Clonio CLI: Clone Production DBs With Anonymized Data | Mohamed Said [ ![Mohamed Said](https://cdn.msaied.com/01KT78WE565VEMM3PSNQAAB0MH.png) Mohamed Said Laravel Backend Engineer ](https://www.msaied.com) [ Home ](https://www.msaied.com) [ Projects ](https://www.msaied.com/projects) [ Articles ](https://www.msaied.com/articles) [ Certificates ](https://www.msaied.com/certificates) [ Contact ](https://www.msaied.com#contact-section) [ ](https://github.com/EG-Mohamed) [ Home ](https://www.msaied.com) [ Projects ](https://www.msaied.com/projects) [ Articles ](https://www.msaied.com/articles) [ Certificates ](https://www.msaied.com/certificates) [ Contact ](https://www.msaied.com#contact-section) [ home ](https://www.msaied.com) [ articles ](https://www.msaied.com/articles) Clonio CLI: Clone Production Databases With Anonymized Data On this page 1. [ What Is Clonio CLI? ](#what-is-clonio-cli) 2. [ Column Transformation Strategies ](#column-transformation-strategies) 3. [ Key Remapping Across Related Tables ](#key-remapping-across-related-tables) 4. [ PII Detection ](#pii-detection) 5. [ Audit Trail ](#audit-trail) 6. [ Basic Workflow ](#basic-workflow) 7. [ Key Takeaways ](#key-takeaways) ![Clonio CLI: Clone Production Databases With Anonymized Data](https://cdn.msaied.com/330/f1a9301a3bc438423da4dacba50c555f.png) [ Laravel ](https://www.msaied.com/articles?category=laravel) [ Open Source ](https://www.msaied.com/articles?category=open-source) #database #anonymization #GDPR #CLI #Laravel #privacy Clonio CLI: Clone Production Databases With Anonymized Data ============================================================= 30 Jun 2026 3 min read ![Mohamed Said](https://cdn.msaied.com/01KT78WE565VEMM3PSNQAAB0MJ.jpg) Mohamed Said Table of contents 1. [ 01 What Is Clonio CLI? ](#what-is-clonio-cli) 2. [ 02 Column Transformation Strategies ](#column-transformation-strategies) 3. [ 03 Key Remapping Across Related Tables ](#key-remapping-across-related-tables) 4. [ 04 PII Detection ](#pii-detection) 5. [ 05 Audit Trail ](#audit-trail) 6. [ 06 Basic Workflow ](#basic-workflow) 7. [ 07 Key Takeaways ](#key-takeaways) What Is Clonio CLI? ------------------- Clonio CLI is a tool that copies a production database into development, CI, and test environments while rewriting sensitive columns in transit. It fakes names and emails, masks tokens, and remaps primary keys so the resulting dataset is fully usable but no longer identifies real people. It ships as a standalone binary, a PHAR archive, a Docker image, or a Composer dev dependency: ```bash composer require --dev clonio-dev/clonio-cli ``` Configuration lives in a version-controlled `.cloning.yaml` file that references connection *names* rather than raw credentials, making it safe to commit alongside your application code. Column Transformation Strategies -------------------------------- Every column you want to transform gets an explicit strategy in the YAML config. Columns you don't list are copied as-is, so you only describe the data that actually needs to change. | Strategy | What it does | |---|---| | `fake` | Generate synthetic values via FakerPHP | | `mask` | Keep leading characters, mask the rest | | `hash` | One-way hash (pseudonymization, not full anonymization) | | `static` | Replace with a fixed string | | `null` | Set the column to `NULL` | | `template` | Mix literal text with Faker placeholders | | `remapping` | Reassign primary keys and update dependent foreign keys | A trimmed `users` table configuration looks like this: ```yaml version: "1" connection: production options: faker_locale: de_DE tables: users: rows: strategy: last limit: 5000 sort_by: created_at columns: email: strategy: fake faker_method: safeEmail first_name: strategy: fake faker_method: firstName phone: strategy: mask internal_notes: strategy: "null" ``` Importantly, Clonio explicitly notes that `hash` output still counts as personal data under GDPR. When re-identification must be impossible, use `fake` or `null` instead. Key Remapping Across Related Tables ----------------------------------- Importing rows into a target database can collide with existing primary keys. The `remapping` strategy replaces a table's primary keys with new values and consistently updates all foreign keys in dependent tables, preserving referential integrity across the transfer. PII Detection ------------- Rather than relying on developers to manually audit every column, Clonio ships built-in matchers that flag columns likely to hold PII. Three commands support this workflow: - `matchers:init` — sets up baseline detection patterns - `matchers:list` — shows the currently active rules - `matchers:check` — validates your tables against those rules This catches newly added columns — like an `email` or `tax_id` field someone added without a corresponding transformation strategy — before they reach a less-trusted environment. Audit Trail ----------- Every cloning run can emit a signed audit artifact plus structured logs. Delivery targets include local storage, S3-compatible storage, Slack, Microsoft Teams, or email. The `cloning:verify-audit` command checks log integrity after the fact, which is useful when you need to demonstrate that production data was anonymized before it left the