NPDL26 and RDT26 protect production data at source before it moves into development, test, UAT, and analytics environments. Oracle, SQL Server, and DB2 — with wider coverage via Oracle GoldenGate.
Full-fidelity copies of production data are cloned into development, test, UAT, and analytics — often with weaker controls, broader access, and no audit trail back to the source. The strongest production security posture is undone the moment a nightly refresh lands in a developer laptop or a shared UAT schema.
Traditional masking is applied downstream, after the copy has moved. That leaves a window — a transient full-fidelity copy in transit — and a persistent audit gap between the production controls that regulators inspect and the non-production estate where the data actually lives day-to-day.
NPDL26 and RDT26 protect at source. Data is transformed inside the production boundary before it moves, with deterministic, referentially consistent output that non-production consumers can use without seeing the underlying values.
Deterministic, referentially consistent transformation applied at source before non-production movement.
Reversible transformation for controlled re-identification under governed workflows.
Native coverage for enterprise Oracle estates. Deterministic transformation with FK integrity across schemas.
Coverage across Enterprise and Standard editions. Consistent behaviour across on-premises and Azure SQL.
Native support for DB2 for LUW and z/OS. Same guarantees as Oracle and SQL Server implementations.
Streaming replication widens platform reach and enables continuous, governed flow into non-production targets — not just batch refreshes.
Sector framing only. Named customers, agencies, and partners appear on this site with written consent — not before.
Financial services, health, and telecommunications. Applies to obligations under APRA CPS 234, the Privacy Act, and sector-specific data-handling regimes.
Commonwealth and state entities operating under the Protective Security Policy Framework, the Information Security Manual, and Essential Eight uplift programs.
Defence primes and subcontractors with DISP obligations. Australian delivery entity with sovereign contracting; parent-subsidiary structure disclosed on the Trust page.
Regulated entities under the SOCI Act. Data-governance uplift for non-production estates that support essential services.
Joins, foreign keys, and derived relationships behave identically to production — without exposing the values themselves.
Same input produces the same output across runs, environments, and time — regression tests remain stable and reproducible.
Transformation occurs inside the production boundary. No transient full-fidelity copy exists outside it.
Australian contracting party. Australian personnel for engagement work. Tampa parent disclosed and available for deep technical reach-back.
MUSE Security WorX Australia is the Australian delivery entity for NPDL26 and RDT26. Enquiries from regulated enterprise, government, defence, and critical infrastructure are welcome.
Direct: rob.slattery@musesecworx.com
