Get the whitepaper!
The Test Data Imperative: Towards SAP Autonomous Enterprise

Format · Free text

Mask the free text inside your database

Notes, comments, descriptions and complaint fields hold names, card numbers and health details that column masking never sees. A masked CRM or core banking copy still leaks if its notes column is copied as it is.

Get a 48-hour proofDev and test environments
crm.case_notes · row 88412Masked in your VPCIllustration
Before
Customer Maria Lopez called about card ending 4417. Wants statements sent to m.lopez@example.com, not the Leeds address.
After
Customer Ava Okafor called about card ending 0000. Wants statements sent to a.okafor@example.net, not the York address.
Found in this file
Treatment
Person name×1Consistent
Card, last four×1Keep format
Email×1Consistent
Town×1Replace
Policy: Customer data v3 Labelled-sample check passed

What hides in free text

NamesPhone numbersEmailsCard and account numbersAddresses and townsHealth detailsStaff namesDates

Where it lives

  • CRM notes in Salesforce and Dynamics 365
  • Memo fields in core banking
  • SAP long texts
  • ServiceNow work notes
  • Claims and case-management systems

What you can do

AvailableReplace or redact whole fieldsSwap a notes column for synthetic text or a fixed value with today's masking transformers, or blank it.
Engineer-ledMask values inside the textFind the personal data inside each note and replace only that, so the note still reads naturally for testers.
Engineer-ledMatch the masked rowIf the customer row now says Ava Okafor, the note about her should say Ava Okafor too.

Two ways to treat a notes field

  • Replace or blank the whole field: available today with standard masking transformers.
  • Mask only the personal details inside the text, so notes still read naturally: delivered with our engineers on the same platform.
  • Either way, the notes column is treated in the same run as the rest of the table.

Used for

Dev and test environmentsTesting AI agents and chatbotsKeeping data out of LLMs

Questions about free-text fields

Why isn't column masking enough for notes fields?

Column masking treats a field as one kind of value, such as a name or an email. A notes field can hold any of them, in any order, so the values have to be found inside the text before they can be masked.

Will masked notes still make sense to testers?

That is the point of masking values inside the text rather than blanking the field: the sentence stays, only the personal details change.

Can you handle SAP long texts?

SAP long texts are covered, alongside CRM and case-management notes.

The platform underneath, in production

Documents run on the same platform banks, insurers and health companies already trust with their data.

Documents and text use the same policies, the same engine and the same deployment as these results.

Health · masking20bn+rows masked and subsetted in hours, not weeks, with all manual configuration removed.Global HealthTech leaderCase study
Insurance · security0security waivers across 14 priority applications: 28M+ rows secured, 100% referential integrity, test data 60% faster.Global specialty insurerCase study

Published results from database and synthetic data work on the Synthesized platform.

Clean the notes column in your next refresh

Start with one notes column. In 48 hours you'll see a sample of it masked, with the evidence.

Get a 48-hour proof