Tokenization, when applied to data security, is the process of substituting a sensitive data element with a non-sensitive equivalent, referred to as a token, that has no extrinsic or exploitable meaning or value. The token is a reference that maps back to the sensitive data through a tokenization system.

What is tokenization and how does it work?

Tokenization works by removing the valuable data from your environment and replacing it with these tokens. Most businesses hold at least some sensitive data within their systems, whether it be credit card data, medical information, Social Security numbers, or anything else that requires security and protection.

What does it mean card not tokenized?

This occurs when the credit card has expired. Often times, banks will still honor an expired credit card, but according to PCI Compliance, Blackbaud Payment Services must purge the expired credit card information six months after the credit card expires.