Industry packs

Financial Services industry pack

Account, card and statement test data that still reconciles.

Synthetic banking, cards, lending, payments and fraud test data with linked masking

Fully self-service (journey proven end to end) Version 2.1.0 · Available in paid plans

The full Financial Services 2.1.0 journey — from the public pack page through the synthetic sandbox, signup, activation, agent and source setup, scenario, masking and subsetting, certification and provisioning to evidence export — was verified end to end on a local real-component stack (the real control plane, agent, engine, sandbox runner, website and console built from source, with synthetic data) on 2026-10-09. Published agents 0.4.4, 0.4.3, 0.4.2, 0.4.1 and 0.4.0 run this pack version.

No call and no credit card needed. Prefer a conversation? Request a demo (optional). Missing something? Request a feature.

Printed financial charts, a notebook and a calculator on an office desk

Included in Free Trial, Developer, Team, Business, Enterprise and Private Cloud / Self-Hosted. You can activate it for your organization yourself in the console; no call is needed.

Problems this pack solves

Masked data that still joins across 5 systems

9 cross-system relationships link cards, core_banking, fraud, lending and payments; the pack's masking keeps one pseudonym per identity on every side. For example, core_banking.customers.customer_id and cards.cards.customer_ref get the same pseudonym.

The cases production samples rarely contain

9 ready-made scenarios generate them on demand, for example: outgoing payments that fail or are returned, each with a failure reason; bursts of sub-unit probe transactions seconds apart followed by a large spend; accounts moving to frozen, dormant or closed with a recorded change time.

Sensitive fields found and masked before anyone sees them

34 columns across 10 entities are classified (credential, direct identifier, financial, payment, PII, quasi identifier and sensitive) and covered by 3 masking templates you review and approve.

Evidence that each dataset is fit to use

2 certification presets check masking coverage, referential integrity, orphans and row counts before a dataset can be provisioned; a failed dataset is never provisioned.

Entities and relationships

10 entities across 5 source systems, generated from the pack’s own entity model.

Entity graph of the Financial Services pack10 entities in 5 systems (core_banking, cards, lending, payments, fraud) linked by 13 relationships, 9 of them across systems. The table after the graph lists every relationship.core_bankingcardslendingpaymentsfraudCustomer (core_banking.customers)Customercore_banking.customersAddress (core_banking.addresses)Addresscore_banking.addressesAccount (core_banking.accounts)Accountcore_banking.accountsBeneficiary (core_banking.beneficiaries)Beneficiarycore_banking.beneficia…Card (cards.cards)Cardcards.cardsLoan (lending.loans)Loanlending.loansMerchant (payments.merchants)Merchantpayments.merchantsTransaction (payments.transactions)Transactionpayments.transactionsPayment (payments.payments)Paymentpayments.paymentsFraudCase (fraud.fraud_cases)FraudCasefraud.fraud_cases
Arrows point from the referencing entity to the one it references. Solid: a foreign key inside one system. Dashed: a cross-system relationship — the pack keeps the same pseudonym on both sides, so masked data still joins.
All 13 relationships as a table
Relationships of the Financial Services pack
EntityReferencesColumnsKind
AddressCustomercustomer_id → customer_idWithin a system
AccountCustomercustomer_id → customer_idWithin a system
BeneficiaryAccountaccount_id → account_idWithin a system
TransactionMerchantmerchant_id → merchant_idWithin a system
CardAccountaccount_ref → account_idAcross systems (pack relationship template)
CardCustomercustomer_ref → customer_idAcross systems (pack relationship template)
LoanCustomercustomer_ref → customer_idAcross systems (pack relationship template)
TransactionAccountaccount_ref → account_idAcross systems (pack relationship template)
TransactionCardcard_ref → card_idAcross systems (pack relationship template)
PaymentAccountaccount_ref → account_idAcross systems (pack relationship template)
PaymentBeneficiarybeneficiary_ref → beneficiary_idAcross systems (pack relationship template)
FraudCaseTransactiontransaction_ref → transaction_idAcross systems (pack relationship template)
FraudCaseCustomercustomer_ref → customer_idAcross systems (pack relationship template)

Realistic synthetic records

Synthetic data. Every record on this page is synthetic, generated from a fixed seed by the pack's own generator; masked values come from the real masking engine.

