Supplying escrow deposits

The deposit contains the material that the parties have agreed upon. This typically consists of the building blocks of the software, SaaS service, or product.

EscrowDirect checks the materials before accepting them for deposit.

During each delivery, the supplier and EscrowDirect go through the procedure below. Upon completion, a confirmation of the deposit is sent to both the supplier and the beneficiary.

EscrowDirect advises suppliers to follow the steps below. If you have an alternative method or wishes, we are happy to provide customization.

. 1 Preparation

The escrow arrangement requires a complete deposit containing all materials. To assist the supplier in the preparation and compilation of the materials, prior consultation is held between the supplier and the verification consultant from EscrowDirect. A checklist or instructions set out in the agreement are used.

Archiving and compression

Have you collected all the materials? Combine multiple files into a single zip file, making it easier to deliver the file without forgetting essential components in the deposit. Moreover, the tree structure of files and folders is preserved. Compressing the file reduces the space required by the materials.

Preferably, use common archiving software that utilizes zip, rar, or tar.

Options:
Encryption
Some compression and archiving software also have the option to encrypt files. You can use this encryption instead of the specific encryption below.

Large files
Is your deposit considerably large? Then splitting the archive files into multiple parts is an option. This reduces the chance of errors during electronic transfer and parts of the archive can be restored.

.2 Check

Checksum

Checksums are used to ensure the integrity of a file after it has been transferred from the supplier to EscrowDirect. EscrowDirect uses checksums to ensure that the received file is exactly the same as the source file from the supplier.

EscrowDirect uses the following checksums to verify file integrity:

MD5 Checksum
SHA-based hashes

.3 Security

Encryption

EscrowDirect advises always delivering the materials encrypted. This increases security during transport, electronic transfer, or storage.

Sending keys

For this, use common encryption software like Windows Bitlocker, Apple FileVault, or TrueCrypt. You will automatically receive the public key if you choose encryption in the delivery process.

If you are using your own keys and not EscrowDirect’s public key, please provide this information separately. The delivery of these keys is a separate process, and keys are always stored separately from the encrypted material.

.4 Verification

Before delivering the material, you can check all the steps. Have you placed all materials in the compressed file, and do they match the materials as set out in the agreement? Is the correct version number available?

.5 Delivery

The first step in the delivery is filling out the Escrow Depot Form (EDF). You will receive this form by email after the start of the escrow arrangement. The data on this form is already filled in. Check this data before sending the form to us.

The total material can amount to a maximum of 100 GB per deposit. If you have more material, we are happy to provide a suitable solution.

Are you using encryption?
Indicate this, and you will automatically receive the public key.

Are you using EscrowDirect’s FTP server?
Indicate that you want to use FTP, and request access to the FTP server. For your information. This server is provided by Escrow Alliance.

Are you using alternative security or passwords?
Indicate that you are using alternative security or passwords, and you will receive delivery instructions in a separate request.

You can deliver the material to EscrowDirect in the following ways:
In person at EscrowDirect’s office.

EscrowDirect accepts common storage media for deposit. If you are delivering electronically, we will provide a media carrier free of charge.

  • Have it picked up in person by EscrowDirect at your office.
  • By mail to EscrowDirect in Haarlem.
  • By courier service with a choice of pick-up or delivery.
  • By FTP, with options including FTP, SFTP, FTPS, FTPES, or SSH Tunnel.
  • Through the website https://transfer.escrowalliance.com (secure only).
  • Links with source code management servers based on git, svn, mercurial, or within TFS environments.
  • Real-time or near-real-time backups of data, virtual machines.

.6 Feedback

After receiving the materials, you will receive confirmation in the form of a verification report within five days.

All materials are checked with Technical Verification TVS Level 1 before being accepted. If not all tests can be successfully completed during verification, we will contact the supplier.