Anonymize your Odoo data without the risk.
Rules-driven masking with dry-run previews, verified-backup snapshots and one-click rollback — share production-like data with developers, QA and vendors without ever exposing real personal information.
The problem
Every database refresh, support ticket or handoff to an external developer risks exposing real customer names, emails, phone numbers and file attachments. Manual SQL scripts are error-prone and unrepeatable, and destructive anonymizers can permanently wipe production data with no way back — leaving administrators and DPOs stuck choosing between GDPR exposure and a broken database.
The solution
Database Anonymizer builds a reusable rules engine of per-model, per-field masking strategies, previews every change before anything runs, and requires a verified backup snapshot before any destructive write. Choose non-destructive export copies or guard-railed in-place anonymization — both leave a full audit trail and both can be rolled back.
Everything you need to anonymize with confidence
Every capability below is implemented in the module.
Reusable masking configurations
Define per-model, per-field masking rules once and save them as a configuration — reuse the same template across every database refresh instead of rebuilding it by hand.
Two clearly labeled modes
Pick Export (a non-destructive masked copy) or In-Place (a guard-railed destructive run) — so you always know, and choose, which kind of anonymization you are running.
Dry-run preview before anything changes
Preview shows exactly which models, fields and records will change, with a before/after sample value for every rule, before a single record is touched.
Verified-backup safety net
In-place runs are blocked until a value snapshot of every affected record is captured — a genuine, testable rollback path instead of a false sense of safety.
One-click rollback
Roll a completed in-place run back to its exact original values from the captured snapshot — undo a mistaken run without restoring a database backup.
Deterministic pseudonymization
Masking is derived from the source value with SHA-256, so the same input always produces the same masked output — referential consistency is preserved for realistic testing.
Filestore and attachment stripping
Attachments linked to targeted records are cleared, not just left behind — closing the gap competitors leave open when they mask database fields but ignore uploaded files.
Full audit trail
Every preview, backup verification, run and rollback is logged with the user, action and timestamp — giving a DPO clear evidence of the anonymization process.
CSV templates and scheduled previews
Export and import masking rules as CSV to share templates across databases, and let a scheduled job pre-build previews automatically — execution always stays a deliberate, guard-railed human step.
How it works
Build a configuration
Pick a mode and masking level, then add rules for each model and field you need masked — email, phone, name, address or a custom strategy.
Preview the impact
Run Preview to see the exact record counts and a before/after sample for every rule before anything is written.
Verify the backup
Capture a verified value snapshot — the run cannot execute a destructive change until this safety net is in place.
Execute, and roll back if needed
Run the anonymization — export a masked copy or write in place — then roll back to the original values in one click if anything looks wrong.
Frequently asked
No sales fog. If your question isn't here, email us and we'll answer it the same way.
Only if you choose In-Place mode and complete every guardrail — Preview, then Verify Backup, then Execute. Export mode never writes to your source records; it produces a masked copy as a downloadable attachment instead.
Buy it on the Odoo App Store
Purchase, download and install directly from the official Odoo Apps Store — you'll always get the latest supported build.
Database Anonymizer
Rules-driven masking with dry-run preview, verified-backup safety net, one-click rollback and deterministic pseudonymization — data protection that never leaves you with a broken database and no way back.
Buy on Odoo App Store