Keystone
by CloudVoro
Food traceability · United Kingdom

Food traceability software for UK producers.
BRC, SALSA and retailer audits, evidence in 30 seconds.

UK food law kept the traceability core after Brexit: one step back, one step forward, available to authorities on demand (assimilated EU food safety regulations, enforced through the FSA and local authorities). What actually drives UK producers to software is the layer above the law, BRCGS for the multiples, SALSA for regional and craft suppliers, and retailer technical audits that expect a timed, evidenced, both-directions trace. Keystone produces exactly that evidence, from records your team creates anyway.

  • Full chain, supplier lot → batch → dispatch → customer, in under 30 seconds
  • Evidence shaped for BRCGS (§3.9/§3.11) and SALSA traceability requirements
  • UK retailer dispatch formats and own-label code mapping
  • EU-hosted (AWS Dublin), GDPR/UK-GDPR aligned; UK customers supported directly
See it in action

Real screens, from our Public Sandbox.

Every screenshot below is captured from the Public Sandbox demo tenant with sample Irish dairy data. No mockups, no client data, no NDAs.

Keystone Backward Trace (Public Sandbox demo data), sales order to dispatch to cheese batch to make-day to milk intake to supplier chain of custody.
Sales order to supplier lot, walked backward step by step, in a single view.
Keystone Mock Recall report (Public Sandbox demo data), full forward trace from a supplier lot to every affected batch, customer and dispatch.
One click. Every customer, every branch, every quantity, ready as a signed PDF.
Keystone dispatch note editor (Public Sandbox demo data), customer header, PO number, delivery address, line items with batch codes and use-by dates.
What the driver hands over. What the retailer’s goods-in team scans. What the auditor sees.
The UK audit landscape

BRCGS for the multiples. SALSA for everyone else.

If you supply national multiples under own label, BRCGS certification (and its vertical audits, 4-hour traceability test and mass balance expectations) is the ticket to play. If you're a smaller or regional producer supplying independents, farm shops, delis and regional retail, SALSA is the proportionate scheme, and its traceability ask is the same shape at smaller scale: identify what came in, what it became, where it went, and prove it in a timed exercise. Keystone serves both: the chain, the quantities and the audit trail come from the same live records, so which badge you're audited against changes the paperwork template, not the preparation.

What UK producers get

Built for the same problems, wherever the audit badge differs.

The 30-second trace
Any batch, both directions, with quantities, the vertical audit and the customer complaint answered from one screen.
Mass balance computed
Produced vs dispatched vs stock vs waste, from live records, the half of the traceability test spreadsheets fail.
Retailer formats
Per-customer dispatch note and label formats, own-label code mapping with effective dates.
Allergen evidence
Batch-level recipe versions and ingredient lots, the evidence base behind Natasha's Law-era labelling diligence and undeclared-allergen investigations.
Immutable audit log
Who recorded what, when, protected from silent edits, exportable for any auditor.
Practicalities

An Irish-built system, a UK-friendly reality.

Keystone is built in Ireland by CloudVoro (sister company to Intellix IT Solutions, UK) and runs with an Irish farmhouse exporter as founding partner, a producer whose products sit on UK shelves. Hosting is AWS Dublin with UK-GDPR-aligned processing; support hours cover UK business hours; pricing is a flat €790/month per site with implementation from €4,950 fixed-fee, quoted in writing. Pilots are scoped to go live in 30 days on your real production data.

Keep reading

Related pages on this stack.

FAQ

Questions buyers actually ask.

Does UK law still require food traceability after Brexit?
Yes, EU food safety regulations was assimilated into UK law: one step back, one step forward, available to authorities on demand, with withdrawal/notification duties when food is unsafe. The FSA and local authorities enforce it.
Does Keystone support SALSA requirements?
Keystone produces the traceability evidence SALSA audits look for: lot-level records both directions, a timed traceability exercise, and quantity reconciliation. No scheme approves software, they audit producers, but the evidence stops being your bottleneck.
Where is our data hosted?
AWS Ireland (eu-west-1, Dublin), each tenant in its own dedicated environment, encrypted at rest and in transit. UK-GDPR-aligned processing terms are part of the standard agreement.
Do you support UK retailer dispatch formats?
Per-customer templates are configured during implementation against your customers' actual requirements, the same mechanism our founding partner uses for Irish and UK trade.
What does it cost in sterling?
Pricing is set in euro, €790/month per site, all modules, and invoiced to UK customers with the prevailing conversion. Implementation from €4,950 fixed-fee, quoted in writing before you commit.

Ready to see if Keystone fits your floor?

20-minute discovery call. No sales pitch. Written scope within 48 hours if we fit, referral to someone better if we don't.

Talk to us
Compliance & trust

How we keep your
data and your audits safe.

Enterprise-grade controls as standard, encryption, MFA for every user, tenant isolation and tamper-evident audit trails, on EU cloud or your own servers. Privacy queries go to privacy@cloudvoro.com. Sub-processor list at /legal/sub-processors. Full security posture at /site/security.

Live
Hosted in EU / Ireland, or on-premise
Customer data resides on AWS Ireland (eu-west-1) and never leaves the EU. Local on-premise deployment available where policy requires it.
Live
GDPR · Privacy Contact named
Internal Data Protection Lead handles subject access requests. Owner is ADPO Ireland member.
Live
MFA for every user
TOTP multi-factor authentication across all roles, with rate limiting, brute-force lockout and reCAPTCHA bot protection on public forms.
Live
ISO 27001 · aligned controls
Security controls mapped to the ISO/IEC 27001:2022 Annex A framework, access management, encryption, logging, incident response.
Live
NIS2 · supporting evidence
Tenant isolation, MFA and tamper-evident audit trails give customers in NIS2 scope direct supporting evidence for their obligations.
Live
Encryption · at rest & in transit
TLS 1.3 in transit, industry-standard symmetric ciphers at rest, KMS-managed keys.