A Wherefour alternative built in Europe, for European producers.
Wherefour is a capable, food-focused traceability platform, genuinely closer in concept to what Keystone does than either MRPeasy or a general ERP. The honest differences are geography, compliance framing and pricing model. Wherefour is a US-first product, FSMA-oriented (FDA), hosted in US data centres, priced in USD, and its retailer templates target Whole Foods / US grocery. For UK and Irish food producers, that translates to a product that solves 80% of your needs but requires custom configuration for FSAI, BRCGS §3.9, SFPA, EU food safety regulations evidence, and the specific retailer formats you actually ship into (Tesco, SuperValu, Musgrave, M&S, Aldi, Lidl). Keystone is EU-hosted (AWS Ireland), GDPR-native, priced in EUR, and built with a working Irish creamery as founding partner.
AWS Ireland (eu-west-1, Dublin), data never leaves the EU
Why "EU-hosted, GDPR-native" matters more than it used to.
For a UK or Irish food producer supplying UK/EU retailers, data residency and GDPR handling are increasingly on retailer audit checklists, not just legal to-dos. A US-hosted platform creates paperwork you don't need: Standard Contractual Clauses, Data Transfer Impact Assessments, a legal-review conversation every time you sign a new retailer. Keystone runs entirely in AWS Ireland (Dublin), operates under Irish law, has a named Data Protection Lead, and has zero data-transfer surface. That's not a marketing bullet, it's a friction-remover in the retailer onboarding conversation.
Compliance-framing differences
FSMA vs FSAI / BRCGS.
Wherefour is FSMA-first
The traceability model, audit log structure and reporting are shaped around FDA's Food Safety Modernization Act. Excellent for US producers, a slight-but-real translation cost for EU/UK producers.
Keystone is FSAI + BRCGS first
Everything from the audit log format to the mass-balance test to the mock-recall drill is designed against BRCGS traceability standards, §3.11, §4.7 and §5.4, and against Ireland's FSAI + SFPA inspection playbook.
Wherefour lists in USD ($/user/mo); the UK/Irish buyer thinks in EUR/GBP. Keystone is €790/month flat, published on the pricing page.
Head-to-head
Where each product wins.
When Wherefour is still the right call
If you sell primarily into the US market.
If your customer base is majority US, Whole Foods, KeHE, UNFI, US foodservice, Wherefour has the retailer templates, the FDA-framing and the domestic support team you'll benefit from. This alternative is specifically for producers whose customer list is dominated by UK and Irish retailers: Tesco, SuperValu, Musgrave, M&S, Aldi, Lidl, Ocado, Dunnes, Centra, SPAR. If that describes you, an EU-hosted product with UK/Irish retailer templates and BRCGS §3.9-aligned audit-log design is going to fit better and be cheaper.
FAQ
Questions buyers actually ask.
How does Keystone pricing compare to Wherefour?
Wherefour publishes limited pricing publicly, typical quotes we see for a 10-user food operation land in the $600–1,200/month range depending on modules. Keystone is €790/month flat with all modules and unlimited reasonable-use users included.
Can I import Wherefour data into Keystone?
Yes, Wherefour supports CSV export of items, batches, customers, orders and receiving records. All import through our standard data migration workflow. 12 months of historical data is included in implementation.
Is Keystone hosted in the EU?
Yes, AWS Ireland (eu-west-1, Dublin region). Each tenant runs in its own dedicated server with its own database. Encrypted at rest, TLS 1.3 in transit, daily encrypted backups. Or we can deploy inside your own AWS account using our IaC templates.
Do you cover FSAI + BRCGS audits like Wherefour covers FSMA?
Yes, Keystone is designed against BRCGS (§3.9 traceability, §3.11 recall, §4.7 environmental monitoring, §5.4 product control), plus FSAI mass-balance and recall-drill workflows, and EU food safety regulations (Article 18). Full compliance walk-through available on discovery call.
Can we run both during migration?
Yes, for the 30-day pilot you can run Keystone alongside Wherefour and compare directly on your real production data. €2,500 pilot fee, 50% refundable if you decide to stay with Wherefour.
Ready to see if Keystone fits your floor?
20-minute discovery call. No sales pitch. Written scope within 48 hours if we fit, referral to someone better if we don't.
Enterprise-grade controls as standard, encryption, MFA for every user, tenant isolation and immutable audit trails, on EU cloud or your own servers. Privacy queries go to privacy@cloudvoro.com. Sub-processor list at /legal/sub-processors. Full security posture at /site/security.
Live
Hosted in EU / Ireland, or on-premise
Customer data resides on AWS Ireland (eu-west-1) and never leaves the EU. Local on-premise deployment available where policy requires it.
Live
GDPR · Privacy Contact named
Internal Data Protection Lead handles subject access requests. Owner is ADPO Ireland member.
Live
MFA for every user
TOTP multi-factor authentication across all roles, with rate limiting, brute-force lockout and reCAPTCHA bot protection on public forms.
Live
ISO 27001 · aligned controls
Security controls mapped to the ISO/IEC 27001:2022 Annex A framework, access management, encryption, logging, incident response.
Live
NIS2 · supporting evidence
Tenant isolation, MFA and immutable audit trails give customers in NIS2 scope direct supporting evidence for their obligations.
Live
Encryption · at rest & in transit
TLS 1.3 in transit, industry-standard symmetric ciphers at rest, KMS-managed keys.