Keystone
by CloudVoro
Comparison · Wherefour

Wherefour is US-built food traceability.
Keystone is the Irish-built, EU-hosted, retailer-aware version.

Wherefour is a respected US-based food traceability and inventory SaaS, particularly strong in craft food and beverage. It shows up in EU search results because the keyword overlap is high. The honest issue for an Irish or EU food producer is that Wherefour is built around US retailer norms, US food-safety frameworks (FDA, FSMA 204), and US-hosted infrastructure. None of that is wrong for a US producer, but none of it lines up cleanly with FSAI, BRCGS traceability requirements evidence, retailer EDI norms in Ireland and the UK, or EU GDPR data residency.

  • Irish-built · EU-hosted (AWS Ireland eu-west-1, Dublin) · GDPR-aligned by default
  • Designed against BRCGS (not FSMA 204) · supports FSAI / SFPA inspections
  • Retailer dispatch formats: Tesco / Lidl / Aldi / Musgrave / M&S / SuperValu
  • Senior-led, English-language support in your timezone
See it in action

Real screens, from our Public Sandbox.

Every screenshot below is captured from the Public Sandbox demo tenant with sample Irish dairy data. No mockups, no client data, no NDAs.

Keystone Sales Orders pipeline (Public Sandbox demo data), draft / in-progress / locked / dispatched columns with per-customer counts.
A live-updating pipeline of every order, drawn from the Public Sandbox demo dataset.
Keystone Batches (Public Sandbox demo data), production runs by product with per-batch counts.
Every make-day, every lot, every input weight. One place.
Keystone Dispatches (Public Sandbox demo data), filterable by customer / PO / status with per-line batch codes and dispatch weights.
Dispatches with batch codes and pallet weights on the line, not stapled to the back.
Where Wherefour is genuinely strong

US craft food and beverage credibility.

Wherefour has a strong product, real US craft food and beverage customers, and a polished UI. If you are a US craft producer dealing with FDA / FSMA 204 / Whole Foods, Wherefour is a sensible candidate. Their published pricing starts around $400/month (source: wherefour.com, May 2026).

Where Keystone wins

European fit. Irish jurisdiction. Retailer reality.

EU-hosted, GDPR-native
AWS Ireland (eu-west-1, Dublin). Tenant data does not leave the EU by default. Sub-processor list published at /legal/sub-processors.
BRCGS, not FSMA 204
Built around the standard your customers actually audit you against. FSMA 204 is a different regulation aimed at the US market.
Irish retailer dispatch formats
Tesco IE, Lidl Ireland/UK, Musgrave (SuperValu / Centra), M&S, Dunnes, not Kroger and Whole Foods.
Timezone & team accessibility
Senior-led, English-language, Irish-time support. Wherefour support runs US-business-hours.
EUR pricing in writing
Quoted in euro, in writing. No FX surprises, no US wire instructions.
How to choose honestly

When to pick Wherefour. When to pick Keystone.

Pick Wherefour if you are a US-based food producer (especially craft food and beverage), your customers are US retailers, your auditors are US-trained and your compliance obligations are FDA / FSMA 204. Pick Keystone if you are an Irish, UK or EU food producer, your customers are Irish or UK retailers, your auditors are BRCGS / FSAI / SFPA and your data has to stay in the EU.

Keep reading

Related pages on this stack.

FAQ

Questions buyers actually ask.

Will Keystone work for a US producer?
Probably not the best fit, our retailer dispatch templates, audit framework alignment and hosting are EU-centric. We will tell you that on the discovery call.
Has anyone migrated from Wherefour to Keystone?
Not yet, Keystone is new. We have done discovery with one EU producer who had Wherefour on their shortlist and chose us for the EU-hosting and BRCGS alignment. Happy to introduce on request, with the prospect's permission.
Is the pricing comparable?
Keystone is quoted per site to the size of your operation; Wherefour starts from ~$400/month entry and scales per user. Not directly comparable because we include more in the licence, variable-weight batches, retailer dispatch templates, mock-recall, COA generation are all included, not add-on tiers.

Ready to see if Keystone fits your floor?

20-minute discovery call. No sales pitch. Written scope within 48 hours if we fit, referral to someone better if we don't.

Talk to us
Compliance & trust

How we keep your
data and your audits safe.

Enterprise-grade controls as standard, encryption, MFA for every user, tenant isolation and tamper-evident audit trails, on EU cloud or your own servers. Privacy queries go to privacy@cloudvoro.com. Sub-processor list at /legal/sub-processors. Full security posture at /site/security.

Live
Hosted in EU / Ireland, or on-premise
Customer data resides on AWS Ireland (eu-west-1) and never leaves the EU. Local on-premise deployment available where policy requires it.
Live
GDPR · Privacy Contact named
Internal Data Protection Lead handles subject access requests. Owner is ADPO Ireland member.
Live
MFA for every user
TOTP multi-factor authentication across all roles, with rate limiting, brute-force lockout and reCAPTCHA bot protection on public forms.
Live
ISO 27001 · aligned controls
Security controls mapped to the ISO/IEC 27001:2022 Annex A framework, access management, encryption, logging, incident response.
Live
NIS2 · supporting evidence
Tenant isolation, MFA and tamper-evident audit trails give customers in NIS2 scope direct supporting evidence for their obligations.
Live
Encryption · at rest & in transit
TLS 1.3 in transit, industry-standard symmetric ciphers at rest, KMS-managed keys.