Tokenization keeps card numbers out of your systems.

Replacing a card number with a random token that has no value outside the provider's system. The real card number is kept in the provider's secure vault.

It reduces how much of PCI DSS applies to you, because card data never reaches your systems, but you still have obligations. Confirm your exact self-assessment questionnaire with your provider or a qualified assessor.

A provider token is issued by your payment provider for use in its system. A network token is issued by the card network (such as Visa or Mastercard) to replace the card number across the payment chain. Whether network tokens are used is managed by your provider.

Agent tokens such as shared payment tokens add limits: one seller, a maximum amount, a currency and a short expiry, so an AI agent can pay without ever holding the card number.