Simple by Design

From sandbox refresh to
fully masked in 10 minutes.

No Apex. No scripts. No configuration files. Connect your Salesforce org, pick your fields, run masking. That's it.

1

Connect

OAuth in 2 minutes. No package install.

~2 min
2

Select Fields

Pick exactly what gets masked. Preview first.

~5 min
3

Run Masking

On demand or auto on every refresh.

~3 min to run
4

Audit Log

PDF report ready for your DPO instantly.

Instant
1
Step One

Connect your Salesforce sandbox via OAuth.

Go to maskezee.cloudezee.tech, click "Connect with Salesforce", and authorise MaskEzee as a Connected App. The OAuth flow is standard Salesforce — the same process you use for any external integration.

We request only the permissions we actually need. Nothing more. Here's the exact list your IT team will see:

No package install Standard OAuth 2.0 Revoke anytime

Full permission breakdown on the Security page →

Connected App Permissions
api
Read schema + write masked values
refresh_token
Keep the connection active between masking sessions
id
Identify which org we're connected to
We never request
full chatter_api wave_api custom_permissions
2
Step Two

Choose exactly what gets masked. Preview before anything changes.

MaskEzee reads your full schema and displays every standard and custom object with all their fields. You check the boxes. You see a live preview of what the fake replacement will look like.

Nothing happens to your sandbox until you confirm. No black boxes, no surprises.

  • Standard objects — Contact, Lead, Account, Case, Opportunity, and more
  • All custom objects (Bronze and above)
  • Field-type aware — email stays email format, phone stays locale-matched format
  • Relationships, lookups, and record IDs remain untouched
MaskEzee — Field Selection
Contact
Lead
Account
Case
Loan__c
Patient__c
Contact Fields
FirstNameText
LastNameText
EmailEmail
PhonePhone
AccountIdLookup
CreatedDateDateTime
Preview
Jane SmithEmma Davies
jane@acme.co.ukp4k2@fake-masked.dev
3
Step Three

Run masking. Your data never leaves Salesforce.

Click Run — or let it trigger automatically after every sandbox refresh. MaskEzee reads record IDs from your sandbox, generates realistic fake values, and writes them back. Customer data values are never transmitted.

Locale-aware output — choose UK, US, or Global. Proper names, valid-format emails, phone numbers in your locale's format. Your test scenarios keep working. Your flows, triggers, and automations keep running.

~3 minutes for 10,000 records Relationships intact
Masking Run · Full Sandbox
Running
Contact · Email, FirstName, LastName, Phone78%
7,834
Masked
2,166
Remaining
0
Errors
✓ Contact.FirstName — 10,000 records queued
✓ Contact.Email — generating fake values
✓ Contact.Phone — locale confirmed (en_GB)
→ Writing batch 79 of 100 to sandbox...
· Lead, Account, Loan__c — queued
4
Step Four

Audit log generated. DPO review closed.

The moment masking completes, MaskEzee generates a timestamped PDF audit report. This is the document your DPO, legal team, and auditors have been asking for.

It records exactly what was masked, in which sandbox, at what time, by whom, and how many records — with a compliance statement. No more "we're working on it."

  • Timestamped to the second
  • Objects and fields masked, record counts per object
  • Sandbox name, Salesforce org ID, run ID
  • Compliance statement confirming zero data extraction
  • Available on Silver and above plans
MaskEzee · Masking Audit Report
Sandbox Masking Complete
Run ID: MZR-2025-06-17-0042
Completed2025-06-17 09:42:18 UTC
SandboxFullSandbox_QA
Org ID00D1a000000XyZa
Run byadmin@company.com
Total records28,441
Objects masked
Contact (4 fields)10,000 records
Lead (3 fields)8,441 records
Loan__c (2 fields)5,200 records
Patient__c (3 fields)4,800 records
PDF exported · Ready for DPO review
Zero data extracted
Silver & Above

Re-connect after refresh. Run masking in minutes.

After a sandbox refresh, Salesforce resets OAuth tokens. Re-authorise MaskEzee with one click, then trigger masking. Your saved field profile means nothing to reconfigure — the whole process takes under 5 minutes.

Your field selection, sandbox name, and preferences are all saved between sessions — so re-connecting after a refresh is fast and frictionless.

Automated Refresh Flow
1
You request sandbox refresh in Salesforce Setup
2
Salesforce copies production data to sandbox (~hours)
3
Salesforce sends refresh complete notification
4
MaskEzee triggers automatically — masking starts
5
Audit PDF generated — sandbox ready for devs
✓ Developers only ever see masked data. No risk window.
Ready?

Up and running
in 10 minutes.

Connect your Salesforce sandbox and run your first masking. Free plan — no credit card required.

Free plan · no credit card
Data never leaves Salesforce
Cancel anytime