Verifications, 100 % independent and maximum assurance
Can I really build a running system from the escrow deposit when it is necessary?
This is the question most users of software that enter into an escrow agreement ask themselves. For this reason all kinds of verifications are offered in the market, varying from checking a table of contents, via a virus scan up to a complete rebuild of the system on the premises of the escrow agent. We have strong beliefs about what kind of verifications are a waste of time and money and about what type of verification is of indisputable value to the end user. Check our our vision on providing you with the assurance you want:
100 % Independent
Part of the verification should be to assess whether the deposits can be downloaded from our SecureStorage, decrypted and unpacked. This means assessing part of Softcrow’s activities and infrastructure. Of course this assessment cannot be performed by Softcrow itself. This would be far from independent. We believe that the verification as whole should be performed by an independent and external Certified Information Systems auditor, providing you with a maximum of independent assurance.
No false sense of security
Checking whether the contents of a deposit are the same as the accompanying Specification Form (Table of Contents) of course tells you a little bit. But to be honest, if the Specification Form is not complete nobody (except for the Supplier) can tell. Therefore we believe that the only way to tell if a deposit is complete, is to rebuild the system. Period. Since this is also the only way to tell of the deposit leads to a working system, we offer only one level of Verification: the Supervised Rebuild.
A verification will (mostly) take place at the Supplier’s premises, on the Supplier’s systems. There are many different kinds of software and many different hardware platforms. Most Software Users don’t have a spare duplicate system at hand to perform an assessment. Also neither the User or the Escrow Agent possess the knowledge that is needed to efficiently rebuild a system. In order to acquire the same level of knowledge and systems, much time and money needs to be spent. Thisis unnecessary and serves no purpose. In order to make maximum use of already available skills and system, the external systems auditor will therefore require that the supplier writes a “build script” in which is described, step-by-step, how to get from the deposit to a running system. During the verification this auditor will verify meticulously if all steps are taken and if this results in a working system. He will also verify that all system components and 3rd party software are available as described.
On premise or remote
Many organizations use software from foreign suppliers. Dependent on the system at hand, we can have the verification performed on site at the supplier or remote via a separated Virtual Machine. This will save travel and lodging expenses.
Always your choice!
Not all software users require the same level of assurance. Some only want a verification at the start of the escrow agreement, some like it every year or with every new deposit. Some just trust the supplier and never feel the need for a verification. Therefore, performing a Verification Examination is always optional at Softcrow. And if you know upfront that you want a Verification performed on an annual basis, we offer you a discount in the form of Escrow Assured.