“When data is structured,
it supports more than compliance
- it supports growth”
From Questions to Clarity
How is KEYSTONE different from other compliance platforms?
Most compliance solutions are built to address a specific regulation or reporting requirement.
KEYSTONE takes a data-first approach, creating a structured product data foundation that supports multiple compliance needs and can adapt to future regulations as they emerge.
Developed by STUDIO 9 and REVERA, KEYSTONE is built on decades of hands-on supply chain and product expertise, combining compliance capabilities with a practical understanding of how data flows across complex value chains.
How can we evaluate whether KEYSTONE is right for us?
The best starting point is a demo and discovery session. This allows STUDIO 9 and REVERA to understand your current data landscape, reporting requirements, supplier structure, and operational challenges, and demonstrate how KEYSTONE can fit into your existing setup.
Does KEYSTONE replace our existing systems?
Not necessarily.
KEYSTONE is designed to work alongside existing systems and improve the way product and supplier data is collected, structured, and maintained. The goal is to strengthen your data foundation rather than force a complete system replacement.
Who owns KEYSTONE?
KEYSTONE is operated by REVERA Limited, which owns the platform and all associated intellectual property, including all back-end source code, technical infrastructure, hosting and maintenance, and related documentation.
STUDIO 9 is your primary point of contact for KEYSTONE. We support implementation, manage product and compliance data, and help ensure the platform reflects both regulatory requirements and real-world supply chain needs.
Who owns our data?
You do.
All product, supplier, and business data you upload to KEYSTONE remains your property. Customer data is not transferred to STUDIO 9 or REVERA through use of the platform. You will have full control over your own data.
Can our data be used for other purposes?
No. Customer data is processed solely to provide and operate the agreed services.
Any use of aggregated and anonymised data for benchmarking or platform improvement is subject to contractual limitations, and individual customer information remains confidential.
How is the data secured?
KEYSTONE is supported by technical and organisational security measures including:
· Private account that only you can authorise accesses
· Industry standards database level and transmission encryption
· Access controls through role assignments
· Backup and recovery procedures in different locations within the EU
· System resilience measures
· Regular security testing
Independent audits such as ISO27001 reviews are also required regularly.
Where is the platform hosted?
KEYSTONE is hosted through approved cloud infrastructure providers within its sub-processor framework, including AWS servers located in Ireland, in accordance with applicable data protection and security requirements within the EU.
What happens if we decide to leave the platform?
Customers can export and retrieve their data in common formats such as Excel and JSON.
Upon termination, customer data is returned or deleted according to the applicable Data Processing Agreement and contractual obligations. Transition support is also available to help ensure continuity.