Customer — core_banking.customers (synthetic)
customer_id sensitivefirst_name sensitivelast_name sensitiveemail sensitivephone sensitivebirth_date sensitivetax_id sensitivesegmentkyc_statuscustomer_since
CUS00000001CelethIvermereceleth.pemridge6056@example.com555-056-10601962-12-15TIN-ZZ-0145011RETAILPENDING_REVIEW2023-10-26
CUS00000002HeselZephholthesel.fairworth9409@example.org555-009-88941951-07-30TIN-ZZ-3915991RETAILVERIFIED2019-12-27

Masking: before and after

Template Linked banking test data (FS_LINKED_TEST_DATA) applied to a synthetic Customer record from core_banking.customers.

Synthetic Customer record before and after masking
ColumnClassified asBefore (synthetic)After masking
customer_idDirect identifierCUS00000001CUS39407502
first_namePII, Direct identifierCelethHesira
last_namePII, Direct identifierIvermereEldbrook
emailPII, Direct identifierceleth.pemridge6056@example.combrael.oakbrook4399@example.com
phonePII, Direct identifier555-056-1060555-020-6362
birth_datePII, Quasi identifier1962-12-151962-11-18
tax_idDirect identifier, PIITIN-ZZ-0145011CUT-KL-9747159

Same pseudonym in two systems. The identifier CUS00000001 appears in core_banking.customers.customer_id and in cards.cards.customer_ref. Both become CUS39407502, so the masked systems still join (relationship FS_CARD_CUSTOMER).

Masked with a fixed public sample key so this example is reproducible; your data is masked with your own key, referenced from your secret store.

Synthetic scenarios you can run

11 runnable scenarios. Run any of them in the hosted synthetic sandbox, or preview them in your browser without an account.

Negative tests, kept apart. This scenario produces deliberately broken data for error handling and never passes certification as valid data:

  • FS_BROKEN_REFERENCES — Dangling cross-system references and invalid values for error-handling tests

Sample schemas and representative outputs

The schema the pack expects in each system (also as CREATE TABLE DDL in the downloads). A run produces a masked or synthetic dataset with the same tables, a certification report with the gates of the chosen preset, and an evidence manifest with checksums — the rows stay in your environment.

Customer — core_banking.customers · 10 columns

A retail or small-business banking customer (the natural subset root).

ColumnTypeRequiredSensitive classes
customer_id (key)VARCHAR(12)YesDirect identifier
first_nameVARCHAR(64)YesPII, Direct identifier
last_nameVARCHAR(64)YesPII, Direct identifier
emailVARCHAR(128)NoPII, Direct identifier
phoneVARCHAR(32)NoPII, Direct identifier
birth_dateDATENoPII, Quasi identifier
tax_idVARCHAR(16)NoDirect identifier, PII
segmentVARCHAR(16)Yes—
kyc_statusVARCHAR(16)Yes—
customer_sinceDATEYes—
Address — core_banking.addresses · 8 columns

Postal addresses of a customer (residential, mailing).

ColumnTypeRequiredSensitive classes
location_id (key)BIGINTYes—
customer_idVARCHAR(12)YesDirect identifier
usage_typeVARCHAR(12)Yes—
street_addressVARCHAR(128)YesPII, Quasi identifier
cityVARCHAR(64)YesQuasi identifier
postal_codeVARCHAR(10)NoPII, Quasi identifier
country_codeVARCHAR(2)Yes—
is_primaryBOOLEANYes—
Account — core_banking.accounts · 11 columns

A deposit or credit account held by a customer.

