Keystone
by CloudVoro
Wholesale & distribution

Lot-level traceability for food wholesalers.
Every supplier lot, tracked to every customer drop.

Wholesalers sit in the middle of every recall: when a producer's lot goes bad, the authorities and the producer both come to you with the same question, who received it, how much, and when? Under Article 18 of EU food safety regulations you must answer on demand. Keystone records goods-in by supplier lot and dispatch by batch line, so the answer is a 30-second lookup instead of a night in the delivery-docket archive.

  • Goods-in by supplier lot: producer, lot code, dates, quantities
  • Every dispatch line carries the lot dispatched, split pallets included
  • Recall scope in seconds: pick a supplier lot, see every customer and quantity
  • FEFO discipline: short-dated stock surfaces before it ships or spoils
The middleman problem

You did nothing wrong, and you still carry the recall.

A wholesaler's traceability exposure is asymmetric: you don't make the product, but when it's recalled you're the party that must scope the distribution, fast, accurately, with paperwork. If your records track products but not lots, the recall scope defaults to 'everything we sold from that producer', and the cost of your own record-keeping gap lands on your customers' shelves. Lot-level goods-in and lot-level dispatch shrink the blast radius to exactly what was affected, often the difference between calling three customers and calling three hundred.

Built for distribution

The wholesale workflow, without the friction.

Fast goods-in
Receive by supplier lot with quantities and dates, templated per supplier so a delivery takes a minute to book in.
Split and mixed pallets
One pallet, many lots, many customers, every dispatch line still knows its lot, so the chain survives repacking.
Customer-level recall lists
For any supplier lot: every customer, every drop, every quantity, with dispatch note references, exportable as a signed PDF for the producer or the FSAI.
Rotation and dating
FEFO ordering built into picking; short-dated stock alerts before it becomes a credit note.
Compliance floor

One-up, one-down, evidenced, not asserted.

The legal minimum for a wholesaler is one step back (which producer, which lot) and one step forward (which business customers), available to authorities on demand. Retail customers and BRCGS Storage & Distribution style audits push further: timed exercises, quantity reconciliation, documented procedures. Keystone's records satisfy the legal floor by construction and make the audit layer a lookup. Read our plain-English guide to what EU law actually requires, then never think about it again.

FAQ

Questions buyers actually ask.

We handle 2,000+ SKUs, is lot-level tracking practical?
Yes, if capture is cheap: goods-in is templated per supplier and dispatch picks carry the lot automatically. The overhead is seconds per movement, and it buys you recall scoping in seconds instead of days.
What about products we repack or relabel?
Repacking is a transformation: input lots in, output lots out, quantities reconciled. The new pack still knows its source lots, essential if you private-label.
Can producers or authorities get reports directly?
You export a signed PDF chain for any lot, customers, quantities, dates, document references. Time-bound read-only access for an auditor is available if you prefer they self-serve.
Do we need this if our ERP tracks stock?
Stock systems track quantity by product; recalls interrogate identity by lot. If your ERP can name every customer who received supplier lot X in under an hour, you're covered. If not, that gap is what this closes.
How long to go live?
Pilots scoped to go live in 30 days. €790/month flat, implementation from €4,950 fixed-fee.

Ready to see if Keystone fits your floor?

20-minute discovery call. No sales pitch. Written scope within 48 hours if we fit, referral to someone better if we don't.

Talk to us
Compliance & trust

How we keep your
data and your audits safe.

Enterprise-grade controls as standard, encryption, MFA for every user, tenant isolation and immutable audit trails, on EU cloud or your own servers. Privacy queries go to privacy@cloudvoro.com. Sub-processor list at /legal/sub-processors. Full security posture at /site/security.

Live
Hosted in EU / Ireland, or on-premise
Customer data resides on AWS Ireland (eu-west-1) and never leaves the EU. Local on-premise deployment available where policy requires it.
Live
GDPR · Privacy Contact named
Internal Data Protection Lead handles subject access requests. Owner is ADPO Ireland member.
Live
MFA for every user
TOTP multi-factor authentication across all roles, with rate limiting, brute-force lockout and reCAPTCHA bot protection on public forms.
Live
ISO 27001 · aligned controls
Security controls mapped to the ISO/IEC 27001:2022 Annex A framework, access management, encryption, logging, incident response.
Live
NIS2 · supporting evidence
Tenant isolation, MFA and immutable audit trails give customers in NIS2 scope direct supporting evidence for their obligations.
Live
Encryption · at rest & in transit
TLS 1.3 in transit, industry-standard symmetric ciphers at rest, KMS-managed keys.