Escrow: what it is, how it works and which tools it takes

Escrow is an arrangement in which a neutral third party holds money, assets or documents until predefined contractual conditions are met, then releases them to the beneficiary or returns them to the depositor. The mechanism solves a sequencing problem: neither side has to perform first, because the first to receive anything is a party with no stake in the outcome. The word comes from the Old French escroe, the scroll of parchment handed to a third party who kept it until the deed took effect, and that logic of intermediate custody survives intact. Commercial practice calls the same structure a conditional deposit, a stakeholding arrangement or a security deposit, depending on the jurisdiction. An escrow has two halves: custody of economic value and custody of documentation. The first is an account problem. The second is a proof problem, and one tool does not solve both.

What sits in escrow has changed. The file that used to live in a safe now travels through a data room, and release conditions turn on what it contains: accounts, valuations, warranties, licence registers, code. A traditional custodian can attest that it received a package on a given day, but rarely that the document handed back years later is identical to the one deposited then, or who reached it in the interval.

An escrow holds only if both halves are demonstrable. Custody of money stays with banks, licensed escrow companies and trustees. Custody of documentation needs tools that seal every file at the moment of deposit and certify every access that follows.

What escrow is

Escrow is the contract by which two parties to a transaction entrust a third party with money, assets or documents, making delivery conditional on events agreed in advance. The third party is not an arbitrator and does not decide the merits: it follows instructions. Both sides accept losing control of the asset because neither of them can take it back alone.

Escrow, conditional deposit, security deposit: the terminology

Everyday usage blurs two things that stay distinct in drafting. The escrow agreement is the contract binding depositor, beneficiary and agent. The escrow account is where a sum actually sits. Anyone searching for the meaning of escrow account wants the second. Common law instruments call the custodian an escrow agent, an escrow holder or, in older drafting, a stakeholder. Civil law systems describe the same arrangement as a conditional or fiduciary deposit, since no named contract type carries the word. A security deposit is narrower: money left with a counterparty, usually a landlord, against damage or default, with nobody neutral in the middle. Property lawyers also use "in escrow" as a state, meaning a deed signed but not yet operative.

The legal nature of escrow across jurisdictions

In common law systems escrow rests on the doctrine of conditional delivery: a deed handed to a third party is delivered in escrow, takes effect only when the stated condition occurs, and on occurrence its effect is often treated as relating back to the date of deposit. The agent holds under a limited fiduciary duty, owed to both parties at once and bounded by the written instructions, which is why agents refuse to interpret anything the agreement did not spell out. Civil law systems reach the same result through freedom of contract, treating escrow as an innominate contract linked to the main transaction but autonomous from it, with a security function. The practical consequence is identical in both families: if the main contract falls away, the escrow survives long enough to govern the return of what was deposited, so release conditions have to be drafted for the failure scenario as carefully as for the success one.

Escrow and comparable instruments

Escrow resembles several established instruments without matching any of them, and the differences come down to who holds the asset, with what mandate, and how much discretion that holder has.

The letter of credit is the closest cousin: the bank pays against documents that conform on their face, without investigating whether the goods ever shipped. An escrow agent works the same way. Both trade substantive certainty for procedural certainty, and both fail in the same place, ambiguous wording about what counts as a conforming document.

When escrow is used

Escrow is used whenever performance cannot be simultaneous and one side stays exposed to the other for a meaningful interval. The longer the wait, and the more the release depends on documents rather than on a single payment event, the more natural a deposit with a third party becomes.

M&A and share purchase transactions

In private company acquisitions escrow is standard rather than exceptional. The annual deal terms study published by SRS Acquiom, covering more than 2,200 private-target acquisitions closed between 2019 and 2024, reports that over three quarters of deals include a separate escrow dedicated to the purchase price adjustment, with a median size of roughly 1% of transaction value and an average adjustment actually owed to buyers of about 0.9%. Working capital adjustment mechanisms appear in more than 90% of private-target deals, and close to three in ten deals carry additional escrows ring-fenced for specific matters such as tax or pending litigation. Alongside these sits the indemnity escrow, which withholds a slice of the consideration against breaches of the seller's representations, typically for twelve to twenty-four months after closing. Each of those escrows releases against a document, not against a judgment.

Real estate, asset transfers and intellectual property

In real estate the deposit covers the gap between signing and registration, the window in which an undisclosed charge can surface. In asset transfers it holds back consideration against liabilities found in due diligence but not yet quantified. Intellectual property deals shift the centre of gravity, because there the deposited material is documentary before it is monetary: evidence of first creation, catalogues of works, licence registers. The value of that deposit is the exact identity of what went in, which is why proof of creation date needs different tools from a bank balance.

