[pinky07]

We have done a few exceptions (e.g. Defense departments), but we usually refuse if not really justified.

[infogulch]

These approaches should be completely flipped, the default should be your upgrade engineers get remote access to the customer's database (vpn, etc) and run the standardized and ad-hoc upgrade scripts on their system. Shipping the customer's data back and forth for every upgrade is absurd and a privacy nightmare.