Keep customer data out of non-prod environments
Paragraph 14 expects you to control non-production data. Generate synthetic data on your device so customer information never reaches dev / test / staging — and show the auditor a signed receipt.
Read the APRA solution →