Verification
A deposit nobody has ever rebuilt is a filing cabinet, not a safety net.
Protection scope:Escrow deposits
Our terms say plainly that the Escrow Agent owes no examination of the deposited material. That is not a gap, it is the reason this is a separate product: an escrow agent who quietly promises that everything works has promised something it cannot deliver, and your customer's lawyers will find that out at the worst possible moment. What we examine, we agree in writing and charge for.
What is examined
Validated
IncludedA checksum over the whole package and over every single file, formed right after each pull and handed over with every release and every retrieval. It proves the deposit is byte-for-byte what was pulled. It says nothing about whether the software runs.
Verified
Automated review of each deposit: what changed since the last pull, which components and dependencies it contains, how large it has grown, whether the frequency was kept. A monthly report to both parties.
Certified
We take the deposit into a clean environment, install the pinned platform components, apply your own deployment scripts against an empty database, and confirm that it installs, activates and serves. Both parties get the report; once a year it becomes a certificate an auditor can use.
Verification once is a moment. Verification every quarter is a property. We price the recurring one so that it is the obvious choice.
How it runs
- 01
We agree in writing which level applies and how often.
- 02
We examine each deposit to that level.
- 03
Both parties receive the report. With Certified, once a year a certificate.
Who it is for
Beneficiaries whose auditors ask whether the deposit would actually work, and suppliers who would rather answer that with a report than with a reassurance.
What it is not
Priced per recovery product
Verified and Certified are priced per recovery product on the add-ons page.
- No release fee
- Inside the EEA only
- Held by a lawyer in Vienna
FAQ
Common questions.
Is Validated enough?
For proving that the deposit has not changed since it was pulled, yes. For anything about whether the software runs, no — that is what Certified is for.
Who receives the reports?
Both parties. The monthly Verified report and the Certified report go to supplier and customer alike.
Do you need access to our systems?
No. Certified works from the deposit, in a clean environment, using your own deployment scripts. If it cannot be built from the deposit, that is the finding.