ColumnTypeRequiredSensitive classes
account_id (key)BIGINTYes—
customer_idVARCHAR(12)YesDirect identifier
account_numberVARCHAR(12)YesFinancial, Direct identifier
routing_codeVARCHAR(12)YesFinancial
product_typeVARCHAR(16)Yes—
statusVARCHAR(12)Yes—
currency_codeVARCHAR(3)Yes—
available_balanceDECIMAL(14,2)YesFinancial, Sensitive
overdraft_limitDECIMAL(14,2)YesFinancial
opened_onDATEYes—
status_changed_atTIMESTAMPNo—
Beneficiary — core_banking.beneficiaries · 6 columns

A saved payee of an account (outgoing payments go to beneficiaries).

ColumnTypeRequiredSensitive classes
beneficiary_id (key)BIGINTYes—
account_idBIGINTYes—
beneficiary_nameVARCHAR(96)YesPII, Direct identifier
beneficiary_ibanVARCHAR(34)YesFinancial, Direct identifier
beneficiary_bank_codeVARCHAR(11)YesFinancial
created_atTIMESTAMPYes—
Card — cards.cards · 10 columns

A debit or credit card issued against an account.

ColumnTypeRequiredSensitive classes
card_id (key)BIGINTYes—
account_refBIGINTYes—
customer_refVARCHAR(12)YesDirect identifier
card_numberVARCHAR(19)YesPayment, Direct identifier
cardholder_nameVARCHAR(96)YesPII, Direct identifier
card_expiryVARCHAR(5)YesPayment
cvvVARCHAR(4)NoPayment, Credential
card_typeVARCHAR(8)Yes—
statusVARCHAR(12)Yes—
issued_onDATEYes—
Loan — lending.loans · 11 columns

A consumer or small-business loan.

ColumnTypeRequiredSensitive classes
loan_id (key)BIGINTYes—
customer_refVARCHAR(12)YesDirect identifier
loan_numberVARCHAR(14)YesFinancial, Direct identifier
product_typeVARCHAR(16)Yes—
principalDECIMAL(14,2)YesFinancial
outstanding_balanceDECIMAL(14,2)YesFinancial, Sensitive
interest_rateDOUBLEYes—
statusVARCHAR(12)Yes—
days_past_dueINTYes—
originated_onDATEYes—
maturity_onDATEYes—
Merchant — payments.merchants · 5 columns

A card-accepting business (reference data; invented names and category codes).

ColumnTypeRequiredSensitive classes
merchant_id (key)VARCHAR(12)YesQuasi identifier
merchant_nameVARCHAR(64)Yes—
merchant_category_codeVARCHAR(4)Yes—
merchant_cityVARCHAR(64)YesQuasi identifier
country_codeVARCHAR(2)Yes—
Transaction — payments.transactions · 10 columns

A card or account transaction.

ColumnTypeRequiredSensitive classes
transaction_id (key)BIGINTYes—
account_refBIGINTYes—
card_refBIGINTNo—
merchant_idVARCHAR(12)NoQuasi identifier
amountDECIMAL(14,2)Yes—
currency_codeVARCHAR(3)Yes—
transaction_typeVARCHAR(12)Yes—
statusVARCHAR(14)Yes—
channelVARCHAR(12)Yes—
occurred_atTIMESTAMPYes—
Payment — payments.payments · 9 columns

An outgoing credit transfer from an account to a beneficiary.

ColumnTypeRequiredSensitive classes
payment_id (key)BIGINTYes—
account_refBIGINTYes—
beneficiary_refBIGINTNo—
amountDECIMAL(14,2)Yes—
currency_codeVARCHAR(3)Yes—
payment_railVARCHAR(12)Yes—
statusVARCHAR(12)Yes—
failure_reasonVARCHAR(32)No—
initiated_atTIMESTAMPYes—
FraudCase — fraud.fraud_cases · 10 columns

A fraud investigation or chargeback dispute on a transaction.

