A computerized method for creating a sandbox for an original tenant of a database system at a point in time, the original tenant having original tenant data stored in an immutable storage of the database system associated with an original tenant identifier, the original tenant data as of the sandbox creation point in time being a virtual snapshot of the original tenant data to be made accessible to a sandbox tenant, where sandbox tenant data can be changed or augmented without changing or augmenting the original tenant data, and the original tenant data can be changed or augmented without changing or augmenting the sandbox tenant data, comprising:
- creating, via the database system, a sandbox tenant identifier;
- creating a sandbox tenant by associating the sandbox tenant identifier with the virtual snapshot of the original tenant data and with sandbox tenant data created by the sandbox tenant subsequent to the sandbox creation point in time, wherein the sandbox tenant data created by the sandbox tenant subsequent to the sandbox creation point in time is inaccessible to the original tenant;
- subsequent to the sandbox creation point in time, creating subsequent original tenant data associated with the original tenant identifier stored in the immutable storage, the subsequent original tenant data not accessible to the sandbox tenant, wherein the original tenant may access original tenant data created both before and after the sandbox creation point in time that is stored in the immutable storage, and wherein the subsequent original tenant data is written as new original tenant data that does not alter older original tenant data stored in the immutable storage.