Cross-border contracts, public procurement and software licensing

Across borders escrow compensates for uncertainty about forum and enforcement, since a custodian in a neutral jurisdiction beats any enforcement action against a foreign counterparty on speed. In public procurement and public private partnerships, deposits secure retentions, provisional acceptance and defect liability periods, with release turning on a certificate issued by an engineer or an inspector. In software licensing the deposited object becomes the code, plus whatever a licensee needs to keep the application alive if the vendor disappears.

Online transactions and marketplaces

Structured marketplaces hold payment until delivery is confirmed. That is escrow run by the platform, on standard terms nobody negotiates, with a custodian that doubles as the commercial intermediary. It works for modest amounts and automated checks, much less well when release depends on judging quality, and not at all outside the platform's own rails, where most escrow-related fraud happens.

The parties and who acts as escrow agent

An escrow involves the depositor, who hands over the money or the asset, the beneficiary, who receives it if the conditions occur, and the escrow agent, who holds and executes. The first two are already parties to the main contract. The third joins only the deposit agreement, and its mandate lives or dies by how that agreement reads.

Depositor, beneficiary and agent: roles and duties

The depositor keeps title to what it deposits but loses control of it, and that loss of control is the entire guarantee. The beneficiary acquires no immediate right, only a conditional expectancy. The agent owes duties of safekeeping and execution, not adjudication: it checks that the documents named in the instructions have been presented, not that the underlying facts are true. Confusing those two planes causes most of the conflict, because one party expects the custodian to establish something while the custodian is matching paperwork against a list. A regulated agent will also carry customer due diligence obligations that add time to opening the account, better built into the timetable than discovered at signing.

Banks, escrow companies, law firms and trustees

There is no single global profession of escrow agent. The role is performed by banks, by specialised escrow companies, by law firms holding funds in client accounts, and by professional trustees. What varies most is regulation. In several jurisdictions, including a number of United States states, escrow carried on as a business requires a licence, with bonding, minimum capital and audit obligations attached, and the supervising authority may sit in banking or in insurance depending on the state. Elsewhere no dedicated licence exists and protection arrives indirectly: from banking supervision when the holder is a bank, from client account rules when it is a law firm, from trust law when it is a trustee. The useful question before choosing is not whether the custodian is trustworthy but what happens to the deposit if the custodian itself goes under. Segregation of client money answers that. A reassuring brand does not.

What escrow actually protects against

Escrow makes mutual trust irrelevant. It replaces a judgement about the counterparty with a mechanism that produces the same outcome regardless of good faith: whoever performs receives, whoever does not perform does not, and neither side controls the switch. In practice the saving shows up first in negotiation time.

Non-performance and the simultaneity problem

In a share sale the seller will not transfer before payment, and the buyer will not pay before receiving unencumbered shares. A deposit with a third party collapses two sequential performances into one controlled event and leaves a pot available for claims that surface months after closing. The same structure covers construction retentions, earn-outs and staged payments in supply contracts, wherever the calendar forces someone to go first.

Disputes over what was deposited, in what state and when

Escrow neutralises two risks, not one. The first is non-performance on the economic side. The second is a dispute about what was deposited, in what condition and at what moment, and this is the one contracts routinely underestimate. When a beneficiary calls on the deposit, the argument turns on which version of a document was in custody and who had access to it. United States federal practice frames the problem precisely: under Rule 901 of the Federal Rules of Evidence a party offering an electronic record must produce evidence sufficient to support a finding that the item is what it claims to be, while Rules 902(13) and 902(14) let records generated by an electronic process, or data copies identified by hash value, be self-authenticating when accompanied by a certification. ISO/IEC 27037, the international guidance on identification, collection, acquisition and preservation of digital evidence, describes what makes that certification possible: verifiable integrity and documented continuity of custody.

How escrow works, from agreement to release

Escrow works as a closed sequence: the parties fix the conditions before anything is deposited, the deposit is made, the agent checks documents rather than facts, and then releases or returns. Every margin of discretion granted to the agent at the release stage removes certainty from the mechanism, and should be granted knowingly.

What an escrow agreement must contain

A complete escrow agreement identifies the parties and the exact subject of the deposit, describes release conditions in terms verifiable from documents, and governs what happens when things go wrong. Anyone looking for a template is really looking for this list, because this is where an agreement holds or fails. It needs the agent's express acceptance of the mandate; an itemised description of the sums, assets or documents, uniquely identified; release conditions framed as ascertainable events rather than evaluations; the documentation the beneficiary must present; the deadline within which the agent must act; the treatment of conflicting instructions; the allocation of accrued interest; fees and who bears them; a longstop date; governing law and forum. Elastic phrases such as "material breach" or "reasonable time" are the leading cause of interpretive litigation, and they are almost always inherited from a precedent nobody reread.

