Recession forces software escrow releases to jump by 150%
Save the code, save your world
Agentless Backup is Not a Myth
A software escrow provider has reported a 150% increase in source code releases in 2009, compared with 2008. NCC Group said businesses’ relationships with software suppliers have been strained by recessionary pressures.
Software escrow is the holding by a third party of the crucial, and secret, source code that underpins a piece of software. That is 'released' to a customer if the supplier goes bust or fails to meet pre-agreed support or development obligations.
The release of the source code allows the customer to carry on using the software with support from third party developers when the supplier has gone out of business or failed to meet its contractual obligations.
NCC Group has said that the number of 'releases' of source code in 2009 is up 150% from the number in 2008. It said the increase was a result of the recession that has swept the UK and much of the world.
"As with so many supplier-customer agreements in 2009, a number of software providers have struggled to stave off insolvency and have seen client relationships tested as a result," said Jon Leigh, operational director for escrow for NCC. "The devastating effects of the downturn are well documented, and for businesses suffering during the recession, losing essential software could be the final nail in the coffin. The potential for software companies to become bankrupt is very real."
NCC would not disclose the actual number of releases involved, but Leigh told OUT-LAW Radio in 2008 that it released in "no more than about 50 a year" of the 8,000 escrow agreements it manages. If the figure for 2008 was 50 then last year NCC would have made around 125 releases.
Leigh told OUT-LAW Radio that there are four release events in a standard NCC contract. "One of which is going out of business, one of which is ceasing to trade which is pretty much the same thing but they decided to do so," he said. "Another one is failure to maintain, which means they have failed to carry out contractual maintenance obligations."
"The fourth one is assignment. [This is when] the software provider actually assigns the IPR [intellectual property rights] in the software to another company. That other company also needs to take over the obligations the escrow agreement and if they fail to do so within a certain timeframe that also constitutes a release event."
You can hear a OUT-LAW Radio report on 'How software escrow could help you keep software suppliers in line' here.
Copyright © 2009, OUT-LAW.com
OUT-LAW.COM is part of international law firm Pinsent Masons.
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
COMMENTS
Dubious value?
If a software vendor were to go bust and a client company was given their source, they could hire a consultant(s) to read/document/re-code the applications internals if it was absolutely necessary.
As for why the company wouldn't make their own app, it could be a staffing issue. I work for a small company as a network administrator, but I'm a coder by passion & education. I could easily understand the code of some of our LOB apps, but there's no way I would have the time to build anything to that scale whilst I have all my other responsibilities.
Dubious value
First of all, open source doesn't work for large scale custom development because there's nothing out there to satisfy the requirements. Secondly, the cost model for the developers often requires that they will try to find more customers to make back their money after the first sale. Open-sourcing the code removes that revenue stream.
You have to ask how much value is in the source code alone though. Any system of reasonable complexity would require more than just source code, unless they have been very diligent in code comments (which most developers are not). Also, if the company had a staff capable of understanding the source code, why didn't they just build it themselves?

IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Enabling efficient data center monitoring