination of the quality of the source code materials deposited as part of the escrow agreement. This exercise assures the deposit contains source code for all software components, and the source code is modifiable, with clearly and explicitly defined variables, functions, etc. This additional step ensures that a third-party developer could maintain the source code effectively if required.

Solution 3

SaaS Access Continuity

Verified Access Credentials for the SaaS Production Environment

The SaaS Access Continuity service stands as a cost-effective solution tailored for a single-tenanted environment, delivering essential access credentials and documentation to the cloud production environment for the Beneficiary.

How It Works:

Under the SaaS Access Continuity service, the SaaS vendor is obligated to deposit and regularly update access credentials on a quarterly basis, or more frequently as required. These credentials may encompass administrator usernames, passwords, Multi-Factor Authentication (MFA), and keys, facilitating comprehensive access to the cloud hosting provider’s console, live instances, and databases. Optionally, source code and deployment scripts may be included as an add-on to provide an extra layer of protection.

Escrow Release Event:

In the event of an escrow release trigger, the administrator access credentials to the production environment will be released to the Beneficiary.

Included Verification:

The Escrow Company conducts regular quarterly tests on the credentials to ensure continued access. This continuity service assures that either the beneficiary or The Escrow Company can intervene, covering future cloud vendor bills, ensuring the seamless continuation of service for the existing production environment.

Solution 4

Enterprise SaaS Continuity Escrow

Ensuring Live Continuity Hosted by The Escrow Company

The Enterprise SaaS Continuity Escrow solution establishes a redundant operating environment for the SaaS application, swiftly deployable in the event of a release situation.

How It Works:

This solution typically involves the automated deposit of the following assets from the SaaS vendor:

Source code from the developer repos
Deployment scripts (Infrastructure as Code) such as Terraform or CloudFormation
Containers
Virtual Machine images
Databases (including up to daily backups)

Post-implementation, the cloud instances are maintained in a dormant state, accompanied by a daily backup of the database.

Escrow Release Event:

In the event of an escrow release trigger, The Escrow Company provides either direct transfer of cloud account access credentials and Deposit Materials to the Beneficiary, or The Escrow Company will manage the live SaaS service for an agreed period (typically 90 days).

Included Verification:

To ensure the usability of the latest deposit materials, The Escrow Company conducts semi-annual testing of the deployment process to a functional system. Throughout this testing, the Beneficiary has the opportunity for acceptance testing of the escrow environment, providing additional assurance.