This security demonstration contains only synthetic records and payment processor test card numbers. It contains no real customer data.
The public CloudFront endpoint uses a deliberately non-PQC TLS policy. Its encrypted S3 origin is private; only this distribution can read it.