SOURCE CODE ESCROW AGREEMENT

Commonwealth of Virginia

Governed by the Laws of the Commonwealth of Virginia

AGREEMENT NUMBER: [________________________________]

EFFECTIVE DATE: [__/__/____]

TABLE OF CONTENTS

1. Parties and Recitals
2. Definitions
3. Deposit Materials
4. Deposit and Update Procedures
5. Verification and Testing
6. Release Conditions
7. Release Procedures
8. Post-Release License Rights
9. Fees and Payment
10. Confidentiality and Security
11. Trade Secret Protections
12. Intellectual Property
13. Warranties and Disclaimers
14. Indemnification
15. Limitation of Liability
16. Term and Termination
17. Governing Law and Dispute Resolution
18. Virginia-Specific Provisions
19. Miscellaneous
20. Signatures
21. Schedules

1. PARTIES AND RECITALS

1.1 Parties. This Source Code Escrow Agreement (this "Agreement") is entered into as of [__/__/____] (the "Effective Date") by and among:

(a) Licensor:

Name: [________________________________]
Address: [________________________________]
City/County, State, ZIP: [________________________________], Virginia [____]
Contact Person: [________________________________]
Email: [________________________________]
Phone: [________________________________]

(b) Beneficiary:

Name: [________________________________]
Address: [________________________________]
City/County, State, ZIP: [________________________________]
Contact Person: [________________________________]
Email: [________________________________]
Phone: [________________________________]

(c) Escrow Agent:

Name: [________________________________]
Address: [________________________________]
City/County, State, ZIP: [________________________________]
Contact Person: [________________________________]
Email: [________________________________]
Phone: [________________________________]

Each may be referred to as a "Party" and collectively as the "Parties."

1.2 Recitals.

WHEREAS, Licensor is the owner and developer of certain proprietary software known as [________________________________] (the "Software") and possesses all rights, title, and interest in the source code and related materials;

WHEREAS, Beneficiary has entered into a separate software license, subscription, or SaaS agreement with Licensor dated [__/__/____] (the "Underlying Agreement");

WHEREAS, Beneficiary desires to ensure continuity of access to the Software in the event Licensor is unable or unwilling to continue support, maintenance, or availability;

WHEREAS, the Parties desire to establish an escrow arrangement for the conditional release of source code and related materials;

WHEREAS, the Escrow Agent has agreed to serve as neutral custodian;

WHEREAS, the Parties acknowledge the Commonwealth of Virginia's comprehensive data protection framework, including the Virginia Consumer Data Protection Act, and intend this Agreement to comply therewith;

NOW, THEREFORE, in consideration of the mutual covenants herein, the Parties agree as follows:

2. DEFINITIONS

2.1 "Affiliate" means any entity controlling, controlled by, or under common control with a Party, where "control" means ownership of more than fifty percent (50%) of voting securities.

2.2 "Build Environment" means the complete specifications for compiling, building, and deploying the Software from the Deposit Materials.

2.3 "Business Day" means any day other than Saturday, Sunday, or days banking institutions in the Commonwealth of Virginia are authorized to be closed.

2.4 "Confidential Information" means information disclosed in connection with this Agreement designated as confidential, or that by its nature should be understood as confidential, including the Deposit Materials and agreement terms.

2.5 "Consumer" has the meaning set forth in Va. Code Ann. § 59.1-575, being a natural person who is a resident of the Commonwealth acting only in an individual or household context.

2.6 "Controller" has the meaning set forth in Va. Code Ann. § 59.1-575, being the natural or legal person that determines the purpose and means of processing personal data.

2.7 "Deposit Materials" means all source code, object code, build scripts, configuration files, database schemas, API documentation, technical documentation, user manuals, third-party licenses, dependency lists, Build Environment specifications, encryption keys, credentials, test suites, test data, and all other materials deposited by Licensor pursuant to this Agreement and Schedule B.