The escrow clause in the main contract

The escrow clause in the main contract does not replace the escrow agreement. It compels it. The clause obliges the parties to establish the deposit within a stated period, names the agent or the method for appointing one, and makes failure to do so a breach in its own right. Without that hook, a party already secured another way can stall the deposit and use the delay as leverage during the very period the escrow was meant to cover.

Verification of conditions, release or return

The mechanics run through steps worth keeping separate, in drafting as well as in operation:

1. The parties negotiate the release conditions and record them in the main contract.
2. The escrow agreement is signed with the agent, who accepts the mandate and the instructions.
3. The depositor transfers the funds or delivers the documents into custody.
4. On the triggering event, the interested party presents the specified documentation.
5. The agent checks it against the instructions received, without entering the merits.
6. The agent releases to the beneficiary, or returns to the depositor if the conditions have not occurred in time.

Return to the depositor is the ordinary outcome of a condition that never occurs, and it deserves the same drafting care as the positive path. Faced with conflicting instructions the agent does not choose. It suspends, notifies both sides, and where the procedure allows, deposits the disputed funds with a court. United States practice has a name for that remedy: interpleader under Rule 22 of the Federal Rules of Civil Procedure, which lets a stakeholder exposed to double liability bring the rival claimants into one proceeding.

The families of escrow: money, documents, source code

Escrow splits into families defined by what is deposited: money, documents and information, source code and data. Money escrow is the most common and coincides in practice with the escrow account, since the sum is fungible and the only question is whether the release event occurred. Document escrow holds originals, expert reports, evidence of priority, contractual correspondence, and here the subject is not fungible: the value of the deposit is the exact identity of what went in. Source code and data escrow is the only family with a mature market of specialist providers, and the only one where the deposit is periodically verified for completeness. The distinction changes the profile of the ideal custodian. For money, segregation and supervision. For documents, the ability to produce proof.

Software escrow and source code escrow

Software escrow is the agreement by which a developer deposits source code, technical documentation and credentials with a third party so that a licensee can keep an application running if the vendor fails. Source code escrow is its classic form, and providers such as Escode, part of NCC Group, built an industry around verifying that what was deposited actually compiles and runs. SaaS escrow is the evolution: when the application never ran on the customer's premises, depositing code alone achieves nothing, so the deposit extends to configurations, environment specifications and redeployment instructions for cloud infrastructure. Data escrow covers the customer's own data hosted by the vendor. Typical release conditions are vendor insolvency, discontinuation of support, acquisition by a competitor of the licensee, and repeated failure to meet service levels. Every one of those triggers is documentary, which is why they work.

The tools of escrow: where the account ends and certified custody of documents begins

The tools of escrow divide along the nature of what is held. Money needs an account and segregation from the custodian's own estate. Documents need a seal and a certified record of access. Two infrastructures, two regulatory frames, and a single transaction usually needs both.

Custody of money: escrow accounts and specialised providers

Custody of money is a financial layer that requires supervised entities, and TrueScreen neither covers it nor intends to. A blocked bank account freezes the sum and releases it when the stated conditions occur. A licensed escrow company adds segregation of client funds and, in regulated markets, a bond and a regulator-imposed audit trail. Trustees can hold assets that are not liquid, including shares and registered goods, which is the usual answer when the deposit is not cash.

What a digital custodian must be able to prove

A custodian of documents in escrow has to prove that the file it holds is identical to the one it received, at what moment that file entered custody, who accessed it and when, and that the access record itself cannot be rewritten. These are testable properties, not statements of intent, and the difference only becomes visible when someone challenges the deposit. Identity is satisfied by a cryptographic hash computed at deposit and recomputable at any later date. Timing comes from a qualified electronic time stamp under Regulation (EU) 910/2014, the eIDAS Regulation, whose Article 41 gives qualified electronic time stamps a presumption of the accuracy of the date and time they indicate and of the integrity of the data they are bound to. Access history requires a log that is itself certified, because a log a system administrator can edit proves nothing against the party running the system.

TrueScreen is the Data Authenticity Platform that seals every file at the moment of deposit with a cryptographic hash and a qualified electronic time stamp, and certifies every subsequent access in a record that cannot be rewritten. It does not hold money, does not take the role of escrow agent, and does not replace a bank, an escrow company or a law firm. It works alongside them on the layer they do not cover, which is documentary proof. The scope is deliberately narrow, and it is exactly where digital deposits break: not in storing the file, which has been a solved problem for decades, but in demonstrating its identity and its history years later, in front of a judge or an arbitral tribunal, with the burden falling on whoever was holding it.

