Best Practice for Cloning Production to Test Instance while Protecting Sensitive Data

[kuuum_aaaya]

I'm planning to clone our production instance to a newly purchased test instance, but I want to ensure that sensitive data is not transferred to the test environment. As we may need to perform similar cloning operations during future upgrades, I'm looking for the best practice approach that we can consistently use.

I'm considering several options and would appreciate guidance on which approach is most recommended:

1. Using exclude tables configuration to skip tables containing sensitive data

   • Are there any risks or considerations with this approach?

2. Cloning everything first and then deleting sensitive data afterwards

   • Is this a safer approach?

3. Implementing the Data Privacy Clone plugin

   • Would this be the most efficient solution?

Are there any other recommended methods I should consider?

Additional Info:

• We are currently using ServiceNow SPM
• This needs to be a repeatable process for future cloning operations
• Main concern is protecting sensitive data while maintaining system functionality

Could you please share best practices and recommendations for this scenario?

[SumanthDosapati]

@kuuum_aaaya 

This article should help you.

https://www.servicenow.com/community/developer-articles/servicenow-system-clone-process/ta-p/2322006

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth

[kuuum_aaaya]

@SumanthDosapati 
Thank you.
Sorry, the link you shared describes the general system cloning process, but I am still interested in the core of your question: how to protect sensitive data.

[kuuum_aaaya]

@SumanthDosapati Thank you.
Sorry, the link you shared describes the general system cloning process, but I am still interested in the core of your question: how to protect sensitive data.

[christophenow · Accepted solution]

Hello,

Have a look on Data anonymization and clone.

Produktdokumentation | ServiceNow

This should cover you need.

Be aware that it requires licenses.

Regards,

Christophe