What the buyer is really asking
Development and test environments usually have weaker controls, so buyers want to know that real customer data stays out of them. If production data never leaves production, say exactly that. It is the strongest answer you can give.
Other ways buyers ask it
Every one of these wants the same answer:
- “Is production data used in test environments?”
- “Do you mask or anonymize data in non-production?”
- “How do you generate test data?”
Evidence to have ready
- A policy statement on production data in non-production environments
- The masking or synthetic data process, if one exists
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.