ses - briefing document 2017

Software Escrow Solutions

Software Escrow

SecureStorage

SoftwareTesting

Contents

About SES 3

What is Software Escrow 4

Secure SaaS 5

Secure Depositing and Storage 6

Validation Services 7

Why SES & Accreditations 9

Contact Information 10

Contact Information

Phone: 0161 488 1400Email: [email protected]

Manchester Office

Landmark House,Station Road,Cheadle Hulme,Cheshire,SK8 7BS,United Kingdom

www.ses-escrow.co.uk | 0161 488 1400 | [email protected]

Page | 2

About SES

Experts in our field

SES is a privately owned British Company and a leadingworldwide supplier of low cost, high value Software Escrowsolutions, software testing services and secure storage.

For nearly two decades, SES has been protecting over 2,000software developers, IP Owners, distributors and end users inover 40 countries across the world.

We are proud to be one of the few Escrow agents to hold thehighest regarded certifications in the industry, includingInformation Security Management ISO 27001, which weacquired and have maintained since 2010.

Our mission is to be the most streamlined, flexible and costeffective Escrow supplier in our industry. Our Policy is to workto our customers requirements and constantly challenge ourcompetitors by offering greater choice, flexible solutions andcompetitive prices.

A trusted and reliable partner

Whether you are new to the Software Escrow concept, orlooking for a simple transition from an existing supplier over toa more flexible, cost effective and improved service provider,SES can fulfil all requirements to suit your business andcontractual needs.

“The Leading Worldwide Supplier of Low Cost,High Value Software Escrow Solutions”


Software EscrowProvides the mechanism for end

users of critical software to legally access source code in the

event that their third party software owner is no longer available to continue with development and support.

Secure StorageSES provides leading off-site media & document secure storage services to a wide range of companies from private to public sectors

nationwide.

Software TestingSource code validation testing options are designed to provide independent

build documentation and evidence that the source code held under each Escrow

agreement is a useable and complete deposit.

Page | 3

What is Software Escrow?

Software Escrow protects your 3rd party licence agreementsand ensures the continuity of your business. An independentescrow agent is legally permitted to hold and validate a copy ofsoftware source code and all relevant documentation to asoftware application on behalf or the Software User or‘Licensee’. If the supplier(s) is not able to maintain the service,the code and supporting documentation can be released tothe Licensee so they or an alternative 3rd party can continue tomaintain the application.

Standard trigger events;

Liquidation, receivership or administration. Ceasing to trade. Breach of the maintenance agreement. Transfer of IPR.

For any organisation, the cost, time, disruption, security andeffort involved in procuring a new system can be huge.Furthermore the impact of downtime in some cases can becatastrophic. An Escrow solution can mitigate those risks andremove the need to replace a system to allow a Licensee tocontinue without disruption.


Protects your businessagainst 3rd party software suppliers

no longer being able to support/maintain.

Minimises the riskto your business and your

customers.

Independent specialists

hold and validate a copy of your licensed software.

Gives you controlof the uncontrollable and protects

the investments made, assuring business continuity.

Page | 4

Benefits of Software Escrow

Secure SaaS

Why use Secure SaaS?

An increasing number of businesses use 3rd party developedapplications that are delivered through a hosting partner orASP using a Software as a Service model. In many cases thesoftware developer is also the ASP or, is responsible for therelationship with the ASP.

Should the software developer or ASP suffer business failure,the end user typically has little control over the continuationof the service and just as importantly, will lose critical dataonce the service becomes unavailable.

Whilst there are well established benefits to be realisedthrough the use of a SaaS model there are also significant risks,for example:

Loss or compromise of corporate data.

Loss of control over corporate image through disruption ofcustomer services.

Exposure of corporate data to other users of the SaaSapplication.

Catastrophic failure of a critical business application.


Benefits of Secure SaaS

Ensures the continuity ofyour hosted softwareapplications

Unlimited deposits of datain addition to theapplication source coderuntime files or virtualimages.

Allows the option for aninterim release of data andruntime files only, shouldan immediate downtimeoccur.

Limits the need forexpensive alternative orduplicated hostingoptions.

Meets and enhancesbusiness continuity anddisaster recoveryprovision.

Provides the freedom tomove the application andthe live data to anenvironment of your choiceshould a ‘release event’occur.

Unlimited deposits of data in addition to the application source

code runtime files or virtual images.

Limits the need for expensive alternative or duplicated hosting

options.

Provides the freedom to move the application and the live data to an environment of your choice should

a ‘release event’ occur.

Ensures the continuity of your hosted software applications.

Page | 5

60% Reduction in Cost

“SES introduced a process that delivered a 60% saving on cost and reduction in administration

compared to our previous supplier.

Benefits of Secure SaaS

Allows the option for an interim release of data and runtime files

only, should an immediate downtime occur.

Meets and enhances business continuity and disaster recovery

provision.

SES offers an easy to use, online and secure source codedepositing system. This accredited system has beenestablished as a simple and efficient solution for customers todeposit from anywhere in the world at any time.

SES’s online depositing system is 256 SSL encrypted offeringabsolute piece of mind that the deposit is safe and secureduring its transfer with automatic delivery confirmation.

Secure storage of our customer’s software assets is ofparamount importance to us hence our storage facilities areCTC (Counter Terrorism Checked), SC (Special Clearance) andList X compliant and all premises have extensive securityfeatures which are externally audited & approved.

