The only thing stored locally is an authentication token.

Everything else is stored in the PCI DSS scope.