2.8 "Force Majeure Event" means events beyond a Party's reasonable control, including acts of God, natural disasters, epidemics, pandemics, war, terrorism, government actions, fire, flood, power failures, or cyberattacks.

2.9 "Insolvency Event" means: (a) voluntary bankruptcy petition; (b) assignment for creditors; (c) appointment of receiver or trustee; (d) involuntary bankruptcy not dismissed in sixty (60) days; or (e) written admission of inability to pay debts.

2.10 "Intellectual Property Rights" means all patents, copyrights, trademarks, trade secrets, and other intellectual property rights.

2.11 "Personal Data" has the meaning set forth in Va. Code Ann. § 59.1-575, being any information that is linked or reasonably linkable to an identified or identifiable natural person, but does not include de-identified data or publicly available information.

2.12 "Personal Information" has the meaning set forth in Va. Code Ann. § 18.2-186.6, being an individual's first name or first initial and last name in combination with unencrypted or unredacted data elements including Social Security number, driver's license number, or financial account number.

2.13 "Processor" has the meaning set forth in Va. Code Ann. § 59.1-575, being a natural or legal person that processes personal data on behalf of a controller.

2.14 "Release Conditions" means the events in Section 6.

2.15 "Trade Secret" has the meaning set forth in Va. Code Ann. § 59.1-336, being information that derives independent economic value from not being generally known to and not being readily ascertainable by proper means by other persons who can obtain economic value from its disclosure or use, and is the subject of efforts that are reasonable under the circumstances to maintain its secrecy.

2.16 "Underlying Agreement" has the meaning in Recital 1.2.

2.17 "VCDPA" means the Virginia Consumer Data Protection Act, Va. Code Ann. §§ 59.1-575 to 59.1-585, as amended.

3. DEPOSIT MATERIALS

3.1 Scope. Licensor shall deposit with the Escrow Agent complete and accurate copies of:

(a) All human-readable source code, including all modules, components, libraries, and subroutines;

(b) All build scripts, makefiles, configuration files, and compilation instructions;

(c) Complete Build Environment specifications;

(d) All third-party components and dependencies with applicable licenses;

(e) All database schemas, data models, migration scripts, and seed data;

(f) All API specifications, interface documentation, and integration documentation;

(g) Complete technical documentation, architecture documents, design specifications, and developer guides;

(h) User manuals, installation guides, and deployment procedures;

(i) All encryption keys, certificates, passwords, and credentials;

(j) All test suites, test scripts, test data, and QA procedures;

(k) A complete inventory list with version numbers and dates; and

(l) Additional materials specified in Schedule B.

3.2 Format. Industry-standard, non-proprietary digital formats. Source code in plain text. All media clearly labeled.

3.3 Completeness. Sufficiently complete for a competent developer to compile, build, deploy, test, maintain, and modify the Software without additional Licensor resources.

3.4 Personal Data Minimization. In accordance with VCDPA data minimization principles, the Deposit Materials should not contain Personal Data or Personal Information unless such data is reasonably necessary for the compilation, testing, or operation of the Software. Where test data containing Personal Data is included, Licensor shall use de-identified or synthetic data to the extent practicable.

4. DEPOSIT AND UPDATE PROCEDURES

4.1 Initial Deposit. Within [____] calendar days of the Effective Date, including all materials for the current production version.

4.2 Update Deposits.

(a) Within [____] calendar days following each major release;
(b) Within [____] calendar days following each minor release;
(c) Not less than once every [____] months; and
(d) Within [____] calendar days after material Build Environment or dependency changes.

4.3 Deposit Procedures. Each deposit shall include: (a) Deposit Confirmation Form (Schedule D); (b) written inventory; (c) SHA-256 hash values; (d) authorized certification of completeness; and (e) changelog.

4.4 Acknowledgment. Written acknowledgment within five (5) Business Days.

4.5 Rejection. Notification within five (5) Business Days if incomplete; cure within ten (10) Business Days.

5. VERIFICATION AND TESTING

5.1 General. Beneficiary may request Verification at any time during the term, at its cost unless otherwise specified.

5.2 Level 1: Inventory and Inspection. Confirm items, verify readability, validate hashes. Report within fifteen (15) Business Days.

