I'm certain all 37s employees have access to the production database anyway; they're still a fairly small company. The only real additional risk here is runnin

I'm certain all 37s employees have access to the production database anyway; they're still a fairly small company. The only real additional risk here is running non-production code against live data; e.g. the risk of a feature branch sending extra email to customers. Given the nature of their products this is probably manageable, assuming they don't run batch jobs (via eg. resque)