Websites11 min read

Source code escrow and reversibility clauses in custom software contracts (2026)

Mohamed Bah·Fondateur, Kolonell
November 3, 2026
Share:
Source code escrow and reversibility clauses in custom software contracts (2026)

Source code escrow and reversibility clauses in custom software contracts (2026)

Websites

The verdict in three sentences

Under US law, software built by an independent contractor belongs to the contractor unless there is a written assignment, because most software does not qualify as "work made for hire" under the Copyright Act; UK law reaches the same result under the CDPA 1988. For an app at 65,000 USD (about 60,000 EUR), securing the assignment, Git access and an exit plan of 3,250 to 6,500 USD costs little next to a full rewrite. Source code escrow, at 600 to 2,000 USD a year, completes the setup when the vendor will not hand over code continuously.

The clauses that actually protect a small business

Many founders assume that paying the invoice makes them owners. It does not. Without a clause you get at best an implied licence to use, with no right to modify the code or hand it to another developer.

ClauseWhat it must stateRisk if missingTypical cost or impact
IP assignmentPresent assignment of all copyright, worldwide, with a backup work-for-hire clauseCannot modify or sell the appUsually included, sometimes +5 to 15%
Source code deliveryCommented code, build scripts, dependencies, at each milestoneCode unusable by a third partyWithin fixed price
Git repository accessRepo owned by the client (GitHub, GitLab) with admin rightsVendor holds the only history0 to 21 USD a month
DocumentationArchitecture, setup, API, deployment runbooks2 to 3 months of reverse engineering3 to 5% of budget
Exit (transition) planHandover support days, knowledge transfer, data exportLock-in when changing vendor5 to 10% of budget
Third-party and open sourceLicence list, no unapproved copyleftForced disclosure of your code (GPL)Audit 900 to 2,200 USD
Late delivery damagesDaily amount, cap, milestones coveredNo leverage if the project slipsOften 0.1% of price per day, cap 5 to 10%

The assignment must use present-tense wording ("hereby assigns") rather than a promise to assign later, which US courts have treated as weaker.

Escrow, shared repo or continuous delivery: which option

OptionHow it worksAnnual cost 2026Fits when
Client-owned Git repoVendor pushes code to your repo continuously0 to 250 USDAlways, it is the standard to require
Two-party escrow (NCC Group, EscrowTech, Codekeeper)Dated code deposit released on vendor failure600 to 2,000 USDVendor keeps ownership (licence or SaaS)
Three-party escrow with verificationDeposit updated each release, build verified by agent2,000 to 5,000 USDCritical app, single vendor
Milestone deliveryCode and docs archive handed over each phaseIncludedFixed-price project in 3 to 5 milestones
Reversibility auditA third party checks another developer can take over1,600 to 4,500 USD one-offBefore final acceptance

Escrow only works if release conditions are clear: bankruptcy, ceasing business, or maintenance failure for more than 30 days.

The exit plan in practice

A good plan sets out 3 costed elements: handover support (often 10 to 20 person-days), data export in an open format (CSV, JSON, SQL dump) and transfer of hosting, domain and third-party accounts (app stores, payment APIs, transactional email).

Mini case study

Need a professional website?

Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.

Prefer a call back?

Leave your WhatsApp number and a Kolonell expert will get back to you within 1 business day. Free, no strings attached.

You are :

Thomas, managing director of a medical supplies distributor in Manchester, commissions an order-taking app for his 25 sales reps at 65,000 USD (about 51,000 GBP). His first project ended badly: the vendor refused to release the code and the takeover cost 41,000 USD in partial rewrite.

This time he negotiates:

  • Full IP assignment, at no extra cost.
  • GitLab repo in the company's name: 0 USD.
  • Exit plan of 15 person-days at 600 USD: 9,000 USD, reserved and billed only on transfer.
  • Technical documentation: 2,600 USD included.
  • Delay damages: 65 USD per day, capped at 6,500 USD.

Certain cost of protection: about 2,600 USD, 4% of budget, against 41,000 USD lost the first time.

FAQ

Does paying the invoice transfer ownership? No. In the US, copyright transfer requires a signed writing (17 U.S.C. 204). In the UK, an assignment must be in writing and signed by the assignor. Without it the developer keeps the rights.

What if the vendor's employees wrote the code? Employee work belongs to the employer in both countries, so the vendor must then assign it to you. Watch for freelance subcontractors, who must also assign their rights.

Is escrow useful if I already have the Git repo? Rarely. It matters when you use software the vendor still owns, for 600 to 2,000 USD a year.

Are late delivery damages enforceable? In the UK and most US states, yes, if they are a genuine pre-estimate of loss or protect a legitimate interest, not a penalty. A common level is 0.1% of price per day, capped at 5 to 10%.

Do open source components cause problems? Only if their licence requires you to publish your code, like some GPL versions. Require a dependency and licence list at each delivery.

Let's scope your project. Send us your specification: we will cost your app with full IP assignment, a client-owned Git repo and an exit plan built into the quote. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.

Tags:#source code ownership#software development contract#reversibility#source code escrow#custom software#SME guide 2026
Share:

Mohamed Bah

Fondateur, Kolonell

Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.