5.3 Level 2: Compilation and Build. Level 1 plus compilation and build attempt. Report within thirty (30) Business Days.

5.4 Level 3: Full Functional Testing. Levels 1 and 2 plus test suite execution and functional testing. Report within forty-five (45) Business Days.

5.5 Deficiency Cure. Licensor shall cure within [____] calendar days. Re-verification costs for Licensor-caused Deficiencies borne by Licensor.

5.6 Verification Costs.

☐ Beneficiary pays all costs
☐ Licensor pays all costs
☐ Costs shared equally
☐ Other: [________________________________]

5.7 Confidentiality. Secure environment. Third-party consultants shall execute NDAs acceptable to Licensor.

6. RELEASE CONDITIONS

6.1 Release Conditions. The Escrow Agent shall release the Deposit Materials upon:

(a) Insolvency or Bankruptcy. Licensor experiences an Insolvency Event and fails to perform support obligations. Beneficiary's rights are protected under 11 U.S.C. § 365(n).

(b) Cessation of Business. Licensor ceases business with respect to the Software for [____] consecutive calendar days.

(c) Material Breach. Licensor materially breaches support, maintenance, or service obligations, uncured for [____] calendar days after written notice.

(d) Extended Unavailability. For SaaS/hosted Software, unavailability for [____] consecutive calendar days not caused by Force Majeure, scheduled maintenance, or Beneficiary acts.

(e) Failure to Deposit. Failure to make a required deposit continuing [____] calendar days after notice.

(f) Unauthorized Assignment. Assignment in violation of the Underlying Agreement; assignee fails to assume obligations within [____] calendar days.

(g) Mutual Agreement. Written mutual agreement.

6.2 Exclusions. Standing alone, the following are not Release Conditions: change of control where successor assumes obligations; Force Majeure Events where performance resumes; scheduled maintenance; or fee disputes not constituting material breach.

7. RELEASE PROCEDURES

7.1 Release Request. Written request (copy to Licensor), form per Schedule D, including: (a) identification of Release Conditions; (b) factual statement with evidence; (c) sworn declaration; (d) copies of prior notices.

7.2 Notice. Escrow Agent transmits to Licensor within two (2) Business Days.

7.3 Objection. Licensor has [____] Business Days to object. Failure to object is deemed consent.

7.4 Emergency Release. (a) Transmit within one (1) Business Day; (b) five (5) Business Day objection period; (c) release within two (2) Business Days if no objection; (d) expedited arbitration if objection; (e) interim supervised access possible.

7.5 Release. Following consent, objection withdrawal, or favorable resolution, release within five (5) Business Days.

7.6 Disputed Release. Resolution per Section 17 procedures. Escrow Agent holds pending resolution.

8. POST-RELEASE LICENSE RIGHTS

8.1 License Grant. Upon valid release, Beneficiary receives a non-exclusive, non-transferable, royalty-free license to use, copy, compile, execute, maintain, modify, and create derivative works solely for: (a) authorized use under the Underlying Agreement; (b) maintenance for internal business; (c) error correction and security patching; and (d) deployment on Beneficiary's or authorized hosting systems.

8.2 Restrictions. No sublicensing, selling, or distributing; no competing products; no reverse engineering of excluded portions; no removal of proprietary markings.

8.3 Third-Party Components. Beneficiary shall comply with third-party licenses.

8.4 Surviving Obligations. Confidentiality and VCDPA obligations continue after release.

8.5 Permitted Contractors. Contractors permitted under confidentiality agreements.

9. FEES AND PAYMENT

9.1 Fee Schedule. Per Schedule A:

(a) Initial Deposit Fee: $[________________________________];
(b) Annual Storage Fee: $[________________________________];
(c) Update Deposit Fee: $[________________________________] per deposit;
(d) Verification Fees: Level 1: $[________________________________]; Level 2: $[________________________________]; Level 3: $[________________________________];
(e) Release Fee: $[________________________________].