ColumnTypeRequiredSensitive classes
case_id (key)BIGINTYes—
transaction_refBIGINTYes—
customer_refVARCHAR(12)YesDirect identifier
case_typeVARCHAR(20)Yes—
statusVARCHAR(12)Yes—
reason_codeVARCHAR(8)Yes—
disputed_amountDECIMAL(14,2)YesFinancial
opened_atTIMESTAMPYes—
resolved_atTIMESTAMPNo—
analyst_notesVARCHAR(400)NoSensitive

Compatible connectors

Verified with this pack version: PostgreSQL and Local files (Parquet / CSV). 25 more connectors are compatible by capability: they support what the pack needs, but have not been verified with this pack yet.

ConnectorStatus with Financial Services
Local files (Parquet / CSV)Verified with this pack
PostgreSQLVerified with this pack
Amazon DynamoDBCompatible by capability (not yet verified with this pack)
Amazon RedshiftCompatible by capability (not yet verified with this pack)
Amazon S3 / S3-compatible storageCompatible by capability (not yet verified with this pack)
Apache KafkaCompatible by capability (not yet verified with this pack)
Azure Blob Storage / Data Lake StorageCompatible by capability (not yet verified with this pack)
Azure Cosmos DBCompatible by capability (not yet verified with this pack)
Azure Synapse AnalyticsCompatible by capability (not yet verified with this pack)
CockroachDBCompatible by capability (not yet verified with this pack)
DatabricksCompatible by capability (not yet verified with this pack)
Generic SQL (SQLAlchemy)Compatible by capability (not yet verified with this pack)
Google BigQueryCompatible by capability (not yet verified with this pack)
HTTP APIsCompatible by capability (not yet verified with this pack)
IBM Db2Compatible by capability (not yet verified with this pack)
IBM InformixCompatible by capability (not yet verified with this pack)
Mainframe files (EBCDIC / copybook)Compatible by capability (not yet verified with this pack)
MariaDBCompatible by capability (not yet verified with this pack)
Microsoft SQL ServerCompatible by capability (not yet verified with this pack)
MongoDBCompatible by capability (not yet verified with this pack)
MySQLCompatible by capability (not yet verified with this pack)
Oracle DatabaseCompatible by capability (not yet verified with this pack)
Parquet filesCompatible by capability (not yet verified with this pack)
SalesforceCompatible by capability (not yet verified with this pack)
ServiceNowCompatible by capability (not yet verified with this pack)
SnowflakeCompatible by capability (not yet verified with this pack)
SQLite (developer evaluation)Compatible by capability (not yet verified with this pack)

Prerequisites and expected setup effort

You need

  • A DataNivra account; the Free Trial includes this pack.
  • One DataNivra agent inside your network (outbound HTTPS only) that ships Financial Services 2.1.0.
  • Read-only access to a compatible source (verified with this pack: PostgreSQL, Local files (Parquet / CSV)).
  • A non-production target environment the agent may write test data to.
  • A masking key in your own secret store, referenced as vault://…, azure-kv://… or env://… (DataNivra only ever sees the reference).
  • For production sources, a second person who approves policies (separation of duties).

A DataNivra agent that reports its installed industry packs (releases after agent 0.3.0); the control plane runs a pack job only on an agent holding the exact active pack version with the catalogued integrity digest.

Expected setup effort (estimates)

StepEstimate
Try the synthetic sandbox
No install: sign up and open the sandbox.
Minutes (estimate)
Install (or reuse) the agent
One Docker command or a Helm chart; outbound HTTPS only.
Under an hour (estimate)
Connect a source
Register a read-only source through the existing connector workflow.
Under an hour (estimate)
Review and approve policies
Create drafts from the Financial Services templates, review and approve them.
Under an hour (estimate)
First certified dataset
Run the first job; certification and evidence are produced automatically.
Minutes (estimate)

Certification presets in plain language

FS_STRICT

Every gate; full masking coverage; zero orphaned accounts, cards, payments or cases; exact row counts. Default for masked banking test data.

