How independent escrow works in a Rillor forward contract.

When you commit to a forward contract on a complete OEM GPU system, you are committing real capital months before any hardware ships. A single HGX B200 system carries enough notional value that the deposit alone is a serious wire. The question every first-time buyer and seller asks is the right one: who holds that money in the gap between execution and delivery, and what happens if the other side fails to perform. The answer is the load-bearing safety mechanic of the whole market. On Rillor, the deposit never touches the platform's balance sheet. It sits with an independent escrow agent, released only when delivery conditions are met, and it works alongside seller performance bonds to cover non-performance in both directions.

This piece walks the GPU forward contract escrow flow end to end: where the money goes at execution, what the escrow fee is and why it is separate from the take rate, how funds release on confirmed receipt, and exactly what happens in each failure case. If you are evaluating counterparty risk before your first contract, this is the mechanism that should make you comfortable on either side of the trade.

What escrow actually is, and what it is not

Escrow is one of the oldest commercial tools for transactions where money and goods change hands at different times. A neutral third party, the escrow agent, holds the deposited funds and releases them only when a defined condition is satisfied. The critical legal feature, as commercial-escrow practice describes it, is that once funds are deposited into escrow they pass beyond the control of the depositor and cannot be recalled at will. The agent releases them only upon performance of the specified condition. That single property is what makes escrow a trust mechanism rather than a payment convenience.

For a Rillor forward, the deposit is held by an independent escrow agent under a written escrow agreement that names the buyer, the seller, and Rillor, and spells out the exact release conditions. Rillor is a party to the agreement as the platform that orchestrates the trade, but Rillor is not the custodian of the cash. That distinction matters more than any reassurance we could write. You do not have to trust Rillor's balance sheet, because Rillor's balance sheet is not where your money is.

This is also why the deposit is structured as a forward-contract deposit rather than a futures margin call. A Rillor contract is a bilateral, physically delivered forward between two commercial counterparties who intend that the actual hardware will change hands. The CFTC describes a forward as a commercial merchandising transaction in a physical commodity where delivery actually occurs but is deferred for commercial purposes. We are squarely inside that framing: physical delivery always, never cash settlement. We dig into the legal distinction in the anatomy of a Rillor forward contract, but for escrow purposes the point is simple. The deposit secures a delivery obligation, not a daily mark-to-market position.

Step one: deposit at execution

When both parties sign, the buyer wires a 10% deposit on the contract notional directly to the independent escrow agent's account. Not to Rillor. The escrow agent confirms receipt, and the contract is live.

Why 10%. In commodity and futures markets, the good-faith deposit that guarantees performance, the performance bond or initial margin, typically runs a small percentage of contract notional, on the order of 2% to 12% depending on the instrument's volatility. A 10% forward deposit sits at the firm end of that range, deliberately. GPU systems are high-value, supply-constrained, and lead-time sensitive, so the deposit has to be large enough that neither side walks away casually, while staying small enough that buyers are not financing the entire purchase months early.

The numbers make the case for protecting that capital. Research estimates put NVIDIA's B200 production cost in the range of $5,700 to $7,300 per chip against a per-chip sale price in the $30,000 to $40,000 range. A single HGX B200 baseboard carries eight of those GPUs, each with 180 GB of HBM3e and 7.7 TB/s of memory bandwidth at a 1000W power rating. A complete system, with dual Intel Xeon 6980P or AMD EPYC Turin head nodes, ConnectX-7 or ConnectX-8 fabric, BlueField-3 DPUs, and Micron 9550 PRO NVMe, is a multi-hundred-thousand-dollar instrument. The deposit on a multi-unit contract is a six- or seven-figure wire. That is exactly the kind of capital escrow exists to protect.

The escrow fee, and why it is separate from the take rate

The escrow agent charges for its service. On a Rillor contract that fee is roughly $1,000 per contract, and it is explicitly separate from Rillor's take rate.

Keeping them separate is intentional. Rillor's take rate is 2% all-in, split as 1% to the buyer and 1% to the seller, and it is what Rillor earns for operating the market, running KYC, capturing the end-customer-of-record for NVIDIA channel compliance, and standardizing the contract. The escrow fee is what the independent agent earns for custody and conditional release. Bundling them would blur the line we work hardest to keep clear: the party that operates the market is not the party that holds the money. A clean fee for a clean function. You can see the full economics on the marketplace and in for-buyers.

Step two: release on confirmed physical receipt

The contract runs to its delivery month. The seller, whether an OEM listing forward inventory or Rillor itself acting as a seeding underwriter, ships the system to the receiving facility named on the contract. This is where the physical-delivery model pays off. In a futures market the clearing house picks the delivery counterparty and most positions are cash-settled out before delivery ever happens. In a Rillor forward, the contract specifies exactly who delivers to whom, and the goods actually move.

When the hardware arrives, the buyer confirms physical receipt. That confirmation is the release condition. On confirmation, the escrow agent releases the deposit and the buyer pays the balance to the seller. In standard business escrow, the deposit stays with the agent until shipment, or in our case receipt, is confirmed, at which point the agent releases it to the seller. Rillor's release-on-receipt step is that exact pattern, adapted so that the buyer verifies the actual hardware before any money moves to the seller. No confirmation, no release. The buyer is never asked to pay the balance against a tracking number alone.