9.2 Payment Responsibility.

☐ All fees paid by Beneficiary
☐ All fees paid by Licensor
☐ Split: [________________________________]

9.3 Payment Terms. Due within thirty (30) calendar days of invoice, in United States Dollars.

9.4 Late Payment. Overdue payments bear interest at the lesser of (a) one and one-half percent (1.5%) per month, or (b) the maximum rate permitted under Virginia law. The legal rate of interest in Virginia is six percent (6%) per annum pursuant to Va. Code Ann. § 6.2-301. No contract may provide for interest exceeding twelve percent (12%) per annum, except as otherwise permitted by law, pursuant to Va. Code Ann. § 6.2-303. Contracts exceeding the maximum rate are subject to penalties under Va. Code Ann. § 6.2-305. Interest accrues from the date due until paid.

9.5 Fee Adjustments. The Escrow Agent may adjust fees upon sixty (60) days' notice, not exceeding five percent (5%) per annum.

9.6 Taxes. Fees exclude applicable taxes.

10. CONFIDENTIALITY AND SECURITY

10.1 Confidentiality. Each Party shall maintain confidentiality using commercially reasonable measures. Obligations survive for five (5) years after termination or as long as Trade Secret status is maintained, whichever is longer.

10.2 Security. The Escrow Agent shall maintain: (a) secure physical storage with restricted access; (b) AES-256 encryption at rest and in transit; (c) access controls with audit trails; (d) geographically separate redundant storage; (e) disaster recovery procedures; and (f) annual third-party security audits.

10.3 Data Breach Notification. In the event of unauthorized access to Deposit Materials or Personal Information, the Escrow Agent shall:

(a) Notify Licensor and Beneficiary within forty-eight (48) hours of discovery;

(b) Cooperate in investigation and mitigation;

(c) Comply with Va. Code Ann. § 18.2-186.6, which requires notification to affected Virginia residents without unreasonable delay following the investigation into the nature and scope of the breach. If the breach involves the personal information of more than one thousand (1,000) Virginia residents, the entity shall also notify the Office of the Attorney General of Virginia and all consumer reporting agencies;

(d) Take all commercially reasonable steps to prevent recurrence.

10.4 VCDPA Data Protection. To the extent the Deposit Materials contain Personal Data as defined by the VCDPA:

(a) The Escrow Agent shall act as a Processor of any Personal Data on behalf of Licensor (as Controller), and the Parties shall enter into a data processing agreement as required by Va. Code Ann. § 59.1-578;

(b) The Escrow Agent shall implement and maintain reasonable administrative, technical, and physical data security practices, consistent with Va. Code Ann. § 59.1-578(A)(3);

(c) The Escrow Agent shall assist Licensor in responding to consumer rights requests under the VCDPA, including requests for access, correction, deletion, and portability of Personal Data, pursuant to Va. Code Ann. § 59.1-577;

(d) The Escrow Agent shall delete or return all Personal Data upon termination unless retention is required by law;

(e) The Escrow Agent shall make available all information necessary to demonstrate compliance with the VCDPA; and

(f) The Parties shall conduct data protection assessments as required by Va. Code Ann. § 59.1-580 with respect to any processing of Personal Data under this Agreement that presents a heightened risk of harm to consumers.

11. TRADE SECRET PROTECTIONS

11.1 Acknowledgment. The Deposit Materials may contain Trade Secrets under the Virginia Uniform Trade Secrets Act (Va. Code Ann. §§ 59.1-336 to 59.1-343) (the "Virginia UTSA"). Under Va. Code Ann. § 59.1-336, a trade secret is information that derives independent economic value from not being generally known to and not being readily ascertainable by proper means by other persons who can obtain economic value from its disclosure or use, and is the subject of efforts reasonable under the circumstances to maintain its secrecy.

