A financial services company is building a new analytics platform in a non-production environment. Developers need realistic customer records that preserve referential integrity across tables (so the same customer account number consistently links related records), but the actual account numbers must never be exposed. The company also wants the ability to reverse the process in a secured production system to retrieve original values when required for reconciliation. Which data protection method BEST meets these requirements?