[aprdm]

We do share the part that is relevant for the work to be done. We try to isolate it as much as possible and only share that.

We require some paperwork to be signed beforehand and we obviously do not share any production secrets or database information.

We usually have some database stub with fake data that they can work on / spin locally.

[muzani]

We tried doing that but it ended up being more effort isolating the part that they would work on.