I think they use the mutisig feature of bitcoin and a hash of the contract. The first party would send that transaction to a 3rd party that would then (when whatever requirements are met) would publish it the network.

Someone correct me if I'm wrong and lets to talk in lower level terms as per ops request.