Buyer's guide
Ten test data management tools from 2026 buyer lists and review sites, compared on mainframe, SAP and core banking, document masking and where they run. Synthesized publishes this guide and is one of the tools listed; claims about other vendors are sourced and dated at the end of the page.
Synthesized first, then alphabetical. Facts as stated on each vendor's own pages in November 2026; "not stated" means we could not find it there.
| Best for | Mainframe | SAP | Documents and messages | Where it runs | |
|---|---|---|---|---|---|
| Synthesized | SAP, Temenos, Avaloq and other banking apps, with documents masked under the same policy | Db2 for z/OS 13+, Db2 for i, VSAM | Application level (S/4HANA, ECC); nothing installed in SAP | Yes: PDFs, scans, email, chats, transcripts | On-premises, including air-gapped, or SaaS |
| Broadcom Test Data Manager | One suite for large estates with mainframe | Db2, IMS, IDMS, VSAM | Database level (JDBC/ODBC) | Not stated | On-premises |
| DATPROF | Db2 and SQL estates that want predictable licensing | Db2 for z/OS 13+, Db2 for i | Not stated | File masking (xPrivacy) | On-premises; Runtime on AWS (bring your own licence) |
| Delphix (Perforce) | Full-size virtual copies on demand | Db2 z/OS, Db2 for i, mainframe data sets | Database level; SAP-certified integration (2021) | Structured files only (delimited, XML, JSON, Parquet) | Customer-managed on most clouds and hypervisors |
| GenRocket | Synthetic data, including mainframe formats | Db2 z/OS, IMS, VSAM, COBOL copybooks | Loads S/4HANA through OData | Not stated | Design in SaaS; generation engine on-premises |
| IBM Optim | Long-standing z/OS estates | Db2 z/OS, IMS, VSAM | Not stated | Not stated | On-premises, including z/OS |
| Informatica TDM (Salesforce) | Existing Informatica customers | VSAM, IMS, Adabas through PowerExchange | Not stated | Not stated | On-premises |
| K2view | Self-service reservation, versioning and rollback | z/OS through Rocket Software | Named; connection level not stated | Through a third-party partner, per K2view | SaaS, self-hosted or air-gapped |
| Tonic | A self-serve start and document redaction in 50+ languages | Not named | Database level | Yes (Tonic Textual, self-serve) | Tonic Cloud; self-hosted on Enterprise plans |
| XDM (UBS Hainer) | Mainframe-heavy estates | Db2 z/OS, IMS, VSAM | Not stated | Not stated | Mainframe, distributed and cloud |
If something about a vendor has changed, tell us and we will update this page.
Most bank evaluations turn on six questions. Ask every vendor the same ones, and test on a copy of your own data rather than a demo schema.
DORA's ICT risk rules (Article 16 of Regulation 2024/1774) say non-production environments should hold only anonymised, pseudonymised or randomised production data. A bank's procedures may allow real production data for specific test occasions, for limited periods, after approval and reporting to the ICT risk management function. GDPR and UK GDPR treat copying personal data into test as processing. Ask for evidence of what each run masked, not just a list of algorithms.
If Db2 z/OS, IMS or VSAM hold your customer data, check the connector list by name. For Temenos, Avaloq or SAP, check whether the tool understands the application or only its database tables.
A customer masked one way in the core system and another way in the CRM breaks end-to-end tests. Ask for deterministic masking across every system and file in scope.
KYC packs, statements, emails and contact-centre transcripts often sit beside the databases you mask. Check whether the tool masks them under the same policy, or whether you need a second product.
Many banks require tools to run inside their own network or air-gapped. Check whether the vendor's SaaS is the only option, and whether any data leaves your environment.
Look for self-service, an API and CI/CD integration, so each test run gets fresh data instead of waiting for a refresh ticket.
Masks, subsets and generates test data across SAP S/4HANA and ECC, core banking systems such as Temenos and Avaloq, Salesforce, Oracle and the databases behind them, including mainframe Db2 for z/OS 13 and later, Db2 for i and VSAM, with one replacement value per person across every system. Documents, emails, chats and call transcripts are masked under the same policy as the tables. It runs on-premises, including air-gapped sites, or as SaaS, and delivers data through an API, CI/CD pipelines, Tricentis Tosca and UiPath. At Deutsche Bank, the Credit Risk Technology team cut test data provisioning time by 80% (case study).
Watch for: there is no free tier (a free trial is on AWS Marketplace), and document support is delivered with Synthesized engineers today.
Formerly CA Test Data Manager. Covers profiling and PII discovery, masking, subsetting, synthetic generation, a self-service portal, virtual copies and a test data warehouse. On the mainframe it names Db2, IMS, IDMS and VSAM. SAP S/4HANA support works at database level through JDBC and ODBC.
Watch for: document masking is not stated and pricing is not public.
A Dutch vendor with separate products for masking and synthetic data (Privacy), subsetting (Subset), self-service and API delivery (Runtime), discovery (Analyze) and virtualization (Virtualize). Supports Db2 for z/OS 13 and later and Db2 for i. Licences are priced per module rather than by database size, there is a 14-day free trial, and ABN AMRO is a named customer.
Watch for: SAP support is not stated.
