Agreed. Every large company I've worked with has had scripts that create sanitized versions of the production DB, with PCI and PII stripped out or masked to al

Agreed. Every large company I've worked with has had scripts that create sanitized versions of the production DB, with PCI and PII stripped out or masked to allow for testing against full size datasets. It's not hard to do.