11.2 Reasonable Measures. The escrow arrangement and confidentiality obligations constitute reasonable measures. Access strictly limited; all persons with access bound by confidentiality obligations.

11.3 Injunctive Relief. Under Va. Code Ann. § 59.1-337, actual or threatened misappropriation may be enjoined. The injunction may be conditioned upon payment of a reasonable royalty for no longer than the period of time for which use could have been prohibited. The aggrieved Party may seek temporary restraining orders, preliminary injunctions, and permanent injunctions in any Virginia court of competent jurisdiction without posting a bond to the maximum extent permitted by law.

11.4 Damages. Under Va. Code Ann. § 59.1-338, a Party may recover damages for actual loss and unjust enrichment not addressed in actual loss. In lieu of other measures, a reasonable royalty may be assessed. If willful and malicious misappropriation exists, the court may award exemplary damages not exceeding twice the compensatory award.

11.5 Attorney's Fees. Under Va. Code Ann. § 59.1-339, if willful and malicious misappropriation exists, or if a claim is made in bad faith, or if an injunction motion is made or resisted in bad faith, the court may award reasonable attorney's fees.

11.6 Statute of Limitations. Under Va. Code Ann. § 59.1-340, an action for misappropriation must be brought within five (5) years after the misappropriation is discovered or by reasonable diligence should have been discovered.

11.7 Preservation. In judicial or arbitral proceedings, the Parties shall seek protective orders to preserve Trade Secret status, as contemplated by Va. Code Ann. § 59.1-341.

11.8 Federal Protections. The Deposit Materials may also be protected under the Defend Trade Secrets Act (18 U.S.C. §§ 1836-1839). Remedies are cumulative.

11.9 Whistleblower Immunity. Per 18 U.S.C. § 1833(b), individuals are immune from liability for confidential disclosures to government officials or attorneys for reporting suspected legal violations, or in sealed court filings.

12. INTELLECTUAL PROPERTY

12.1 Ownership. Licensor retains all rights. Nothing transfers ownership.

12.2 No Implied Licenses. No license implied except as expressly stated.

12.3 Escrow Agent's Rights. Custodian only; no ownership or license rights.

12.4 Infringement Notice. Prompt notification; Licensor has first right to enforce.

13. WARRANTIES AND DISCLAIMERS

13.1 Licensor's Warranties. Licensor warrants: (a) ownership or necessary rights; (b) no known infringement; (c) no intentional malware; (d) completeness and accuracy; (e) authority; (f) no conflicts; and (g) compliance with VCDPA requirements with respect to any Personal Data in the Deposit Materials.

13.2 Escrow Agent's Warranties. Authority, reasonable care, adequate insurance, and compliance with VCDPA Processor obligations with respect to any Personal Data.

13.3 Beneficiary's Warranties. Authority to enter this Agreement and compliance with VCDPA requirements with respect to any Personal Data accessed following release.

13.4 DISCLAIMER. EXCEPT AS IN SECTIONS 13.1, 13.2, AND 13.3, THE ESCROW AGENT DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY.

13.5 RELEASE DISCLAIMER. UPON RELEASE, DEPOSIT MATERIALS ARE "AS IS" AND "WHERE IS."

14. INDEMNIFICATION

14.1 Licensor. Indemnifies Beneficiary and Escrow Agent against (a) IP infringement, (b) warranty breach, (c) negligence or willful misconduct, and (d) violations of the VCDPA attributable to Licensor as Controller.

14.2 Beneficiary. Indemnifies Licensor and Escrow Agent against (a) unauthorized use, (b) warranty breach, (c) negligence or willful misconduct, and (d) VCDPA violations attributable to Beneficiary.

14.3 Escrow Agent. Indemnifies against gross negligence, willful misconduct, and VCDPA violations attributable to the Escrow Agent as Processor.