The mechanics of inspection, acceptance windows, and the chain of custody that backs that confirmation are spelled out in the anatomy of a Rillor forward contract. For escrow, the principle is what counts: money follows confirmed delivery, in that order, every time.

What happens when something goes wrong

A risk mechanism is only as good as its failure cases. There are two, and escrow handles them in opposite directions.

Seller or OEM fails to ship

If the seller or the OEM cannot deliver, the buyer is made whole on the deposit. The escrow agent returns the full 10% deposit to the buyer. The release condition, confirmed physical receipt, was never met, so the funds were never the seller's to receive. The deposit sitting beyond the seller's reach the entire time is precisely the protection.

Rillor does not stop at the refund. When a seller fails, Rillor attempts secondary sourcing across its OEM book, which includes Supermicro, Gigabyte, Dell, HPE, Lenovo ISG, ASRock Rack, Aivres, and others, to place the same SKU into the same delivery window from a different supplier. The buyer's underlying need does not evaporate because one seller defaulted, and a forward market with a deep verified seller book is built to reroute that demand. If you came to Rillor to lock 12 months of B300 capacity, a single seller's miss should not blow up your buildout plan.

Buyer defaults before delivery

The other direction is symmetric in intent. If the buyer walks away before delivery, the seller has costs. The system was allocated, built or held, and carried in inventory for a buyer who is no longer taking it. In that case the deposit covers the seller's documented storage and cancellation cost per the contract terms. The seller is compensated for the real economic harm of a cancelled order, drawn from the deposit the buyer already placed in escrow.

There is a release valve before cancellation costs ever apply. A buyer who can no longer take delivery is not forced into default. With Rillor and OEM approval, a buyer can execute a pre-delivery transfer of the contract to another KYC'd buyer, which preserves channel compliance and end-customer-of-record while moving the obligation to a party who wants it. The transfer flow keeps the original buyer off the hook for cancellation costs entirely, since the contract simply continues under a new counterparty. Default cost is the floor, not the first option.

Where seller performance bonds fit

Escrow protects the buyer's deposit. It does not, on its own, fully protect the buyer against a large seller default where the harm exceeds the deposit, or where the buyer's real loss is the missed delivery rather than the deposit itself. That is the job of the seller performance bond.

A performance bond, in the commodity-market sense, is a good-faith deposit posted to guarantee financial performance on an open obligation. CME Group describes performance bonds, the margins that back open positions, as good-faith deposits to guarantee financial performance, ensuring each party can meet its contractual obligations. Rillor applies the same principle on the seller side. The seller posts a bond that backs its commitment to ship. If the seller fails, the bond can be drawn to compensate the buyer for losses beyond a simple deposit refund, for example the cost of sourcing the same capacity elsewhere at a worse price.

Put the two instruments together and you get coverage in both directions:

• The buyer's deposit, in escrow, protects the seller against buyer default through documented storage and cancellation costs.
• The seller's performance bond protects the buyer against seller default beyond the returned deposit.
• The escrow agent, independent of both parties and of Rillor, is the neutral custodian that holds and releases against defined conditions.

The performance bond is sized to the SKU and the delivery window, scaling up for the highest-value rack-scale instruments like the GB300 NVL72 and down for single-node H200 and H100 systems, so the protection tracks the actual exposure on each contract.

Why an independent agent removes the platform-insolvency objection

The most serious objection to any marketplace holding customer deposits is platform insolvency. If the platform holds the money and the platform fails, the money is caught in the failure. That objection is fatal for a market that wants serious institutional buyers and sellers, and we will not design around it with promises.

We design around it structurally. Because the deposit sits with an independent escrow agent and, once deposited, passes beyond the control of the depositor and is releasable only on the specified condition, Rillor's financial health is simply not in the path between your money and you. Rillor could be a Delaware C-Corp in any state of the world and your deposit would still be where the escrow agreement says it is, releasable only when delivery is confirmed or refundable when it is not. The platform operates the market. The agent holds the cash. Those are different roles held by different parties, on purpose, and that separation is what lets a buyer or seller transact at scale without underwriting Rillor itself.

That same independence is what makes the second pillar of the business credible. The Rillor Compute Index is a 30-day rolling-blend forward price per SKU, computed from active contracts and licensed as a settlement feed to exchanges and funds. An index built on contracts whose deposits the operator could touch would be a weaker index. The escrow separation is part of what keeps the underlying contract data clean and the index defensible, a point we expand on in how the Rillor Compute Index is computed.

What this means before your first contract

The escrow mechanic is deliberately boring, and that is the highest compliment you can pay a risk control. Deposit at execution to an independent agent. Roughly $1,000 escrow fee, separate from the 2% take rate. Release on confirmed physical receipt, balance paid to the seller. Full refund plus secondary sourcing if the seller fails. Documented cancellation cost from the deposit if the buyer defaults, with pre-delivery transfer as the off-ramp before that. A seller performance bond covering the buyer in the direction escrow alone cannot.

If you are a buyer or seller evaluating counterparty risk, this is the structure that should let you sign. You are not trusting a platform with your capital. You are trusting an independent agent, a written escrow agreement, and a contract that pays out the same way every time. Browse current SKUs on the catalog, or if you sell systems, see how listing forward inventory works in for-oems.