Latest changeverification / certifiedshipped

Your enterprise customer wants source code escrow.

Don’t let it stall the deal.

Procurement asks for an escrow clause, and the usual answer is a sealed copy with a provider nobody has checked on since. 42escrow connects to your repository once and deposits encrypted copies on schedule, which your customer verifies by checksum without reading a line.

Your customer gets proof. You keep your code.

  • No release fee
  • Inside the EEA only
  • Held by a lawyer in Vienna

How 42escrow holds your code

live
Tripartite escrowThe software vendor's code is deposited daily with 42escrow, which holds verified versions. The licensee can check the checksum at any time and receives the code only after a trigger event and an approved release.DAILY DEPOSITRELEASE ON TRIGGERLICENSE AGREEMENT42ESCROWe02c8af7b1e44da3f91c2checksum ✓Trusteeholds a verified copy</>Depositorsoftware vendorBeneficiarylicenseechecksum ✓!TRIGGER EVENT</></>
deposit, dailyrelease, only after triggerlicense agreement

Sixty seconds on how this works.

Why the usual sealed copy is worth less than it looks, and what a deposit looks like when somebody checks it every day.

Why hand your source code to us

  • A named lawyer, not a company.

    Dr. Christof Strasser, LL.M. (Harvard), Rechtsanwalt, admitted in Austria, England & Wales and New York.

  • Statutory professional secrecy.

    Confidentiality here is not a contract term that can be waived in a settlement. It is a professional duty under the Rechtsanwaltsordnung, supervised by the Vienna Bar.

  • Mandatory professional liability insurance.

    Required by law for the practice of law in Austria, in place at all times.

  • A successor is provided for.

    If the escrow agent dies or can no longer practice, the terms appoint an interim administrator and, failing agreement, the President of the Vienna Bar names a successor. The deposit does not depend on one person staying available.

What your customer receives

A dated record for every deposit, naming the commit and the checksum — sent to both sides within five business days.

Deposit record

Northwind Software GmbH

northwind/platform-core

Checksum matchesRECORD 0041-17

Module

Escrow — release on trigger event

Contract sheet

CS-2026-0041

Pulled

2026-10-28 03:14 CET

Branch · tag

main · v4.11.0

Commit

7b1e44d8c2a9f0315ec6b8d47a1902fe3cc5081b

Package checksum — SHA-256

9f2c40ab7e18d5330c91b6ae44f7c2d8e05b31a9c7f4e6082db5143ca8e97601

Files

4 812

Size

318 MB

Next pull

2026-11-04

Delivered to

  • Depositor — Northwind Software GmbH
  • Beneficiary — Lakeside Insurance AG
Issued for every pull and sent to both parties within five business days.Schedule § 3.1, Clause 5.
Example — names, hashes and figures are invented.

The problem

A promise is not evidence.

The escrow clause is in most license agreements. It rarely gets implemented — and when it does, there is a disk somewhere that nobody has checked on since the day it was handed over.

Conventional escrow

  • A disk, handed over once
  • Version: some time ago
  • Nobody knows whether it is complete
  • Release: whatever you can negotiate

42escrow

  • Pulled straight from Git, every day
  • A SHA-256 checksum for every version
  • Every event in an append-only log
  • Release only through the agreed procedure

Who it is for

One record. Everyone who relies on it.

For software vendors

Your risk is disclosure. Not disappearance.

Your customer's clause, met without extra work: connect once, no manual uploads. Your code stays encrypted, under a lawyer's duty of confidentiality. Your customer sees checksums, not source.

For licensees

If your vendor is gone, you hold more than a promise.

A verified copy, not an assurance. Check the version and the checksum yourself, at any time, and receive the code through the agreed release.

For counsel

A procedure that holds when it matters.

Agreed trigger events, a documented release, a tripartite agreement drafted by lawyers.

For investors

Diligence on code you can't read.

A verified deposit answers the continuity question in due diligence, and protects portfolio companies that depend on a single vendor.

Why a law firm

Held by a lawyer in Vienna.

42escrow is a service of 42law. The trustee is a Rechtsanwalt — an attorney admitted in Austria, and in England & Wales and New York — not a service provider. Escrow used to be the business of lawyers and notaries, until code moved to GitHub and a sealed envelope stopped making sense. 42escrow puts the two back together.

What a lawyer adds

Three duties a data center does not have.

Confidentiality

Professional secrecy, by statute.

An Austrian Rechtsanwalt is bound to secrecy by law (§ 9 RAO). Your code is protected by professional law, not only by a clause in a contract.

Oversight

Supervised by the Vienna Bar.

A breach has disciplinary consequences under Austrian professional rules, not just commercial ones.

Liability

Insured, as the law requires.

Every Austrian Rechtsanwalt carries mandatory professional liability insurance. There is cover behind the promise.

Your trustee

Vienna

Dr. Christof Strasser

Attorney in Vienna. Software contracts and transactions since 2005.

Let's talk about your clause.

A few lines are enough. Tell us who is on each side and what the license covers.

Get in touch