  • Masking coverage of at least 100% of sensitive columns
  • No orphaned child records
  • Empty-value ratio may rise by at most 5%
  • Row counts must match exactly
16 gates it requires
  • POLICY_COVERAGE: every sensitive column is covered by an approved policy
  • MASKING_COMPLETION: masking finished on every covered column
  • REFERENTIAL_INTEGRITY: every reference still points at an existing record
  • SCHEMA_VALIDATION: the output schema matches the source schema
  • DATA_QUALITY: empty-value ratios stay within the preset’s drift limit
  • ROW_COUNT_RECONCILIATION: row counts match the plan within the tolerance
  • ORPHAN_DETECTION: no child record lost its parent
  • PROVENANCE: every row is tagged masked or synthetic
  • MANIFEST: a manifest lists every output table with checksums
  • POLICY_VERSION: the exact approved policy versions are recorded
  • ENGINE_VERSION: the engine version is recorded
  • CHECKSUMS: output checksums are recorded for later verification
  • IDENTITY_CONSISTENCY: linked identifiers got the same pseudonym in every system
  • SOURCE_READ_ONLY: the source was only read, never written
  • EGRESS_GUARD: no row-level data left the agent
  • CONNECTOR_HEALTH: the connectors stayed healthy during the run

FS_SCENARIO_TESTING

Every gate, with slightly relaxed NULL-ratio drift for scenario datasets whose business states (failed payments, closed accounts) leave optional fields empty.

  • Masking coverage of at least 100% of sensitive columns
  • No orphaned child records
  • Empty-value ratio may rise by at most 15%
  • Row counts must match exactly
16 gates it requires
  • POLICY_COVERAGE: every sensitive column is covered by an approved policy
  • MASKING_COMPLETION: masking finished on every covered column
  • REFERENTIAL_INTEGRITY: every reference still points at an existing record
  • SCHEMA_VALIDATION: the output schema matches the source schema
  • DATA_QUALITY: empty-value ratios stay within the preset’s drift limit
  • ROW_COUNT_RECONCILIATION: row counts match the plan within the tolerance
  • ORPHAN_DETECTION: no child record lost its parent
  • PROVENANCE: every row is tagged masked or synthetic
  • MANIFEST: a manifest lists every output table with checksums
  • POLICY_VERSION: the exact approved policy versions are recorded
  • ENGINE_VERSION: the engine version is recorded
  • CHECKSUMS: output checksums are recorded for later verification
  • IDENTITY_CONSISTENCY: linked identifiers got the same pseudonym in every system
  • SOURCE_READ_ONLY: the source was only read, never written
  • EGRESS_GUARD: no row-level data left the agent
  • CONNECTOR_HEALTH: the connectors stayed healthy during the run

Activate it and create your first certified dataset

Seven steps in the console, each linked below. Nothing needs DataNivra staff.

  1. Activate the pack for your organization

    Activation checks your plan, the pack's integrity digest and its dependencies, then enables Financial Services 2.1.0.

    Open pack activation in the console

  2. Install or reuse your agent

    One agent runs every pack you activate; it must report this pack version. Upgrade it if it does not.

    Install the agent in the console

  3. Connect a compatible source

    Start with a connector verified with this pack: PostgreSQL, Local files (Parquet / CSV).

    Connect a source in the console

  4. Create policies from the pack templates

    Create drafts from Linked banking test data, Unlinked analytics extract, Linked test data without card data; a second person approves them (separation of duties).

    Create policies from templates in the console

  5. Request your first dataset

    Choose a scenario such as Everyday banking (FS_EVERYDAY_BANKING), the subset size and relationship closure.

    Request a dataset in the console

  6. Certify

    The run is certified against a preset such as FS_STRICT; a failed dataset is never provisioned.

    See certification evidence in the console

  7. Provision and keep the evidence

    Provision the certified dataset to a non-production target, download the evidence and schedule refreshes.

    Provision the dataset in the console

Downloads

Version 2.1.0, 62 files (200.6 KB), all synthetic and generated from the pack itself. Every file’s SHA-256 is listed in MANIFEST.json.

