A Framework for Minimising Data Leakage from Non-Production Systems