Your escrow agreement provides you with the assurance that you will be able to obtain the deposit materials if your software vendor goes out of business or fails to meet their obligations.
But how can you be sure that the escrowed materials aren’t password protected, contain viruses.
We provide free Integrity Testing on all material lodged under a standard escrow agreement. We pass all material through a process to ensure that it is virus free, accessible and of the expected type, providing assurance that the source code will be accessible if a release event occurs.
The Integrity Test Process
The following checks are carried out on all deposits received:
- Virus Check: The material is checked using the very latest virus checking software. The results along with a note of the software used are recorded in the Integrity Test Report.
- Media Read Check: The material is read to ensure that all data can be retrieved successfully. The software utility & the commands used to read the material from the media are recorded in the Report.
- Compression Check: All compressed files are checked to ensure that they can be decompressed successfully. The methods used are recorded in the Report.
- Password/Encryption Check: If any files are password protected, the passwords are obtained to ensure that the files can be opened. The fact that passwords form part of the escrow deposit is noted in the Integrity Test Report and the passwords are securely stored in a separate location to the deposit. All encrypted files are decrypted & the methods used are recorded in the Report.
- Source Code Check: A check is carried out to ensure that source code files have been deposited and that they are in human readable form. The results are recorded in the Report, along with a note of the editor used.
- Source Code Information Check: A sample of the source code files are examined to determine whether they contain features that aid readability, such as; modification histories, indentation, comments, meaningful variable and procedure names and meaningful file names. Comments on the findings are inserted into the Report.
If the material tested fails any of the first five checks, Harbinger request that the software owner provides a replacement deposit, and the Integrity Test process will start again from the beginning. The Integrity Test report in addition to providing results of the checks performed also contains software owner details, the date of deposit, the name & version number of the source code, the agreement number and an inventory of the materials received.
We carry out Deposit Evaluation and Integrity Testing on all escrow lodgements received by Harbinger as part of the standard escrow services. The cost of this service is included within the standard escrow service subscription fee.
When we receive deposit materials from a software vendor we ensure:
- Deposit Materials are lodged in a timely fashion and in accordance with the escrow agreement
- All lodgements are accessible or can be accessed using the supplier’s encryption key
- A sample of files is targeted and the media audited for readability.
- If physical media is lodged, the condition and usability of the media is confirmed
- The materials are passed through the latest virus scanning software to check for embedded threats
Please note: It is important that Deposit Evaluation and Integrity Testing are not relied upon to verify that the materials lodged into escrow:
- Match the requirements of the escrow agreement;
- Are complete; and
- Can be compiled and executed successfully.