Keystone
by CloudVoro
Food traceability · Built in Ireland

Food traceability software, built in Ireland.
Forward and backward batch trace, in seconds.

When the FSAI calls or a retailer raises a complaint, you have hours, not weeks. Keystone is Irish-built traceability software for batch-based food production, every dispatch line tied to its batch, every batch tied to its supplier deliveries, every change immutably logged.

  • Live with Cashel Farmhouse Cheesemakers (Tipperary), a multi-award-winning farmhouse dairy with international distribution
  • Pilots scoped to go live in 30 days · Standard licence from €790/month
  • Hosted in EU / Ireland (AWS eu-west-1, Dublin)
  • Supports FSAI, HACCP and BRCGS traceability workflows
The problem

Excel and paper traceability stop working at the worst possible moment.

In our experience working with Irish food producers, the typical setup is an accounts package and a stack of spreadsheets. It works, right up until the FSAI calls, a retailer triggers a withdrawal, or a BRCGS audit lands a mock-recall test. Then suddenly: who supplied that milk on the 14th? Which batches did it touch? Which customers got those batches? Which retailer branches received those pallets? In Excel, that's a fortnight of work and a knot in your stomach. In Keystone, it's under 30 seconds.

What you get

Two clicks. Full chain. PDF in your hand.

Backward trace
Pick any dispatch line, see every batch that produced it, every supplier delivery that fed those batches, every QC record along the way.
Forward trace
Pick a supplier delivery or batch, see every dispatch it ended up in, every customer, every retailer branch, including private-label re-codes.
Regulator-ready PDF
One-click export of the full chain as a signed PDF, ready to hand to FSAI / SFPA / BRCGS auditors.
Immutable audit log
Every change, who, when, why. Cryptographically signed. Nothing is ever truly deleted.
Mock-recall in 90 seconds
Run a full mock recall on real production data, required by BRCGS traceability, in the time it takes to make a coffee.
Customer SKU mapping
Trace by your code OR by the retailer's private-label code. Bidirectional from day one.
Why Ireland

We don't sell you US software with a euro sign.

Keystone is built in Ireland, for Irish food producers, by a founder who's spent 15+ years inside Irish operations. We understand AccountsIQ, we know what BRCGS actually asks for in §5.4, we've sat through SFPA inspections. The system speaks the same language your QA manager does, because we wrote it with one.

What a trace actually looks like

From question to signed PDF, step by step.

A retailer technical manager emails at 09:12: 'complaint on SKU 47712, best-before 14 June, which batch, and where else did it go?' In Keystone: the retailer code resolves to your internal product through the customer SKU mapping; the best-before resolves to batch B-1042; one click renders the full chain, the three milk deliveries that fed Wednesday's silo run, the make-day record with its QC checks, all eleven dispatches the batch entered, every customer and depot with quantities per line. Export as a signed PDF, attach, reply by 09:15. The same lookup that took the QA manager half a day in spreadsheets is now shorter than the kettle boiling, and identical whether it's a retailer, the FSAI, or a BRCGS vertical audit asking.

The regulatory stack, mapped

One system of record for three layers of obligation.

EU food traceability regulations
One-step-back / one-step-forward evidence on demand, plus the withdrawal and notification duties when something goes wrong. Keystone's goods-in and dispatch registers are that evidence, permanently assembled.
BRCGS traceability standards
Internal lot-level traceability through processing, tested annually within 4 hours including mass balance. Keystone computes the chain and quantities from live records, the test becomes a documentation exercise.
Retailer own-label standards
Customer-code level trace, twice-yearly recall exercises, response inside hours. The SKU mapping and 30-second chain make each of these routine rather than a fire drill.
Your own incident response
The blast radius of a real recall is set by the precision of your trace. Lot-level precision means you withdraw hundreds of units, not tonnes.
Getting live

30 days from scoping call to first traced dispatch.

Implementation is founder-led and fixed-fee: day 1 scoping, week 1 data shape (products, customers, suppliers, codes), week 2 dispatch templates and label formats, week 3 the full backward trace working on your imported history, week 4 first live dispatch through the system. Twelve months of historical data is included in the standard implementation, so your first audit after go-live doesn't straddle two systems. If you want to understand what the auditor will actually ask before you buy anything, start with our free guides on running a mock recall and the BRCGS traceability requirements, no email gate.

FAQ

Questions buyers actually ask.

Is Keystone certified for FSAI / HACCP / BRCGS?
Keystone is designed to support your FSAI, HACCP and BRCGS traceability workflows. We hold an immutable audit log, signed exports, and one-click full-chain trace, the technical pieces auditors expect. Formal product certification (independent attestation of the platform itself) is a 2026 roadmap item, and the full scope of what we say and don't say is set out on our Legal & Disclosures page. We're happy to walk an auditor through the system on a discovery call.
How fast is a real traceability lookup?
Under 30 seconds for a full chain (supplier → batch → dispatch → customer → retailer branch). We've benchmarked against the founding-customer dataset which spans dozens of batches and hundreds of dispatches across the customer's international distribution footprint.
Will it integrate with our existing accounts system?
AccountsIQ-ready out of the box (our founding partner runs on AccountsIQ). Sage 50/200, QuickBooks and Xero integrations are available as scoped bolt-ons, quoted separately so there are no surprises.
Where is the data hosted?
AWS Ireland (eu-west-1, Dublin) by default. Each tenant runs in its own dedicated server with its own database, no shared infrastructure. Encrypted at rest, TLS 1.3 in transit. Or we can deploy inside your own AWS account using our IaC templates.
How long to go live?
Pilots scoped to go live in 30 days. Standard implementation €4,950 fixed-fee (typical range €4,950–€16,500 depending on customer count and retailer integrations). Optional 30-day Pilot Programme at €2,500, 50% refundable if you decide not to proceed.

Ready to see if Keystone fits your floor?

20-minute discovery call. No sales pitch. Written scope within 48 hours if we fit, referral to someone better if we don't.

Talk to us
Compliance & trust

How we keep your
data and your audits safe.

Enterprise-grade controls as standard, encryption, MFA for every user, tenant isolation and immutable audit trails, on EU cloud or your own servers. Privacy queries go to privacy@cloudvoro.com. Sub-processor list at /legal/sub-processors. Full security posture at /site/security.

Live
Hosted in EU / Ireland, or on-premise
Customer data resides on AWS Ireland (eu-west-1) and never leaves the EU. Local on-premise deployment available where policy requires it.
Live
GDPR · Privacy Contact named
Internal Data Protection Lead handles subject access requests. Owner is ADPO Ireland member.
Live
MFA for every user
TOTP multi-factor authentication across all roles, with rate limiting, brute-force lockout and reCAPTCHA bot protection on public forms.
Live
ISO 27001 · aligned controls
Security controls mapped to the ISO/IEC 27001:2022 Annex A framework, access management, encryption, logging, incident response.
Live
NIS2 · supporting evidence
Tenant isolation, MFA and immutable audit trails give customers in NIS2 scope direct supporting evidence for their obligations.
Live
Encryption · at rest & in transit
TLS 1.3 in transit, industry-standard symmetric ciphers at rest, KMS-managed keys.