For platform engineering teams

Snapshot, sanitize, and share production databases safely.

Clonit Cloud gives your team real database snapshots without the risk. AI-guided sanitization masks PII and secrets automatically, so engineers get production-like data for development and testing. Your customers' data stays protected and your organization stays compliant.

New here? Create an account · Manage account

How it works

  1. 1

    Snapshot your database

    Capture a consistent, production-grade snapshot of PostgreSQL with a single command from the Clonit CLI.

  2. 2

    Sanitize with AI-guided rules

    Clonit's AI inspects your schema and proposes sanitization rules that mask PII and secrets. You review and apply them before any data leaves your machine.

  3. 3

    Share with your team

    Publish sanitized snapshots to your organization so every engineer pulls the same safe dataset instead of passing ad-hoc dumps around over chat.

Everything a platform team needs

  • AI-guided sanitization

    Schema-aware analysis proposes masking rules for PII and secrets. Run it server-side with per-org metered keys or locally on the agent — database credentials never leave your machine.

  • Keyless credentials

    Storage access brokered with sts:AssumeRole and database auth via short-lived RDS IAM tokens. No long-lived cloud keys or DB passwords stored — anywhere.

  • Sharing that fits your org

    Share snapshots org-wide, scope them to Okta/SSO groups, or grant another organization time-boxed access — all from the web UI or CLI.

  • Presigned transfers

    Snapshot data moves directly between your agent and your bucket over presigned URLs with checksum verification. It never transits the control plane.

  • Built for CI/CD

    Scoped API keys for automation: read-only service accounts for pull pipelines and CI keys that act as a user with a hard role ceiling.

  • Governance built in

    Role-based access control, strict per-organization isolation, an audit trail of sensitive operations, and AES-GCM encryption for secrets at rest.

  • Retention policies

    Opt-in automatic cleanup of expired snapshots. Deletion requires both the deployment and your org admin to opt in — nothing is swept by surprise.

  • Live agents

    Agents stay connected over WebSocket and accept remote commands, giving your team one central catalog of targets and snapshots.

Download the CLI

Install the Clonit CLI to start snapshotting and sanitizing.

Download for your platform

Looking for another platform? All install options