14.4 Procedures. Prompt notice, sole control, cooperation, no unauthorized settlement.

15. LIMITATION OF LIABILITY

15.1 Consequential Damages. EXCEPT FOR INDEMNIFICATION, CONFIDENTIALITY BREACHES, TRADE SECRET MISAPPROPRIATION, OR VCDPA VIOLATIONS, NO PARTY IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES.

15.2 Cap.

(a) Escrow Agent: total fees paid during the preceding twelve (12) months;
(b) Licensor: $[________________________________]; and
(c) Beneficiary: $[________________________________].

15.3 Essential Purpose. Limitations apply even if a remedy fails of its essential purpose.

15.4 VCDPA Liability. The limitations in this Section 15 do not limit or affect any penalties that may be imposed by the Virginia Attorney General under the VCDPA, which provides for civil penalties of up to Seven Thousand Five Hundred Dollars ($7,500.00) per violation pursuant to Va. Code Ann. § 59.1-584.

16. TERM AND TERMINATION

16.1 Term. Commences on the Effective Date and continues until: (a) expiration of the Underlying Agreement; (b) mutual agreement; (c) termination upon [____] days' notice; or (d) expiration of the initial term of [________________________________].

16.2 Renewal. Automatic one (1) year renewals unless sixty (60) days' notice.

16.3 Escrow Agent Termination. Upon ninety (90) days' notice for nonpayment (sixty (60) days overdue) or cessation of services.

16.4 Effect. If no release, return and destruction within thirty (30) days, including deletion of any Personal Data. If released, Section 8 rights survive. Sections 2, 8, 10, 11, 12, 13, 14, 15, 17, and 18 survive.

17. GOVERNING LAW AND DISPUTE RESOLUTION

17.1 Governing Law. This Agreement shall be governed by the laws of the Commonwealth of Virginia without conflict of laws principles. The UN Convention on Contracts for the International Sale of Goods does not apply.

17.2 Venue. Exclusive jurisdiction in state and federal courts in:

☐ Richmond City, Virginia
☐ Alexandria City, Virginia
☐ Fairfax County, Virginia
☐ Other: [________________________________]

17.3 JURY WAIVER. TO THE FULLEST EXTENT PERMITTED BY VIRGINIA LAW, EACH PARTY HEREBY KNOWINGLY, VOLUNTARILY, AND INTENTIONALLY WAIVES ANY AND ALL RIGHTS IT MAY HAVE TO A TRIAL BY JURY IN ANY ACTION, PROCEEDING, OR COUNTERCLAIM ARISING OUT OF OR RELATING TO THIS AGREEMENT. THIS WAIVER IS A MATERIAL INDUCEMENT FOR EACH PARTY'S AGREEMENT. EACH PARTY HAS HAD THE OPPORTUNITY TO CONSULT WITH LEGAL COUNSEL REGARDING THE MEANING AND EFFECT OF THIS WAIVER. EACH PARTY CERTIFIES THAT NO REPRESENTATIVE OF ANY OTHER PARTY HAS REPRESENTED THAT SUCH OTHER PARTY WOULD NOT SEEK TO ENFORCE THIS WAIVER IN THE EVENT OF LITIGATION.

17.4 Mediation. Before litigation or arbitration, the Parties shall attempt mediation administered by AAA or JAMS in [________________________________], Virginia. Costs shared equally. Duration not to exceed thirty (30) calendar days.

17.5 Arbitration. If mediation fails within thirty (30) days, either Party may elect binding arbitration under AAA Commercial Arbitration Rules. Single arbitrator experienced in technology and IP, in [________________________________], Virginia. The award shall be final and binding.

17.6 Injunctive Relief. Any Party may seek injunctive or equitable relief in any court to protect IP Rights, Trade Secrets, or Confidential Information without first resorting to mediation or arbitration.

17.7 Attorney's Fees. The prevailing party may recover reasonable attorney's fees. Virginia generally follows the "American Rule," and this provision constitutes the contractual authorization for fee-shifting.

