Value Added Services
Verification Services
We Offer a Range of Verification Services to Ensure the Usability of Source Code
Software Escrow Services | Verification and Testing
The Escrow Company offers an array of verification services to mitigate potential risks with software escrow arrangements. Our mission is for our clients to be comfortable that in the event of a release condition, the source code deposit will be accessible and usable.
File Integrity Test
Comprehensive Build Verification
Cloud Deployment Verification
SaaS Release Verification
SaaS Recovery Verification Testing
Mobile App Verification
Verification Services
File Integrity Test: Included Free Of Charge With All Agreements
The File Integrity Test is a check of the deposit to ensure that the data can be accessed. The basic verification report includes the following checks:
- Ensuring that data exists on the deposit media that resembles source code data.
- If the data is encrypted, a working encrypted key is included in the documentation.
- If the data is compressed it can be decompressed into a logical file structure.
- Ensuring documentation exists detailing the required components needed to compile the software.
Verification Services
Comprehensive Build Verification
The Comprehensive Build Verification provides the Beneficiary with independent assurance of the completeness and usability of the Deposit Materials. Using the supplied source materials and performed remotely via a secure connection, an Escrow Company consultant observes and documents the software build and compilation process. If feasible, once the Product has been compiled/deployed, the Beneficiary will be invited to remotely test the recompiled software. A typical Comprehensive Build Verification would include:
- Identify and document the test development environment utilised including specifications of all hardware, operating systems and virtualised environments;
- Identify all third-party applications used during compilation of the Product;
- Introduce the Source Code and associated files required for compilation of the Product into the test development environment;
- Analyze and document the structure of the Source Code repository and ensure that Source Code directories are present for all components of the Product;
- Identify the readability of the Source Code – check for history, formatting, comments etc. and examine file/function naming conventions etc. to verify the lack of any obfuscation;
- Identify any database(s) included as part of the software and ensure the appropriate database creation scripts or dump files are included as part of the deposit if appropriate;
- Verify that all Source Code can be used to generate an executable version of the Product and that all application components have been successfully compiled;
- Verify that the Product components can be successfully deployed and that the version of the Product is the correct version as specified by the Beneficiary with configuration of the test runtime environment and details of all third-party applications required documented;
- Verify that on the entry of test data the Product functions in the correct and expected manner
Verification Services
Cloud Deployment Verification
Provides the assurance that all information, files and source materials including deployment scripts required to build the software have been deposited into escrow and verified for completeness and useability.
Available for applications deployed across AWS, Microsoft Azure, Google Cloud and Oracle.
An Escrow Company consultant observes the Depositor performing a compilation/deployment and documents the process. This includes:
- Capturing the deployment process using screenshots;
- Asking questions to clarify the deployment process;
- Identify and document any third-party dependencies.
A final report will be issued covering the verification process including screenshots confirming the product deployment.
Verification Services
Cloud Deployment Verification with Code Quality Audit
The Cloud Deployment Verification with Code Quality Audit provides the Beneficiary with Independent assurance that in addition to the deployment process as included in a Cloud Deployment Verification, an Escrow Company consultant will perform a deep dive into the quality of the source code materials deposited as part of the escrow agreement. This exercise will provide assurance that the deposit contains source code for all components of the software and that the source code may be modified and that variables, functions, etc appear to be defined clearly and explicitly. This additional process is designed so that a third-party developer could continue to maintain the source code if ever required.
Available for applications deployed across AWS, Microsoft Azure, Google Cloud and Oracle.
Verification Services
SaaS Release Verification (Enterprise SaaS Continuity service)
Part of The Escrow Company’s Managed SaaS Continuity service, this test is performed to simulate a release condition of a SaaS environment. This process is to ensure that the CloudFormation/Terraform scripts or other deployment scripts are deployable to a clean cloud instance. The database is verified to ensure that the database is functioning and that the data is accessible by the end user. The process includes detailed documentation of the steps required to launch the application and an opportunity for the client to perform functionality testing of the escrow environment.
SaaS Recovery Verification Testing
Validate your recovery strategy with independent, hands-on testing.
SaaS Recovery Verification Testing is designed to simulate a real-world release scenario and provide assurance that all materials required to recover and operate your SaaS application have been deposited into escrow. This includes source code, deployment scripts, infrastructure definitions, databases (where applicable), configuration information and supporting documentation. The objective is to verify that the deposited materials are complete, accurate and usable in practice, not just stored securely.
As part of the verification process, The Escrow Company provisions a dedicated cloud environment and provides the software vendor with temporary administrative access to deploy the solution. Our technical consultants observe, document and validate the deployment process to ensure that the application can be recreated independently.
During the verification, we:
- Observe and document the deployment of the solution into a dedicated escrow-controlled cloud environment.
- Record the deployment process through screenshots, video evidence and detailed technical notes.
- Review and clarify deployment procedures with the vendor.
- Identify and document third-party dependencies, services and licensing requirements.
- Validate that deposited materials align with the documented recovery process.
- Independently test our ability to enable, disable and recover the deployed environment.
Once the recovery process has been successfully validated, the beneficiary is invited to access the recovered environment and undertake smoke testing to confirm that the application is operating as expected.
Following completion of the test, The Escrow Company issues a comprehensive verification report detailing the activities performed, dependencies identified, results achieved and evidence gathered throughout the exercise. This provides all parties with documented proof that the recovery process has been tested and that the escrow materials can be used to recreate the SaaS solution independently.
Key Benefits
- Demonstrates recoverability rather than simply storage of materials.
- Verifies the completeness and usability of escrow deposits.
- Identifies missing dependencies, configuration gaps and recovery risks.
- Provides documented evidence for governance, compliance and operational resilience requirements.
- Gives beneficiaries confidence that the solution can be recovered if access to the vendor is lost.
Verification Services
Mobile App Verification
This test is performed to verify that the deposited source code for a mobile app may be used to build and run a functioning version of the app for both Android and IOS on a local machine. The test does not include submission or publishing the app within the relevant app stores.
Trusted by 1000'S of software developers and industry leaders alike
Get a Quote
Yes! I want a free quote
- Automate deposits directly from Git such as GitHub, Bitbucket etc
- Expert in Saas Continuity within AWS, Azure and GCP
- Global footprint with offices in London (HQ) UK, Atlanta, USA, and Sydney, Australia.