Supplying escrow deposits is simple when you follow a few clear steps. The deposit contains the material that the parties have agreed upon. This typically consists of the building blocks of the software, SaaS service or product. Therefore, it is important to define clearly which material you deliver, so that all expectations are met.
EscrowDirect checks the materials before accepting them for deposit. During each delivery, the supplier and EscrowDirect go through the procedure below. Upon completion, we send a confirmation of the deposit to both the supplier and the beneficiary.
We advise suppliers to follow the steps below when supplying escrow deposits. If you have an alternative method or wishes, we are happy to provide customisation.
Step 1: Preparation for supplying escrow deposits
The escrow arrangement requires a complete deposit containing all materials. To help the supplier prepare and compile the materials, the supplier and the verification consultant from EscrowDirect first hold a consultation. We use a checklist or the instructions set out in the agreement.
Archiving and compression
Have you collected all the materials? Combine multiple files into a single zip file. This makes it easier to deliver the files without forgetting essential components. Moreover, the tree structure of files and folders is preserved, and compression reduces the space the materials need. Preferably, use common archiving software that supports zip, rar or tar.
Encryption: some compression and archiving software can also encrypt files. You can use this encryption instead of the specific encryption described below.
Large files: is your deposit considerably large? Then you can split the archive into multiple parts. This reduces the chance of errors during electronic transfer, and you can restore the parts of the archive separately.
Step 2: Check
Checksum
We use checksums to ensure the integrity of a file after the supplier has transferred it to EscrowDirect. In this way, we make sure that the received file is exactly the same as the source file from the supplier. We use the following checksums to verify file integrity:
- MD5 checksum
- SHA-based hashes
Step 3: Security
Encryption
When supplying escrow deposits, EscrowDirect advises always delivering the materials encrypted. This increases security during transport, electronic transfer and storage.
Sending keys
Use common encryption software such as Windows BitLocker, Apple FileVault or TrueCrypt. If you choose encryption in the delivery process, you automatically receive the public key.
If you use your own keys instead of the public key of EscrowDirect, please provide this information separately. The delivery of these keys is a separate process. Furthermore, we always store keys separately from the encrypted material.
Step 4: Verification before supplying escrow deposits
Before supplying escrow deposits, you can check all the steps. Have you placed all materials in the compressed file? Do they match the materials as set out in the agreement? Is the correct version number available?
Step 5: Delivery of your escrow deposit
The first step in the delivery is filling out the Escrow Depot Form (EDF). You receive this form by e-mail after the start of the escrow arrangement. The data on this form is already filled in. Check this data before you send the form to us.
For supplying escrow deposits, the total material can amount to a maximum of 100 GB per deposit. If you have more material, we are happy to provide a suitable solution.
- Are you using encryption? Indicate this, and you will automatically receive the public key.
- Are you using the EscrowDirect FTP server? Indicate that you want to use FTP and request access to the FTP server. This server is provided by Escrow Alliance.
- Are you using alternative security or passwords? Indicate this, and you will receive delivery instructions in a separate request.
EscrowDirect accepts common storage media for deposit. If you deliver electronically, we provide a media carrier free of charge. You can deliver the material to EscrowDirect in the following ways:
- In person at the EscrowDirect office.
- Have EscrowDirect pick it up in person at your office.
- By mail to EscrowDirect in Haarlem.
- By courier service, with a choice of pick-up or delivery.
- By FTP, with options including FTP, SFTP, FTPS, FTPES or SSH tunnel.
- Through the secure website transfer.escrowalliance.com.
- Through links with source code management servers based on git, svn, mercurial or within TFS environments.
- Through real-time or near-real-time backups of data and virtual machines.
Step 6: Feedback
After we receive the materials, you receive confirmation in the form of a verification report within five days.
We check all materials with Technical Verification TVS Level 1 before we accept them. If we cannot complete all tests successfully during verification, we contact the supplier.
Do you have questions about supplying escrow deposits? Read our FAQ about escrow or contact us. For background on the concept, see the Wikipedia article on source code escrow.