TDM readiness assessment

Runs in your browser. Nothing you enter is sent anywhere or stored on a server, and no account is needed.

Discovery and classification

Do you know which columns in your test-data sources hold sensitive data? No inventory A spreadsheet for some systems A maintained inventory for most systems Automated discovery with reviewed findings for every source

When a new column appears in a source, how quickly is it classified? We find out when something breaks At the next manual review Within the next refresh cycle Before the next dataset is built (drift blocks the build)

Masking and privacy

Do non-production environments contain unmasked copies of production data? Yes, routinely In some environments Only by approved exception Never

Does the same source value mask to the same output across tables and systems? No — each script masks differently Within one database only Across most systems Across all systems, with keys held by us

Subsetting and referential integrity

How do you reduce data volume for test environments? We copy everything Ad-hoc WHERE clauses per table Scripted subsets that follow some relationships Entity-based subsets that follow every relationship

Are test datasets checked for dangling references before use? No Occasionally, by hand Automatically for key tables Automatically for every relationship, and failures block delivery

Provisioning and refresh

How do testers get a fresh dataset? A ticket to a DBA team, days or weeks A ticket, fulfilled within a day or two Self-service for some datasets Self-service requests governed by policy and approvals

Is there a defined refresh cadence per environment? No — data is refreshed when someone complains One cadence for everything A cadence for most environments A cadence per environment tier, with versioned rollback

Governance and evidence

Is a dataset certified (masking coverage, integrity, quality) before it is used? No A manual sign-off Automated checks for some gates Automated gates; failed datasets cannot be provisioned

Could you show an auditor who requested which dataset, under which policy version? No From emails and tickets, with effort From system logs From a tamper-evident audit trail with evidence per dataset

Automation and CI/CD

Can a CI/CD pipeline request or refresh the test data it needs? No — data setup is manual Via scripts that need manual fixes For some pipelines Yes, through an API or CLI with policy enforcement

Do you generate synthetic data for cases production data does not cover? No Hand-written fixtures Generated for some scenarios Scenario-driven generation (edge cases, negative tests, volume)

Your results

Answer at least one question to see a score.

See these practices working

The synthetic interactive demo walks through discovery, subsetting, masking, certification and provisioning with synthetic data. When you are ready to try it on your own systems, start free.