Clonio CLI: Clone Production DBs With Anonymized Data | Mohamed Said [Skip to content](#main) [ ![](https://cdn.msaied.com/01KT78WE565VEMM3PSNQAAB0MH.png) Mohamed SaidLaravel Backend Engineer ](https://www.msaied.com/public) - [Home](https://www.msaied.com/public) - [Projects](https://www.msaied.com/public/projects) - [Articles](https://www.msaied.com/public/articles) - [Certificates](https://www.msaied.com/public/certificates) - [About](https://www.msaied.com/public#about) [ Contact](https://www.msaied.com/public#contact) Menu Menu ---- Close - [HomeStart here](https://www.msaied.com/public) - [ProjectsCase studies](https://www.msaied.com/public/projects) - [ArticlesEngineering notes](https://www.msaied.com/public/articles) - [CertificatesCredentials](https://www.msaied.com/public/certificates) - [AboutHow I work](https://www.msaied.com/public#about) - [ContactGet in touch](https://www.msaied.com/public#contact) [Start a conversation](https://www.msaied.com/public#contact) [WhatsApp](https://wa.me/201094619204) [Email](mailto:hello@msaied.com) 1. [Home](https://www.msaied.com/public) 2. / 3. [Articles](https://www.msaied.com/public/articles) 4. / 5. [Laravel](https://www.msaied.com/public/articles?category=laravel) 6. / 7. Clonio CLI: Clone Production Databases With Anonymized Data [Laravel](https://www.msaied.com/public/articles?category=laravel) [Open Source](https://www.msaied.com/public/articles?category=open-source) Clonio CLI: Clone Production Databases With Anonymized Data ============================================================ Clonio CLI copies a production database into development, CI, or test environments while rewriting sensitive columns on the way through — faking names, masking tokens, and remapping keys so data stays usable but no longer identifies real people. ![](https://cdn.msaied.com/01M22N44A70A5MC2S599JP0MPH.webp) [Mohamed Said](https://www.msaied.com/public#person) Published 30 Jun 2026 · Updated 30 Jun 2026 · 3 min read ShareCopy linkCopied ![Clonio CLI: Clone Production Databases With Anonymized Data](https://cdn.msaied.com/330/f1a9301a3bc438423da4dacba50c555f.png) On this page +1. [What Is Clonio CLI?](#what-is-clonio-cli) 2. [Column Transformation Strategies](#column-transformation-strategies) 3. [Key Remapping Across Related Tables](#key-remapping-across-related-tables) 4. [PII Detection](#pii-detection) 5. [Audit Trail](#audit-trail) 6. [Basic Workflow](#basic-workflow) 7. [Key Takeaways](#key-takeaways) What Is Clonio CLI? ------------------- Clonio CLI is a tool that copies a production database into development, CI, and test environments while rewriting sensitive columns in transit. It fakes names and emails, masks tokens, and remaps primary keys so the resulting dataset is fully usable but no longer identifies real people. It ships as a standalone binary, a PHAR archive, a Docker image, or a Composer dev dependency: ```bash composer require --dev clonio-dev/clonio-cli ``` Configuration lives in a version-controlled `.cloning.yaml` file that references connection *names* rather than raw credentials, making it safe to commit alongside your application code. Column Transformation Strategies -------------------------------- Every column you want to transform gets an explicit strategy in the YAML config. Columns you don't list are copied as-is, so you only describe the data that actually needs to change. | Strategy | What it does | |---|---| | `fake` | Generate synthetic values via FakerPHP | | `mask` | Keep leading characters, mask the rest | | `hash` | One-way hash (pseudonymization, not full anonymization) | | `static` | Replace with a fixed string | | `null` | Set the column to `NULL` | | `template` | Mix literal text with Faker placeholders | | `remapping` | Reassign primary keys and update dependent foreign keys | A trimmed `users` table configuration looks like this: ```yaml version: "1" connection: production options: faker_locale: de_DE tables: users: rows: strategy: last limit: 5000 sort_by: created_at columns: email: strategy: fake faker_method: safeEmail first_name: strategy: fake faker_method: firstName phone: strategy: mask internal_notes: strategy: "null" ``` Importantly, Clonio explicitly notes that `hash` output still counts as personal data under GDPR. When re-identification must be impossible, use `fake` or `null` instead. Key Remapping Across Related Tables ----------------------------------- Importing rows into a target database can collide with existing primary keys. The `remapping` strategy replaces a table's primary keys with new values and consistently updates all foreign keys in dependent tables, preserving referential integrity across the transfer. PII Detection ------------- Rather than relying on developers to manually audit every column, Clonio ships built-in matchers that flag columns likely to hold PII. Three commands support this workflow: - `matchers:init` — sets up baseline detection patterns - `matchers:list` — shows the currently active rules - `matchers:check` — validates your tables against those rules This catches newly added columns — like an `email` or `tax_id` field someone added without a corresponding transformation strategy — before they reach a less-trusted environment. Audit Trail ----------- Every cloning run can emit a signed audit artifact plus structured logs. Delivery targets include local storage, S3-compatible storage, Slack, Microsoft Teams, or email. The `cloning:verify-audit` command checks log integrity after the fact, which is useful when you need to demonstrate that production data was anonymized before it left the production environment. Basic Workflow -------------- ```bash clonio init clonio connection:add production --production clonio cloning:dump --connection production clonio cloning:run production.cloning.yaml --target ci ``` Clonio runs on Linux x86\_64/aarch64 and macOS Apple Silicon as a standalone binary (no PHP required), or via PHAR on PHP 8.5+, or as a Docker image at `ghcr.io/clonio-dev/clonio:latest`. Key Takeaways ------------- - Per-column anonymization strategies give you fine-grained control over exactly what gets transformed. - `hash` is pseudonymization, not anonymization — use `fake` or `null` for true GDPR compliance. - Key remapping maintains referential integrity when importing into an existing target database. - Built-in PII detection catches sensitive columns that lack a transformation strategy. - Signed audit artifacts provide a verifiable record that anonymization occurred. - The `.cloning.yaml` config is credential-free and safe to commit to version control. --- *Source: [Clonio CLI: Clone Production Databases With Anonymized Data — Laravel News](https://laravel-news.com/clonio-cli-clone-production-databases-with-anonymized-data)* - [database](https://www.msaied.com/public/articles?search=database) - [anonymization](https://www.msaied.com/public/articles?search=anonymization) - [GDPR](https://www.msaied.com/public/articles?search=GDPR) - [CLI](https://www.msaied.com/public/articles?search=CLI) - [Laravel](https://www.msaied.com/public/articles?search=Laravel) - [privacy](https://www.msaied.com/public/articles?search=privacy) Frequently asked questions --------------------------- Is hashing a column with Clonio sufficient for GDPR compliance?No. Clonio explicitly states that `hash` output still counts as personal data under GDPR because hashed values can potentially be re-identified. For true anonymization where re-identification must be impossible, use the `fake` or `null` strategies instead. How does Clonio handle foreign key integrity when cloning into an existing database?The `remapping` strategy reassigns a table's primary keys with new values and consistently updates all foreign keys in dependent tables, so referential integrity is preserved rather than broken on import. Do I need PHP installed to run Clonio CLI?Not necessarily. Clonio ships as a standalone binary for Linux (x86\_64 and aarch64) and macOS Apple Silicon that requires no PHP installation. It also supports PHAR (PHP 8.5+), Docker, and Composer as a dev dependency. ![Mohamed Said](https://cdn.msaied.com/01M22N44A70A5MC2S599JP0MPH.webp)About the author ---------------- [Mohamed Said](https://www.msaied.com/public#person)Senior Backend Engineer specializing in Laravel, scalable SaaS platforms, APIs, and cloud infrastructure. I build secure, high-performance web applications that help businesses grow. [About](https://www.msaied.com/public#about) [GitHub ↗](https://github.com/EG-Mohamed) [LinkedIn ↗](https://www.linkedin.com/in/msaiedm/) [WhatsApp ↗](https://wa.me/201094619204) [Email Address ↗](mailto:hello@msaied.com) [My CV ↗](https://drive.google.com/file/u/0/d/1MF20IPRJyzfy32mhEutjL5EpSls0w2Q8/view) [Previous articleMulti-Tenant SaaS in Laravel: Isolating Tenant State with Scoped Service Bindings](https://www.msaied.com/public/articles/multi-tenant-saas-in-laravel-isolating-tenant-state-with-scoped-service-bindings) [Next articleMySQL Optimization for Laravel: Covering Indexes, EXPLAIN ANALYZE, and Query Profiling](https://www.msaied.com/public/articles/mysql-optimization-for-laravel-covering-indexes-explain-analyze-and-query-profiling) On this page ------------- 1. [What Is Clonio CLI?](#what-is-clonio-cli) 2. [Column Transformation Strategies](#column-transformation-strategies) 3. [Key Remapping Across Related Tables](#key-remapping-across-related-tables) 4. [PII Detection](#pii-detection) 5. [Audit Trail](#audit-trail) 6. [Basic Workflow](#basic-workflow) 7. [Key Takeaways](#key-takeaways) ### Have a technical challenge? Tell me what you’re building. I reply within two working days. [Start a conversation](https://www.msaied.com/public#contact) Related articles ----------------- [ ![](https://cdn.msaied.com/740/cce86edc21eddcbdd2f2454fadaf9c70.png) · 3 min read### The Pipeline Pattern in Laravel: Custom Pipelines Beyond Middleware 5 Oct 2026 ](https://www.msaied.com/public/articles/the-pipeline-pattern-in-laravel-custom-pipelines-beyond-middleware-1) [ ![](https://cdn.msaied.com/739/2d6897fdcdcf090613f96f72a64b8a78.png) · 4 min read### MySQL Full-Text Search in Laravel: Indexes, Relevance Scoring, and Boolean Mode 4 Oct 2026 ](https://www.msaied.com/public/articles/mysql-full-text-search-in-laravel-indexes-relevance-scoring-and-boolean-mode) [ ![](https://cdn.msaied.com/738/073696a3fefe18bec825beec5ac658f5.png) · 4 min read### Laravel Queue Rate-Limited Middleware: Throttling Jobs Without Losing Work 4 Oct 2026 ](https://www.msaied.com/public/articles/laravel-queue-rate-limited-middleware-throttling-jobs-without-losing-work) Have a technical challenge? ---------------------------- Tell me what you’re building. I reply within two working days. [Discuss your project ↗](https://www.msaied.com/public#contact) © 2026 Mohamed Said · Built with Laravel, meant to last.Senior Backend Engineer specializing in Laravel, scalable SaaS platforms, APIs, and cloud infrastructure. I build secure, high-performance web applications that help businesses grow. - [Home](https://www.msaied.com/public) - [Articles](https://www.msaied.com/public/articles) - [Certificates](https://www.msaied.com/public/certificates) - [GitHub](https://github.com/EG-Mohamed) - [LinkedIn](https://www.linkedin.com/in/msaiedm/) - [WhatsApp](https://wa.me/201094619204) - [Email Address](mailto:hello@msaied.com) - [My CV](https://drive.google.com/file/u/0/d/1MF20IPRJyzfy32mhEutjL5EpSls0w2Q8/view) - [Sitemap](https://www.msaied.com/public/sitemap.xml)