Source code escrow is standard for this sort of vendor contract.