production environment. Basic Workflow -------------- ```bash clonio init clonio connection:add production --production clonio cloning:dump --connection production clonio cloning:run production.cloning.yaml --target ci ``` Clonio runs on Linux x86\_64/aarch64 and macOS Apple Silicon as a standalone binary (no PHP required), or via PHAR on PHP 8.5+, or as a Docker image at `ghcr.io/clonio-dev/clonio:latest`. Key Takeaways ------------- - Per-column anonymization strategies give you fine-grained control over exactly what gets transformed. - `hash` is pseudonymization, not anonymization — use `fake` or `null` for true GDPR compliance. - Key remapping maintains referential integrity when importing into an existing target database. - Built-in PII detection catches sensitive columns that lack a transformation strategy. - Signed audit artifacts provide a verifiable record that anonymization occurred. - The `.cloning.yaml` config is credential-free and safe to commit to version control. --- *Source: [Clonio CLI: Clone Production Databases With Anonymized Data — Laravel News](https://laravel-news.com/clonio-cli-clone-production-databases-with-anonymized-data)* Found this useful? [ ](https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.msaied.com%2Farticles%2Fclonio-cli-clone-production-databases-with-anonymized-data&text=Clonio+CLI%3A+Clone+Production+Databases+With+Anonymized+Data) [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.msaied.com%2Farticles%2Fclonio-cli-clone-production-databases-with-anonymized-data) Frequently Asked Questions ---------------------------- 3 questions Q01 Is hashing a column with Clonio sufficient for GDPR compliance? No. Clonio explicitly states that `hash` output still counts as personal data under GDPR because hashed values can potentially be re-identified. For true anonymization where re-identification must be impossible, use the `fake` or `null` strategies instead. Q02 How does Clonio handle foreign key integrity when cloning into an existing database? The `remapping` strategy reassigns a table's primary keys with new values and consistently updates all foreign keys in dependent tables, so referential integrity is preserved rather than broken on import. Q03 Do I need PHP installed to run Clonio CLI? Not necessarily. Clonio ships as a standalone binary for Linux (x86_64 and aarch64) and macOS Apple Silicon that requires no PHP installation. It also supports PHAR (PHP 8.5+), Docker, and Composer as a dev dependency. Continue reading More Articles --------------- [ View all ](https://www.msaied.com/articles) [ ![Filament v5 Preview: Schema Unification, Performance Shifts, and How to Prepare](https://cdn.msaied.com/340/1a05ca68637b898b676efb66f22e627f.png) filament laravel php ### Filament v5 Preview: Schema Unification, Performance Shifts, and How to Prepare Filament v5 is reshaping how panels, forms, and tables are composed. This deep-dive covers the confirmed archi... ![Mohamed Said](https://cdn.msaied.com/01KT78WE565VEMM3PSNQAAB0MJ.jpg) Mohamed Said 1 Jul 2026 4 min read Read ](https://www.msaied.com/articles/filament-v5-preview-schema-unification-performance-shifts-and-how-to-prepare) [ ![Laravel 13: New Features, Helpers, and Practical Upgrade Notes](https://cdn.msaied.com/339/58c4fa6fe9b6d25a2dac17c621b6f4c6.png) laravel laravel-13 upgrade ### Laravel 13: New Features, Helpers, and Practical Upgrade Notes Laravel 13 ships with async-first defaults, a leaner bootstrapping layer, and several quality-of-life helpers.... ![Mohamed Said](https://cdn.msaied.com/01KT78WE565VEMM3PSNQAAB0MJ.jpg) Mohamed Said 1 Jul 2026 3 min read Read ](https://www.msaied.com/articles/laravel-13-new-features-helpers-and-practical-upgrade-notes) [ ![Laravel 12: Structured Route Files, Slim Skeletons, and the New Application Bootstrapping](https://cdn.msaied.com/337/05b39d16d0f88a5fb94d0cf74049b88b.png) laravel laravel-12 upgrade ### Laravel 12: Structured Route Files, Slim Skeletons, and the New Application Bootstrapping Laravel 12 ships with a leaner skeleton, first-class route file organisation, and a revised application bootst... ![Mohamed Said](https://cdn.msaied.com/01KT78WE565VEMM3PSNQAAB0MJ.jpg) Mohamed Said 1 Jul 2026 3 min read Read ](https://www.msaied.com/articles/laravel-12-structured-route-files-slim-skeletons-and-the-new-application-bootstrapping) [ ![Mohamed Said](https://cdn.msaied.com/01KT78WE565VEMM3PSNQAAB0MH.png) Mohamed Said Laravel Backend Engineer ](https://www.msaied.com)Senior Backend Engineer specializing in Laravel, scalable SaaS platforms, APIs, and cloud infrastructure. I build secure, high-performance web applications that help businesses grow. Explore - [Home](https://www.msaied.com) - [Projects](https://www.msaied.com/projects) - [Articles](https://www.msaied.com/articles) - [Certificates](https://www.msaied.com/certificates) - [Contact](https://www.msaied.com#contact-section) Connect - [ hello@msaied.com ](mailto:hello@msaied.com) - [ +20 109 461 9204 ](tel:+201094619204) © 2026 Mohamed Said. All rights reserved. [ ](https://github.com/EG-Mohamed) [ ](https://www.linkedin.com/in/msaiedm/) [ ](https://wa.me/201094619204) [ ](mailto:hello@msaied.com) [ ](https://drive.google.com/file/u/0/d/1MF20IPRJyzfy32mhEutjL5EpSls0w2Q8/view)