Test privacy in demo without using real data

Some buyers send real files to test the system on their data. This is an irreversible error: Your client data is with a provider you have not yet contracted with, may not be deleted, and may be copied in experimental environments.

Serious testing doesn’t need real data at all — it needs a carefully designed imaginary set.

What decision do you need to make?

You test controls, not data. The controls are tested with artificial cases that represent your complexity: a family case, a minor with a guardian, a transfer case, and a case with an agency contract.

Criteria to help you choose

Build a test set of six obviously artificial files — names like “Beta Patron A”:

• An adult client with a simple individual case.
• Minor registered guardian.
• A teenager with restricted guardian permissions.
• Two parties in a joint family situation.
• A client within an entity’s contract.
• A client was referred by a third party.

Then request accounts with the roles: Reception, Assigned Specialist, Non-Assigned Specialist, Supervisor, Finance, Manager, and Entity Representative.

List of questions and required evidence

Write down the expected result for each attempt before executing it, and then execute it:

• Receive ← Session Authentication: Expected to be blocked.
• Non-Assigned Specialist ← Case File: Expected to be blocked or a registered reason requested.
• Administrator → Professional Content: Expected to be blocked unless authorized admin.
• Family party ← Other party’s note: Expected ban.
• Parent of a teenager ← Session documentation: Expected to be blocked depending on the setting.
• Entity representative ← Client ID: Expected to be blocked.
• Financial ← Service Details: The amount is expected to be displayed without the content.
• Then open the audit log: Did all attempts appear?

Mistakes to avoid before certification

• Send real data: Neither in the offer, nor in the migration estimate, nor for a “quick experience.”
• Anonymous, incomplete sample: Deleting the name is not enough if the mobile number or date of birth remains.
• Only view the provider: Sit down and try.
• Not writing the expected in advance: Without it you will accept what you see as true.

The next step is to request a quote

Prepare your fantasy set and send it with the RFP to be built before the meeting. See Privacy and permissions page.