At SES, security and privacy are our primary focus. We offer asstandard Secure Online depositing via Certificate BasedSSL/TLS encryption for all of our Escrow Agreements. We alsooffer SFTP for clients that demand high frequency depositingof source code and data as this gives flexibility in how sourcecode and data is transferred to us. We monitor this connectionand maintain 100% control of the server it is hosted on thusguaranteeing your data remains secure at all times.


Premises have extensive security features which are externally

audited & approved.

All staff are security cleared & bound by non-disclosure

agreements.

ADRO Presidium Video Motion Detection linked to our dedicated

24/7 monitoring service.

PAC and Biometric access controls.

REDWALL intruder detection.

VESDA fire detection systems linked via ADSL to a dedicated 24 x 7 x 365

monitoring service.

All vehicle activity is tracked (using GPS) by the remote monitoring

service; staff have the capability of remotely immobilising the vehicle, locking/unlocking the door and ring

fencing areas.

Page | 6

Save Money

“SES listened carefully to our requirements and introduced a managed process that delivered a

40% saving on cost and 70% reduction in administration.”

Secure Depositing and Storage

Validation Services

SES provides a range of testing services from ensuring the sourcecode files are deposited to undertaking a full rebuild of the sourcecode into the working application. SES provide the most flexibletesting services available anywhere in the world.

Basic Validation

Standard Basic Validation Testing provides information relating tothe code and/or data comprising each deposit. The followingchecks are carried out as part of the basic validation test and aresummarised in a basic validation report.

The Validation Process

Deposit material is received or collected by SES

Where deposit material is provided using the SES secureonline encrypted depositing service, it is downloaded directlyto appropriate disk media.

Upon receipt, deposited material is mounted on a standalonepc and immediately scanned for viruses.

SES then implements the Basic validation procedure to ensurethat the material supplied can be de-compressed and read.

SES will then produce a Basic Validation Report.

SES lodges a request for collection by their List x compliantstorage partner.

All relevant details are then updated on the SES EscrowManagement System.


The following code validationoptions are available:

Install Validation (SaaS) – Install ofexecutable version and data install,including functionality testing toprove the deposit will function.

Remote Code Validation – Client sitebuild via remote connection tocapture video and audio..

Complete Code Validation – Clientand SES site build emulating a mockrelease event.

Scan Media for viruses.

Basic Validation Features

Check files can be retrieved.

Check all passwords are correct.

Check files can be decrypted.

Check files can be de-compressed.

Check code is apparent and on the Media.

Page | 7

Validation Services

Code Validation Options

The worst case scenario for a software user is of course thesudden demise of their third party software supplier. Byparticipating in a code validation exercise, SES are able to captureand collate the knowledge that would simply not be available to asoftware licensee and ensure that the code and supportingdocumentation held in Escrow could be used effectively tomaintain or redeploy the software quickly.

The following options are available to all SES clients:

Remote Code Validation.

Full Code Validation.

SES off-site Validation.

Complete Validation.

Independent Validation.

The portfolio of testing solutions offered by SES is based on manyyears experience in the software escrow arena. However, weappreciate that each client may have unique needs that require aunique code validation solution. We at SES have significantexperience in formulating bespoke validation solutions so, if therange of options available do not meet your specific needs, wewould be happy to discuss individual requirements directly.


The following code validationoptions are available:

Install Validation (SaaS) – Install ofexecutable version and data install,including functionality testing toprove the deposit will function.

Remote Code Validation – Client sitebuild via remote connection tocapture video and audio..

Complete Code Validation – Clientand SES site build emulating a mockrelease event.

Proves that the source code held under the Escrow agreement is complete,

accurate, and contains all the source code and build files.

Secure transportation of the validated source code by an SES

consultant.

Assurance that even the most complex applications can be rebuilt based on the

SES independent validation report.

Peace of mind for the user that all necessary build documentation is held in

Escrow for the purpose of a rapid deployment of the software in the event

of a release of source code.

Added protection against the loss of key development staff involved in

developing/building the application.

Increased DR capability as the Escrow agreement with the source code

validation option provides a greater degree of certainty that the code held in

Escrow can be used effectively.

Independent report compiled and deposited in Escrow along with the

complete code deposit.

Random functionality testing carried out on the built application at the end of the

validation exercise to confirm the application functions correctly.

Page | 8

Specialist, reliable and cost effective testing

“Utilising the comprehensive escrow services available by SES will not only secure our software in escrow but

ensure it is tested and useable in the event we ever need to call on it.”

Why SES?

14 years experience, proven track record


Our Accreditations and Standards

14+Years

99%

2,000

30%

£0

ISO 9001:2008 UKAS registered certification.

ISO 27001:2013 UKAS certification.

Cyber Essentials certification.

Secure SSL 256 bit encrypted online depositing facilities.

£5,000,000 liability insurance protection (Hiscox professional

insurance services).

Investors in People

99% customer satisfaction rate

2,000 clients in over 40 countries

30% more cost effective than our equallyaccredited competitors

Free transfer of your existing Escrowportfolio from your current supplier toSES

The only Software Escrow provider tooffer a Master Agreement

Page | 9

Manchester Office

Landmark House,

Station Road,

Cheadle Hulme,

Cheshire,

SK8 7BS,

United Kingdom

Contact Information

Phone: +44 (0) 161 488 1400

Email: [email protected]

Contact Details


ses - briefing document 2017

Documents