# Event test-data decision and cleanup matrix

Use **fictional people** first. A production-like scenario does not require a real attendee. Do not place attendee exports, card details, passwords or genuine accessibility/medical notes in this worksheet.

**Event / edition:** [ ]  **Test environment:** [ ]  **Data owner:** [ ]  **Cleanup owner/date:** [ ]

| Scenario | Synthetic record / TEST marker | Expected booking or ticket state | Email or webhook destination | Check-in / analytics side effect | Evidence without personal data | Cleanup owner and result |
| --- | --- | --- | --- | --- | --- | --- |
| Normal registration | TEST-A, `test-a@example.com` | [ ] | [ ] | [ ] | [ ] | [ ] |
| Duplicate registration | TEST-A reused | [ ] | [ ] | [ ] | [ ] | [ ] |
| Group order | TEST-GROUP-1 | [ ] | [ ] | [ ] | [ ] | [ ] |
| Sold-out category / waitlist | TEST-WAIT-1 | [ ] | [ ] | [ ] | [ ] | [ ] |
| Accessibility or dietary note | Invented non-identifying text | [ ] | [ ] | [ ] | [ ] | [ ] |
| Failed payment and reissue | Provider test instrument only | [ ] | [ ] | [ ] | [ ] | [ ] |

## Environment boundary

| Resource | Non-production instance and owner | Any live connection? | Access review | Cleanup / expiry |
| --- | --- | --- | --- | --- |
| Database and file storage | [ ] | [ ] | [ ] | [ ] |
| Email sender and recipient | [ ] | [ ] | [ ] | [ ] |
| Payment and ticket provider | [ ] | [ ] | [ ] | [ ] |
| Webhooks, CRM and analytics | [ ] | [ ] | [ ] | [ ] |
| Logs, screenshots and exports | [ ] | [ ] | [ ] | [ ] |

**If real or production-derived data is proposed:** Why is fiction insufficient? [ ]  Who approves? [ ]  What transformation and re-identification assessment? [ ]  Who can access? [ ]  When and how is it deleted? [ ]

A synthetic dataset built from actual attendee records can still reveal information. A name-stripped export is not necessarily anonymous. Check provider test-mode documentation before payment tests; avoid live charges and accidental real notifications.

Sources: [AWS mock-data guidance](https://docs.aws.amazon.com/wellarchitected/latest/devops-guidance/dl.ld.8-generate-mock-datasets-for-local-development.html), [Stripe testing](https://docs.stripe.com/testing), [ICO anonymisation guidance](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-sharing/anonymisation/how-do-we-ensure-anonymisation-is-effective/).