18. VIRGINIA-SPECIFIC PROVISIONS

18.1 Virginia UETA. This Agreement may be executed electronically pursuant to the Virginia Uniform Electronic Transactions Act (Va. Code Ann. §§ 59.1-479 to 59.1-497). Electronic signatures have the same legal effect as original signatures pursuant to Va. Code Ann. § 59.1-485.

18.2 Virginia Consumer Data Protection Act (VCDPA). The Parties acknowledge and shall comply with the VCDPA (Va. Code Ann. §§ 59.1-575 to 59.1-585) to the extent applicable. Key obligations include:

(a) Data Minimization. The Parties shall limit collection and processing of Personal Data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which such data is processed, pursuant to Va. Code Ann. § 59.1-578(A)(1);

(b) Purpose Limitation. Personal Data shall not be processed for purposes that are not reasonably necessary to or compatible with the disclosed purposes, pursuant to Va. Code Ann. § 59.1-578(A)(2);

(c) Security. Reasonable administrative, technical, and physical data security practices shall be maintained, consistent with Va. Code Ann. § 59.1-578(A)(3);

(d) Consumer Rights. The Parties shall respect and facilitate consumer rights under Va. Code Ann. § 59.1-577, including the right to access, correct, delete, and obtain a copy of Personal Data, and the right to opt out of processing for targeted advertising, sale of Personal Data, or profiling;

(e) Data Protection Assessments. The Parties shall conduct assessments as required by Va. Code Ann. § 59.1-580 for processing activities that present a heightened risk of harm to consumers;

(f) Processor Obligations. The Escrow Agent, acting as a Processor, shall adhere to the instructions of the Controller and assist the Controller in meeting its obligations under the VCDPA, pursuant to Va. Code Ann. § 59.1-578(B); and

(g) Enforcement. The Virginia Attorney General has exclusive authority to enforce the VCDPA. Violations may result in civil penalties of up to Seven Thousand Five Hundred Dollars ($7,500.00) per violation, pursuant to Va. Code Ann. § 59.1-584. There is no private right of action under the VCDPA.

18.3 Virginia Consumer Protection Act. The Parties acknowledge the Virginia Consumer Protection Act (Va. Code Ann. §§ 59.1-196 to 59.1-207). The VCPA prohibits unfair or deceptive acts or practices in consumer transactions. Certain entities, including banks, savings institutions, and insurance companies regulated by the State Corporation Commission, are excluded from the VCPA's coverage. The applicability of the VCPA to this commercial transaction should be evaluated by counsel.

18.4 Statute of Limitations. The Parties acknowledge:

(a) Written contract breach: five (5) years, pursuant to Va. Code Ann. § 8.01-246(2);

(b) Trade secret misappropriation: five (5) years from discovery, pursuant to Va. Code Ann. § 59.1-340; and

(c) Fraud: two (2) years from discovery, pursuant to Va. Code Ann. § 8.01-243(A).

18.5 Bankruptcy Protections. The Deposit Materials constitute "intellectual property" under 11 U.S.C. § 101(35A), and Beneficiary's rights are protected under 11 U.S.C. § 365(n).

18.6 Virginia Computer Crimes Act. Unauthorized access to, use of, or damage to computer systems or data may violate the Virginia Computer Crimes Act (Va. Code Ann. §§ 18.2-152.1 to 18.2-152.16). The Act provides for both criminal penalties and civil remedies, including actual damages and injunctive relief, pursuant to Va. Code Ann. § 18.2-152.12. The Parties acknowledge that unauthorized access to the Deposit Materials may constitute computer trespass, computer fraud, or other offenses under this Act.

18.7 Virginia Arbitration Act. Arbitration provisions are enforceable under the Virginia Uniform Arbitration Act (Va. Code Ann. §§ 8.01-581.01 to 8.01-581.016) and the Federal Arbitration Act (9 U.S.C. §§ 1 et seq.).

