Azure Escrow

SaaS Escrow for Microsoft Azure Environments

Automated Git Deposits

Automated Git Deposits

Escrow Solutions for Microsoft Azure Hosted Applications

Protecting Azure Applications And Data 24/7

Escrow London is leading the way in creating innovative Azure Escrow as a Service (EaaS) solutions that provide actual, ‘real-time’ business continuity in the event of a release. Escrow London maintains a team of Azure certified solution architects who have intimate knowledge of Microsft Azure services and are experts in creating replicated Azure environments for recovery. The Replicated SaaS Continuity solutions provide the Beneficiary with the assurance that in the event of a release, Escrow London will be on hand to keep the lights on and provide a continuity of service for a period of up to 90 days.

The Azure Escrow solution for an application hosted within Microsoft Azure would typically include all or some of the following components:

azure-code

Source Code Deposits

Source code of the SaaS application may be deposited manually or automatically directly from the SaaS vendor’s Git repository (GitHub, Bitbucket, GitLab, Azure DevOps and more).

Azure-billing

Vendor Financial Monitoring

Vendor Financial Monitoring will provide the Beneficiary with a pre-emptive alert if there appears to be any payment irregularities within Microsoft Azure. This would allow for Escrow London to step in and make payments to Microsoft.

azure_arm2

Azure Resource Manager

An Azure Resource Manager or Terraform template deposited in escrow allows for the rapid deployment of an Azure environment. Azure Resource Manager and Terraform allows the SaaS vendor to model their entire infrastructure in a scripted text file.

virtual machine

Environment Replication

Escrow London provides the option to maintain a dedicated Microsoft Azure account that contains a working replicated environment of the SaaS vendor. This would provide the Beneficiary with an immediate continuity solution in the event of a “lights out” scenario.

database icon

Database Replication

For SaaS vendors using Azure databases, Escrow London are able to provision a dedicated Azure account that contains the replicated database instances for each Beneficiary. Vendors also have the opportunity to deposit database backups or snapshots to Escrow London on a scheduled basis.

azure lock

Access Credentials

Under the SaaS Access Continuity service, the SaaS vendor is required to deposit and update the access credentials on a quarterly basis or more frequently if required. These credentials will allow full access to the Azure console and the production environment.

image of Azure secure environment

Example diagram of a Replicated SaaS Continuity solution hosted in Microsoft Azure

Verification for Microsoft Azure Hosted SaaS Services

Escrow London offers a range of Verification services to provide comfort to the Beneficiary of the usability of the escrow in the event of a release. Our Verification services for applications hosted within Microsoft Azure include:

  • Comprehensive Build Verification – Full test of the deposited source code to ensure that it can be re-built into a working application. One of our experienced developers oversees the build process at the developers site to ensure that all the files and documentation required to compile the system are included within the escrow deposit.
  • SaaS Verification – This test is performed to simulate a release condition of a SaaS environment. During this process our technical consultant documents the process to deploy the application and database into Azure. If possible a deposit of a Terraform or Azure Resource Manager template and other deployment scripts will be included within the scope of this verification.
  • SaaS Release Verification – This test is performed to simulate a release condition of a SaaS environment. This process is to ensure that the application is functioning, and that the data is accessible by the end user.
  • Access Credentials Verification – Full test conducted on a quarterly basis to ensure that the Microsoft Azure accounts are accessible using the deposited access credentials. A report will be produced following each test. Both parties will be alerted should Escrow London be unable to access the individual instances with the supplied credentials.

What happens in the event of a release?

In the event of a release situation, there are several options available to the beneficiary to ensure business continuity:

  • Escrow London will transfer the Azure account and access credentials over to the beneficiary.
  • The Azure VM’s under the management of Escrow London will be placed into a live state and logon access credentials will be provided to the beneficiary. This option allows the beneficiary to continue to work on the platform for an interim period until a replacement solution is found.
  • Access credentials to the production environment are transferred over to the beneficiary to continue to support the SaaS hosted system.
dashboard

SaaS Financial Alerts

In addition to the SaaS Escrow service, we offer a Financial Alert Monitoring service to ensure that the SaaS vendor is up to date with their vendor payments to Microsoft. Escrow London will be assigned various billing permissions allowing Escrow London to step in and make payments on behalf of the Beneficiary. More information can be found here

Azure Resource Manager

Azure Resource Manager templates deposited in escrow can greatly assist in the speed of recovery in the event of a release situation. To learn more about Azure Resource Manager watch the video.

Looking to implement a secure software escrow solution?

Leading Companies Trust Escrow London

YES! I want a free quote

If you have any questions about our services or would like to receive a free quote, simply fill in your details and we will be in touch with you.