The Escrow Company offers an array of verification services to mitigate potential risks with software escrow arrangements. Our mission is for our clients to be comfortable that in the event of a release condition, the deposit materials such as source code will be accessible and usable.
The File Integrity Test is a check of the deposit to ensure that the data can be accessed. The basic verification report includes the following checks:
The Comprehensive Build Verification provides the Beneficiary with independent assurance of the completeness and usability of the Deposit Materials. Using the supplied source materials and performed remotely via a secure connection, The Escrow Company consultant observes and documents the software build and compilation process. If feasible, once the product has been compiled/deployed, the Beneficiary will be invited to remotely test the recompiled software. A typical Comprehensive Build Verification would include:
Provides the assurance that all information, files and source materials including deployment scripts required to build the software have been deposited into escrow and verified for completeness and useability. The Escrow Company consultant observes the Depositor performing a compilation/deployment and documents the process. This includes:
A final report will be issued covering the verification process including screenshots confirming the product deployment.
The Cloud Deployment Verification with Code Quality Audit provides the Beneficiary with Independent assurance that in addition to the deployment process as included in a Cloud Deployment Verification, The Escrow Company consultant will perform a deep dive into the quality of the source code materials deposited as part of the escrow agreement. This exercise will provide assurance that the deposit contains source code for all components of the software and that the source code may be modified and that variables, functions, etc appear to be defined clearly and explicitly. This additional process is designed so that a third-party developer could continue to maintain the source code if ever required.
This test is performed to simulate a release condition of a SaaS environment. This process is to ensure that the CloudFormation/Terraform scripts or other deployment scripts are deployable to a clean cloud instance. The database is verified to ensure that the database is functioning and that the data is accessible by the end user. The process includes detailed documentation of the steps required to launch the application and an opportunity for the client to perform functionality testing of the escrow environment.
This test is performed to verify that the deposited source code for a mobile app may be used to build and run a functioning version of the app for both Android and IOS on a local machine. The test does not include submission or publishing the app within the relevant app stores.