Saved cards and tokenization

When you save a card, Truvora encrypts it in the card vault and hands you back a token. From then on you only ever handle the token — raw card data never touches your systems, which keeps your PCI scope small.

What you can do with a token

• Charge it from the virtual terminal or the API
• Attach it to a customer for subscriptions and one-click charges
• Set a customer's default card for automatic billing
• Detach it when the card expires or the customer asks

Tokens are environment-specific: a sandbox token only works in sandbox, a live token only in live.