Start here (2)
Entity–relationship diagram (2)
Sample schemas (6)
Policy templates (9)
API, CLI, SDK and CI/CD examples (10)
Synthetic sample data (CSV, JSON, Parquet) (31)

Troubleshooting

The reason codes you can meet on the way, with the recovery step. Every code is also in the error-code catalog.

SANDBOX_PACK_NOT_OFFERED — Synthetic estate not offered
A requested synthetic estate (industry pack) is not available in the hosted sandbox. What to do: Start the sandbox with the default estates.
ENTITLEMENT_REQUIRED — Plan does not include this
Your plan does not include this feature or industry pack. What to do: Upgrade in Billing & Plan.
PACK_INTEGRITY_UNVERIFIED — Pack integrity not verified
This pack version was registered without an integrity digest, so it cannot be activated (fail closed). What to do: Ask your operator to re-register the pack catalogue with the current control-plane image (register-pack), then activate again.
PACK_DEPENDENCY_INACTIVE — Required pack not active
This pack depends on another industry pack that is not active for your organization. What to do: Activate the packs this pack depends on first, then activate it again.
AGENT_PACK_MISSING — No agent can run this industry pack
The job's agent does not report the pack (older agents report no packs at all), so the job was not sent. What to do: Upgrade the agent to a release that reports its installed packs and ships this pack, then run the request again.
AGENT_PACK_VERSION_INCOMPATIBLE — Industry pack version differs on the agent
The agent holds a different version of the pack than the one the job was approved for. What to do: Deploy an agent with the pack's active version, or roll the pack back in Industry packs.
AGENT_PACK_INTEGRITY_MISMATCH — Agent pack differs from the catalogue
The agent reports the pack's version with a different integrity digest than the catalogued one, so the job was not sent. What to do: Redeploy the agent from the official signed image for this release, then run the request again.
PACK_TEMPLATES_UNAVAILABLE — Pack templates not registered
This pack version was registered without its policy templates. What to do: Ask your operator to re-register the pack catalogue (register-pack); create policies manually meanwhile.
PACK_TEMPLATE_KEY_REF_REQUIRED — Masking key reference required
A selected template keeps identities linked across systems and needs your masking key reference. What to do: Provide key_ref, e.g. vault://your-vault/tdm-masking-key, then create the drafts again.
PACK_NOT_ENABLED — Industry pack not enabled
The industry pack is not enabled for this tenant. What to do: Enable the pack (if your plan includes it).

Frequently asked questions

Are the Financial Services records on this page real?
No. Every record on this page is synthetic, generated from a fixed seed by the pack's own generator; masked values come from the real masking engine. The masking example uses a fixed public sample key; your own data is masked with a key from your secret store.
Can I activate the Financial Services pack myself?
Included in Free Trial, Developer, Team, Business, Enterprise and Private Cloud / Self-Hosted. You can activate it for your organization yourself in the console; no call is needed.
Which databases and files does the Financial Services pack work with?
Verified with this pack version: PostgreSQL and Local files (Parquet / CSV). 25 more connectors are compatible by capability: they support what the pack needs, but have not been verified with this pack yet.
How long does a first certified Financial Services dataset take?
Estimates, not guarantees — try the synthetic sandbox: minutes; install (or reuse) the agent: under an hour; connect a source: under an hour; review and approve policies: under an hour; first certified dataset: minutes.
Which test scenarios does the Financial Services pack include?
11 runnable scenarios (everyday banking, failed payments, duplicate transactions, unusual sequences and more), plus 1 negative-test scenario kept apart from valid data.
Do Financial Services rows leave my network?
No. The DataNivra agent runs inside your environment: it reads the source, masks, subsets, generates and certifies there, and sends only metadata, aggregate counts and evidence to the DataNivra control plane (customer-resident processing, zero raw-production-data egress).

Learn the concepts, then come back to activate

Regulatory context

Supports PCI DSS–oriented and privacy programmes by keeping cardholder and customer data inside your environment. It does not certify any system for PCI DSS.

No call and no credit card needed. Prefer a conversation? Request a demo (optional). Missing something? Request a feature.