Sealing at source and certified chain of custody

Sealing at source moves certification from storage to acquisition. Items enter the case folder already certified, arriving from an app, a browser, an extension or the client's own systems, with no editable copy in between. The difference is between certifying a document found in an archive and certifying it the instant it is produced. The logic behind a digital chain of custody applies: the history of an item has to be as verifiable as the item itself. From that point on, every upload, view, download, share and permission change is certified rather than merely logged, which lets a custodian show years later that the document produced is identical to the one deposited and that nobody reached it outside the agreed conditions. Items stay files certified at source, each carrying who acquired it and when.

Roles, permissions and granting access to third parties

Granting a third party access to the case folder is where a documentary escrow is most exposed, since that is the moment the perimeter widens beyond the original parties. Access runs through distinct roles: collect, read, manage, close. Invitations go out by email, each person holds one role at a time, and access is granted case by case. What someone cannot do, they cannot see, and external parties work in spaces kept separate from internal teams. Law firms and in-house teams use certified evidence management to open a folder to outside counsel with every opening traced and certified. Inside a certified data room, granting view access and counsel's later opening of the file are two separate lines of the record, each with a time, an attribution and a seal.

Evidentiary reporting and integrity verification

Reporting turns a deposit into something showable to a third party with no access to the system. Every certified item produces a technical report in PDF and JSON with a unique identifier, and integrity verification compares the file produced against the seal applied at deposit, with no middle ground between match and mismatch. Search runs across title, person, certification type, date and folder, and reaches into summaries and transcripts, so a sentence spoken in a recorded call retrieves the item containing it. Every result opens the sealed original. The structure follows the requirements of the forensic audit trail an archive needs to survive cross-examination, and what courts expect of chain of custody in proceedings.

Applications for law firms, IP counsel and in-house legal teams

A law firm acting as custodian has to attest what it received, not merely that it received something, and the seal lets it answer years later on the exact version held. Counsel running an indemnity escrow works on the guarantee file and on the digital evidence law firms will have to produce to support a claim, or to resist one. IP counsel fixes the priority of a design or a dataset and, when needed, gives the other side's adviser read-only access without letting copies leave the traced perimeter, the working core of intellectual property protection. In-house teams run several transactions at once, so archives, people and procedures from different divisions stay separate on one account, a native function of the platform. Smaller one-off deposits need only the ability to certify files and give a document a trusted date.

What drives the cost of an escrow

The cost of an escrow depends on the amount held, the length of the deposit and how much verification the agent has to perform. Market models are a percentage fee on the deposited amount, a fixed fee per transaction, or a combination with a minimum. Ask for drafting fees, account maintenance charges and per-instruction release fees separately, because bundling them hides the variable that actually moves. That variable is discretion: automatic release against a documentary event is cheap, while a deposit where the agent must weigh the merits of a claim costs more and takes longer. Documentary escrow is priced differently, since there is no principal to take a percentage of. What counts there is the volume of the file, how many parties are authorised, and how long it has to be kept.

In transactions where the file weighs as much as the price, certified custody of documents sits beside the blocked account rather than replacing it. Two parallel deposits, two custodians, two questions: where the money is, and what exactly was deposited.

Feature

Certified Evidence Management

With TrueScreen every document in the file stays sealed and every access is certified, with roles and permissions for external parties.

Discover more →

Common mistakes to check before signing

The failures that wreck an escrow happen in drafting, not in execution. The most frequent is writing release conditions in evaluative rather than documentary language, which hands the agent a decision it has no mandate to make and no competence to defend. Close behind come a thin treatment of the negative scenario, when return to the depositor is the ordinary outcome of most indemnity deposits; the missing longstop date, which leaves the agent holding assets indefinitely; silence on accrued interest, which becomes a dispute once rates move; and no instruction on what the agent should do faced with contradictory demands.

On the documentary side, the recurring mistake is depositing a file without fixing its identity. With no cryptographic hash and no trusted point in time, the deposit proves that something was handed over, not what. Two years later, in a warranty claim, that gap cannot be repaired.

Informal escrow deserves a separate warning. Arrangements offered through messaging apps, forums and social channels, most often around digital currency trades, have no identifiable custodian, no written agreement and no way to verify what is held. The pattern is a known fraud vector, and it works because it borrows the vocabulary of a legitimate mechanism. An escrow with nobody accountable and nothing in writing is not an escrow. It is an advance payment to a stranger.