Keystone
by CloudVoro
Comparison · Wherefour

Wherefour is US-built food traceability.
Keystone is the Irish-built, EU-hosted, retailer-aware version.

Wherefour is a respected US-based food traceability and inventory SaaS, particularly strong in craft food and beverage. It shows up in EU search results because the keyword overlap is high. The honest issue for an Irish or EU food producer is that Wherefour is built around US retailer norms, US food-safety frameworks (FDA, FSMA 204), and US-hosted infrastructure. None of that is wrong for a US producer — but none of it lines up cleanly with FSAI, BRCGS Issue 9 §5.4 evidence, retailer EDI norms in Ireland and the UK, or EU GDPR data residency.

  • Irish-built · EU-hosted (AWS Ireland eu-west-1, Dublin) · GDPR-aligned by default
  • Designed against BRCGS Issue 9 (not FSMA 204) · supports FSAI / SFPA inspections
  • Retailer dispatch formats: Tesco / Lidl / Aldi / Musgrave / M&S / SuperValu
  • Founder-led, English-language support in your timezone
Where Wherefour is genuinely strong

US craft food and beverage credibility.

Wherefour has a strong product, real US craft food and beverage customers, and a polished UI. If you are a US craft producer dealing with FDA / FSMA 204 / Whole Foods, Wherefour is a sensible candidate. Their published pricing starts around $400/month (source: wherefour.com, May 2026).

Where Keystone wins

European fit. Irish jurisdiction. Retailer reality.

EU-hosted, GDPR-native
AWS Ireland (eu-west-1, Dublin). Tenant data does not leave the EU by default. Sub-processor list published at /legal/sub-processors.
BRCGS Issue 9 — not FSMA 204
Built around the standard your customers actually audit you against. FSMA 204 is a different regulation aimed at the US market.
Irish retailer dispatch formats
Tesco IE, Lidl Ireland/UK, Musgrave (SuperValu / Centra), M&S, Dunnes — not Kroger and Whole Foods.
Timezone & founder accessibility
Founder-led, English-language, Irish-time support. Wherefour support runs US-business-hours.
EUR pricing in writing
€790/month Standard. No FX surprises, no US wire instructions.
How to choose honestly

When to pick Wherefour. When to pick Keystone.

Pick Wherefour if you are a US-based food producer (especially craft food and beverage), your customers are US retailers, your auditors are US-trained and your compliance obligations are FDA / FSMA 204. Pick Keystone if you are an Irish, UK or EU food producer, your customers are Irish or UK retailers, your auditors are BRCGS / FSAI / SFPA and your data has to stay in the EU.

FAQ

Questions buyers actually ask.

Will Keystone work for a US producer?
Probably not the best fit — our retailer dispatch templates, audit framework alignment and hosting are EU-centric. We will tell you that on the discovery call.
Has anyone migrated from Wherefour to Keystone?
Not yet — Keystone is new. We have done discovery with one EU producer who had Wherefour on their shortlist and chose us for the EU-hosting and BRCGS alignment. Happy to introduce on request, with the prospect's permission.
Is the pricing comparable?
Standard licence €790/month vs Wherefour from ~$400/month entry. Different ranges because we include more in the standard licence — variable-weight batches, retailer dispatch templates, mock-recall, COA generation are all included, not add-on tiers.

Ready to see if Keystone fits your floor?

20-minute discovery call. No sales pitch. Written scope within 48 hours if we fit — referral to someone better if we don't.

Talk to us
Compliance & trust

How we keep your
data and your audits safe.

We are honest about what's certified and what's in progress. Anything marked "in progress" reflects active work towards a recognised standard — never marketing decoration. Privacy queries go to privacy@cloudvoro.com. Sub-processor list at /legal/sub-processors. Full security posture at /site/security.

Live
Hosted in EU / Ireland
Customer data resides on AWS Ireland (eu-west-1) — never leaves the EU.
Live
GDPR · Privacy Contact named
Internal Data Protection Lead handles subject access requests. Owner is ADPO Ireland member.
In progress
NIS2 · building toward readiness
Tenant isolation, audit trails and MFA support customers in NIS2 scope. CloudVoro itself is below the size threshold; not yet certified.
In progress
ISO 27001 · alignment
We map our controls to Annex A but hold no third-party certificate. Formal certification on the 2026 roadmap.
In progress
Cyber Essentials · planned
UK Cyber Essentials assessment is on our roadmap. We will name the assessing body (IASME) and a confirmed date here once scoped.
Live
Encryption · at rest & in transit
TLS 1.3 in transit, industry-standard symmetric ciphers at rest, KMS-managed keys.