Trust & farmer data

Farmers control their data. That's the point.

For you, it is risk reduction: a legal basis through consent, clear provenance, better quality — and no vendor lock-in.

In short

On Farmer1st, farmers control their data. Consent is recorded for each use, can be revoked for future uses, and farmers can see who uses what. Data can be hosted in its country of origin, is encrypted in transit and at rest, and every access is logged. National systems are integrated, not competed with.

01 — Three commitments

What does Farmer1st commit to on farmer data?

Farmer consent

Farmers decide what is shared, with whom and for what. Consent is recorded, not assumed.

In-country hosting

Data can be hosted in the country it comes from — national systems are integrated, not competed with.

Encrypted end to end

From the field device to the report, data is encrypted in transit and at rest.

AIOffline-first in the field, with AI added to support farmers and the teams who work with them.

03 — Residency & security

Where is the data hosted and how is it protected?

We describe principles here, not architecture. Details are shared with your security and legal teams when we work together.

Residency

Hosted where it belongs

Data can be hosted in the country it comes from, to meet national data-residency rules and the expectations of governments and farmers.

Encryption

In transit and at rest

Data is encrypted from the field device to the report, and while stored.

Access

Least privilege

Each organisation, team and user sees only what its role and the farmer's consent allow.

Audit

A complete audit trail

Who created, changed, accessed or shared a record, and when, is logged — so provenance can be proven to an auditor or a regulator.

04 — National systems

How does Farmer1st work with national traceability systems?

Where a country runs its own farmer registry or traceability system, Farmer1st integrates with it. We don't compete with it.

Integrated, not duplicatedData flows to and from the national system, so farmers are not registered twice and authorities keep their own reference.
Sovereignty respectedGovernments decide where national data is hosted and who can access it.
One field effortField agents collect once, and each actor — the state, buyers, programmes — receives what it is entitled to.
05 — Principles

Is Farmer1st aligned with GDPR?

Our data practices follow GDPR-aligned principles, applied to every country we work in, alongside local data-protection laws.

  • Lawful basis

    Consent or another clear legal basis for every processing purpose.

  • Purpose limitation

    Data collected for one purpose is not reused for another without a new basis.

  • Data minimisation

    We collect what the service needs, not everything that could be collected.

  • Rights of the people concerned

    Access, correction, deletion and objection, exercised through the organisation that collected the data or through us.

Bring your data-protection questions to the scoping conversation.

Tell us about your supply chain and your constraints, and we come back with a first sketch of your service.

FAQ

Frequently asked questions

Who owns farmer data on Farmer1st?

Farmers control data about themselves and their plots. Organisations use it under recorded consent for stated purposes, and keep ownership of their own commercial data.

Can a farmer withdraw consent?

Yes. Consent can be revoked for future uses at any time. Records that a law requires to be kept, such as submitted due diligence information, are retained as that law requires.

Can our data be hosted in a specific country?

Yes. Data can be hosted in the country it comes from, to meet national data-residency requirements. We agree hosting with you and, where relevant, with national authorities.

Can other buyers see our commercial data?

No. Prices, volumes and supplier relationships stay private to your organisation. Your farmer registry and plot polygons stay private too. On the pre-competitive network, something is pooled only if you and the other buyers decide so, such as fraud detection across buyers, on terms you set together.

How does consent help with EUDR and CSDDD?

Recorded consent gives you a legal basis for processing farmer data, and the audit trail shows where each piece of evidence came from. Both reduce the risk that your due diligence rests on data you cannot account for.