How frequently do you perform penetration testing on environments where customer data is stored or accessed?

Penetration tests are conducted in a testing environment for every release. Testing on customer data environments is performed based on contractual agreements.