Offshore and partner testing
When testers, partners or a global delivery centre sit outside the EU, giving them production copies means a personal data transfer, with the paperwork and risk that come with it. Give them masked SAP data instead, consistent across every system they test.
Not legal advice: your data protection officer decides what counts as anonymised.
On SAP, we measure results on your own data in a 10-day validation.
The problem
A typical trigger: the delivery centre is ready, but compliance won't approve production data, and the test plan slips while everyone waits.
0102
03
04Before and after
How it works
Masking runs in your environment, before data is written to the systems the offshore team uses.
The same customer has the same masked name in S/4HANA, the CRM and the data warehouse, so end-to-end tests still pass.
Your SI refreshes test data within the scope and rules you set, without asking for production access.
Each refresh records its scope, the rules applied and who ran it.
Who it's for
Financial servicesBanks and insurersWith testing delivered by offshore partners, and DORA on top of GDPR.DORA test data
PartnersSystems integratorsRunning SAP programmes from global delivery centres.Partner with usIn-houseGlobal SAP teamsWith support and test teams in other regions.We've got you covered
If personal data goes to a country outside the EEA without an adequacy decision, you need a safeguard such as standard contractual clauses, plus a transfer risk assessment. If the test systems hold only data your DPO treats as anonymous, those transfer rules don't apply to it. See GDPR test data for SAP.
Regression, integration and user acceptance testing all depend on data that behaves like production: whole document chains, open items and edge cases. Masking keeps that behaviour and removes the real people.
It depends on how it's masked and what else the recipient can see. Your DPO decides; we provide the masking rules and refresh records they need.
Yes. Synthesized runs in your cloud or data centre, so production data isn't sent anywhere to be masked.
Yes. Masking keeps formats, document chains and relationships, so a masked customer still has orders, deliveries and invoices.
Next step
Tell us which systems the team needs. We'll show a masked refresh they can use, with the records your DPO will ask for.
SAP, S/4HANA, SAP HANA, SuccessFactors, Ariba, Concur and other SAP products and services mentioned herein, as well as their respective logos, are trademarks or registered trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. All other product and service names mentioned are the trademarks of their respective companies.