Virtualizes databases so teams get full-size, read-write copies they can refresh, rewind and branch, and masks them consistently across sources, including mainframe Db2 z/OS. Its SAP integration has been SAP-certified since 2021 and masks at database level. Perforce names BNP Paribas, Virgin Money and Mizuho Securities among its customers. See Synthesized vs Delphix.
Watch for: synthetic data is marked Early Access in its documentation, document masking is not stated, and a hosted SaaS is not stated.
Synthetic data first. It generates mainframe formats such as VSAM files and EBCDIC data from COBOL copybooks, masks Db2 z/OS and IMS data by replacing values with synthetic ones, and loads data into S/4HANA through OData. Test data is designed in a SaaS app, while the generation engine runs on your premises and only metadata leaves.
Watch for: less suited to teams that want masked copies of production; document masking is not stated.
Provisions complete business objects with relationships intact, right-sizes data and applies policy-based masking, with deep z/OS roots: Db2 z/OS, plus IMS, VSAM and sequential files treated as tables.
Watch for: the latest release we could confirm is 11.7.0.2 (November 2023), and IBM Client Engineering says its synthetic data product, Test Data Fabrication, is in maintenance mode.
Now part of Salesforce, which completed its acquisition of Informatica on 18 November 2025. Offers sensitive data discovery, subsetting, masking, rule-based generation, a self-service portal and a test data warehouse, with mainframe VSAM, IMS and Adabas sources through PowerExchange.
Watch for: SAP and document masking are not stated.
Organises test data by business entity, such as a customer with its accounts, and adds reservation, versioning and rollback in a self-service portal. Reaches z/OS data through Rocket Software and runs as SaaS, self-hosted or air-gapped. See Synthesized vs K2view.
Watch for: its SAP pages do not say how it connects, its own Tonic comparison says documents go through a third-party partner, and its AWS Marketplace listing starts at $120,000 a year.
Three products sold separately: Structural for databases, Textual for documents and audio, and Fabricate for generating data from scratch. Textual is self-serve and detects entities in 50+ languages, and Fabricate has a free plan. See Synthesized vs Tonic.
Watch for: Tonic describes its SAP support as database-level, mainframe connectors are not named, and self-hosting needs an Enterprise plan.
A German TDM platform covering masking, subsetting, synthetic generation and provisioning, with a self-service Data Shop and native connectors for Db2 z/OS, IMS and VSAM.
Watch for: SAP, document masking and pricing are not stated on its pages.
It depends on your estate. For mainframe-heavy banks, Broadcom, Delphix, DATPROF, GenRocket, IBM Optim, Synthesized and XDM name Db2 z/OS support. For full virtual copies, Delphix. For SAP and core banking applications such as Temenos and Avaloq, with documents masked under the same policy, on-premises or as SaaS, Synthesized. Shortlist two or three and test them on your own data.
Broadcom Test Data Manager, Delphix, DATPROF, GenRocket, IBM Optim, Synthesized and XDM name Db2 z/OS. Synthesized supports Db2 for z/OS 13 and later, Db2 for i and VSAM. Informatica reaches VSAM and IMS through PowerExchange, and K2view reaches z/OS through Rocket Software.
DORA's ICT risk rules (Article 16 of Regulation 2024/1774) say non-production environments should hold only anonymised, pseudonymised or randomised production data. A bank's procedures may allow real production data for specific test occasions, for limited periods, after approval and reporting to the ICT risk management function. So banks need masking they can evidence for every refresh, and a record of any exceptions. See DORA and test data and DORA requirements for SAP test data.
Some can. Synthesized masks PDFs, scans, emails, chats and call transcripts under the same policy as tables, and Tonic Textual redacts or synthesizes documents self-serve. Delphix masks structured files such as CSV, XML and JSON. For most other tools on this list, document masking is not stated.
All accessed 3 November 2026.
Synthesized:Test data management; TDM for SAP; Temenos; Avaloq; Unstructured data masking; Deutsche Bank case study; DORA and test data; Docs, Supported databases.
Broadcom:Test Data Manager solution brief; Mainframe solution brief; S/4HANA adoption.
DATPROF:Products; Privacy requirements; xPrivacy release information; Pricing; Financial services; ABN AMRO.
Delphix (Perforce):Perforce Delphix; Masking data source support; Supported file connectors; Synthetic Data docs; SAP-certified integration; Customers.
GenRocket:Mainframe support; SAP testing; Security checklist.
IBM:Optim Test Data Management; Optim 11.7.0.2; Optim for z/OS data migration; IBM Client Engineering, Optim overview.
Informatica:Salesforce completes acquisition (18 November 2025); TDM overview; PowerExchange sources.
K2view:Agentic Test Data Management; Rocket Software partnership; Tonic vs K2view; AWS Marketplace listing.
Tonic:Tonic Textual; Pricing; Structural database connectors.
UBS Hainer:XDM; XDM IMS connector.
Book a demo for your core banking and SAP test data, or prove document masking on 50 of your own files in 48 hours.
All product names are trademarks of their respective owners. SAP, S/4HANA and other SAP products are trademarks or registered trademarks of SAP SE. This guide is based on public information as of November 2026.