Trax Image Recognition (Trax IR)

by Trax Retail

AI Application

Low Confidence

Trax Image Recognition (Trax IR) is a computer vision service for retail execution. Field reps photograph shelves, coolers, displays, back bars or drink menus with the Trax or Planorama app (and, since the February 2026 merger, through FORM's GoSpotCheck), and deep-learning models identify each SKU to report on-shelf availability, voids, share of shelf, price tags, promotional and planogram compliance and competitor presence. Recognition runs in the vendor cloud ('Cloud IR') or on the device with augmented reality ('On-Device IR'). Outputs feed KPI dashboards, Perfect Store scores, field team performance views and an 'AI-powered Next Best Action' list that tells each sales rep what to fix. Users are CPG manufacturers (vendor names Unilever, AB InBev, Heineken, Sanofi) and retailers; integrations include APIs, SDKs and a Salesforce Consumer Goods Cloud connector. The vendor reports 96% accuracy, 55 patents and customers in more than 80 countries; these are vendor statements. The image recognition business was acquired by a Gemspring Capital affiliate and merged with FORM in February 2026. Risk rationale: rated medium. The core function, recognising products on shelves, is not an Annex III use case under the EU AI Act and the main data is commercial (product images and sales KPIs), so on its own it would be low. It is raised to medium for three reasons: (1) the platform links store-visit KPIs, image quality, timing and optional precise geolocation to individual field reps and offers 'field team performance' views, so a customer can use it to monitor and evaluate workers, which moves toward Annex III point 4(b) territory if outputs inform task allocation, appraisal or termination; (2) in-store photos can incidentally capture shoppers or staff, and the vendor publishes nothing on face blurring or how such images are handled; (3) assurance is thin in public: no SOC 2 or ISO 27001 evidence, no public DPA or sub-processor list, and ownership, contracting entity and hosting are in transition after the merger. Positives: the privacy policy is detailed, sets a 24-month default retention for processor data, names an EU main establishment (CVDM Solutions SAS, Paris) and relies on SCCs plus EU-U.S. DPF certification. The rating would fall to low if the deployment only uses product-level KPIs with geolocation off and no per-rep performance scoring, and the vendor provides a current SOC 2 or ISO 27001 report. It would rise to high if per-rep outputs are used for performance evaluation, pay or disciplinary decisions in the EU.