18.8 Northern Virginia Technology Corridor Considerations. The Parties acknowledge that Virginia's significant technology industry, particularly in the Northern Virginia corridor, has produced a body of case law regarding technology-related contracts and intellectual property disputes. The Parties intend this Agreement to be interpreted in a manner consistent with prevailing standards and practices in Virginia's technology industry.

19. MISCELLANEOUS

19.1 Notices. Written delivery by personal service, overnight courier, certified mail, or email with confirmation.

19.2 Entire Agreement. This Agreement and the Underlying Agreement constitute the entire agreement on escrow matters. This Agreement controls on escrow conflicts.

19.3 Amendments. Written, signed by all Parties.

19.4 Assignment. No assignment without consent, except to Affiliates or successors assuming all obligations. Any assignee must agree in writing to comply with VCDPA requirements. Unauthorized assignment is void.

19.5 Force Majeure. No liability for delay from Force Majeure (excluding payments). Prompt notice, mitigation, and resumption required. Termination right after ninety (90) days.

19.6 Severability. Invalid provisions modified to minimum extent.

19.7 Counterparts. May be executed in counterparts.

19.8 No Third-Party Beneficiaries. Except that Virginia consumers may have rights under the VCDPA that are not waivable by contract.

19.9 Independent Contractor. The Escrow Agent is an independent contractor.

19.10 Construction. No presumption against drafter. "Including" means "including without limitation."

20. SIGNATURES

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

LICENSOR

Signature: _______________________________________________

Printed Name: [________________________________]

Title: [________________________________]

Date: [__/__/____]

Entity Name: [________________________________]

BENEFICIARY

Signature: _______________________________________________

Printed Name: [________________________________]

Title: [________________________________]

Date: [__/__/____]

Entity Name: [________________________________]

ESCROW AGENT

Signature: _______________________________________________

Printed Name: [________________________________]

Title: [________________________________]

Date: [__/__/____]

Entity Name: [________________________________]

21. SCHEDULES

SCHEDULE A: FEE SCHEDULE

SCHEDULE B: DEPOSIT MATERIALS INVENTORY

SCHEDULE C: VERIFICATION LEVELS AND PROCEDURES

Level 1: Inventory and Inspection — Confirm receipt, verify integrity, validate hashes. Timeframe: [____] Business Days.

Level 2: Compilation and Build — All Level 1 plus compile and build. Timeframe: [____] Business Days.

Level 3: Full Functional Testing — All Level 1 and 2 plus test execution and functional testing. Timeframe: [____] Business Days.

SCHEDULE D: RELEASE REQUEST FORM AND OBJECTION PROCEDURE

RELEASE REQUEST FORM

Date: [__/__/____]
To: [________________________________] (Escrow Agent)
From: [________________________________] (Beneficiary)
Re: Release Request — Agreement No. [________________________________]

Release Condition(s):

☐ Section 6.1(a): Insolvency or Bankruptcy
☐ Section 6.1(b): Cessation of Business
☐ Section 6.1(c): Material Breach
☐ Section 6.1(d): Extended Unavailability
☐ Section 6.1(e): Failure to Deposit
☐ Section 6.1(f): Unauthorized Assignment
☐ Section 6.1(g): Mutual Agreement

Factual Basis: [________________________________]

Supporting Documentation:

☐ Written notices to Licensor
☐ Cure period evidence
☐ Court filings or public records
☐ Service level reports
☐ Other: [________________________________]

Emergency Release: ☐ Yes ☐ No

VCDPA Compliance Certification: ☐ I certify that the Beneficiary will comply with the VCDPA with respect to any Personal Data in the Deposit Materials.

Declaration: I declare under penalty of perjury under the laws of the Commonwealth of Virginia that the foregoing is true and correct.

Signature: _______________________________________________
Name: [________________________________]
Title: [________________________________]
Date: [__/__/____]

This template is for informational purposes only and does not constitute legal advice. Review by a qualified Virginia attorney is required. Special attention should be given to VCDPA compliance if Personal Data is present in the Deposit Materials.

Virginia Jurisdiction — Last Updated: 2026-02-27