Yes. Set DEMO_MODE=true in .env. Changes are refused, credentials are masked and demo data resets on a schedule.