Encrypted data scope

pg_tde encrypts the following components:

• User data in tables using the extension, including associated TOAST data. The table metadata (column names, data types, etc.) is not encrypted.
• Temporary tables created during the query execution, for data tables created using the extension.
• Write-Ahead Log (WAL) data for the entire database cluster. This includes WAL data in encrypted and non-encrypted tables.
• Indexes on encrypted tables.

Check out the table access methods