# Environment separation

URL: /systems/trust-and-governance/controls/environment-separation · Id: `control:environment-separation`

> Actions in test never touch live records, move real money or send Messages to a real Person.

[Actions](/business/nouns/action) in test never touch live records, move real money or send [Messages](/business/nouns/message) to a real [Person](/business/nouns/person).

## Satisfies
| Criterion | Text |
| --- | --- |
| [SOC2 CC8.1](/systems/trust-and-governance/criteria/soc2/cc8-1) | The entity authorizes, designs, develops, configures, documents, tests, approves and implements changes to infrastructure, data, software and procedures. |
| [ISO27001 A.8.31](/systems/trust-and-governance/criteria/iso27001/a-8-31) | Development, testing and production environments are separated and secured. |

## Implemented by
- [Release](/workflows/processes/release)
- [Verification](/code/verification)
- [Environments](/code/platform/environments)

## Test
| Step | Rule |
| --- | --- |
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every Action marked `test` in the report period. |
| Assert | None touches a live record, a money Transaction or a Message to a Person outside the namespace’s test set. |

## Owner
[Engineering Lead](/agents/engineering/engineering-lead), [Engineering Team](/agents/engineering).

## Example
A founder runs a full test [Order](/business/nouns/order) through a bookkeeping service. The charge, the delivery and the receipt all land in test, and no real card or inbox is touched.