The short answer
To demo without showing real customer data, use a demo account filled with realistic fake data wherever you can, and mask what remains on any live account before you share. Be careful with sandboxes: Salesforce, for example, says its Partial Copy and Full Copy sandboxes include production data, so they can contain the same customer records as your live system. For demos on real or copied data, a browser extension such as BlurPilot blurs emails and phone numbers automatically, blurs your list of customer names (Pro), and remembers the columns you never want on screen, so the demo still looks real.
Key takeaways
- A clean demo account with fake data is the gold standard, but it goes stale and rarely shows the edge cases prospects ask about.
- Sandboxes copied from production are not anonymous. Partial and full copies carry real customer records.
- Live accounts are the most convincing demos and the riskiest. Mask contact details, customer names and deal values before you share.
- Showing another customer's data to a prospect is a disclosure of personal data, and it tells a competitor who you sell to.
What a prospect can learn from one glance at your screen
Nobody plans to show another customer's data. It happens in the corners of the demo: the account switcher, the recent records list, the search box that autocompletes, the dashboard tile with last quarter's biggest deal. In thirty seconds, a sharp prospect can learn:
- Who your other customers are, including their competitors, which is awkward at best and a breach of confidence at worst.
- What they pay, from deal values, discounts and invoice totals, right before you name your price.
- Who to call, from contact names, emails and phone numbers, which are personal data under the GDPR.
The GDPR expects personal data to be “adequate, relevant and limited to what is necessary” for its purpose (Article 5(1)(c)). Your other customers' contact details are not necessary for anyone's demo.
Three ways to demo safely, compared
| Demo account, fake data | Sandbox copy | Live account with masking | |
|---|---|---|---|
| Looks real to prospects | Only if the fake data is well made | Yes | Yes |
| Contains real customer data | No | Often: partial and full copies do | Yes, masked on screen |
| Upkeep | High: seed data goes stale | Medium: refreshes and access control | Low: rules set once |
| Shows the latest features | Only if maintained | After each refresh | Always |
| Risk on a live call | Lowest | Same as production | Low, with masking on |
1. A dedicated demo account
Build an account with believable fake companies, people and numbers, and keep it current. Use obviously fictional names so nobody mistakes them for real clients, and reserved example domains such as example.com for email addresses. It is the safest option and worth the effort for your most common demo path.
2. Sandboxes and staging copies
Copies are convenient because they look exactly like production. That is also the problem: Salesforce describes a Full Copy sandbox as including “full production data, and all related files”. Unless the copy is masked or anonymized when it is created, treat it like production on a screen share.
3. A live account, masked before you share
Sometimes only the real account will do: an existing customer asking for an advanced walkthrough, a partner demo, an executive review of real results. This is where in-browser masking earns its place.
How to demo on a real account without leaking it
BlurPilot works on the web page itself, so it protects any web-based CRM, admin panel or SaaS product, whichever meeting app you use. Set it up once:
- Turn on Presenter Mode with Alt+Shift+H. Emails, phone numbers and card numbers blur on every tab, for free.
- Add your customer names as custom words (Pro). They blur wherever they appear on the page: list views, notes, search suggestions.
- Blur the columns once. Click Blur an element on the account name and deal value columns, then choose Whole site. They stay hidden on every future demo. See the rules guide.
- For high-stakes demos, flip the logic. Blur everything except (Pro) blurs the whole page, charts and images included, and you click only the parts the prospect should see.
- Share the setup with the team. Export a rule pack and every rep imports the same rules and custom words, so every demo hides the same fields.
The page keeps working under the blur, so you can still click through records, filter and type. Press the shortcut again after the call and everything returns, without a reload.
A demo-day checklist for sales engineers
- Demo path rehearsed in the demo account; live account only when it adds something the prospect needs.
- Presenter Mode on (Alt+Shift+H), icon red, custom words loaded.
- Tabs for the demo opened in advance; email, chat and the production admin closed.
- Share a window or a tab, never the entire screen.
- Search with care: autocomplete suggests recent records, which are usually other customers.
- Recording the demo for the prospect? Watch it back before you send it.
- Running the call on Zoom, Meet or Teams? Use the privacy settings for each app.
Frequently asked questions
Is it OK to demo on a live customer account?
Only with the customer's agreement and with other customers' data masked. Even then, contact details, names and deal values should be blurred before you share, because anything on screen can be screenshotted or recorded.
Are sandbox environments safe for demos?
Not automatically. Sandboxes copied from production, such as Salesforce Partial Copy and Full Copy sandboxes, include real customer records unless they are masked when created. Treat an unmasked copy like production.
How do I hide customer names in a CRM demo?
Add them as custom words in BlurPilot Pro, so they blur wherever they appear, and save a whole-site rule for the account name column. Both apply automatically on every future demo.
Will blurring make the demo look broken?
No. Only the sensitive values are blurred and the page keeps working, so prospects still see the layout, the workflow and the numbers you choose to show.
Can a whole sales team use the same setup?
Yes. Export your rules and custom words as one rule pack and share it, or let IT push it to managed browsers. The Team plan covers 10 people for $199 a year.
Does BlurPilot send our CRM data anywhere?
No. Detection and blurring run inside the browser. Page content, rules and custom words never leave the device; the only routine network call is a daily license check.