Tokenization and stored credentials
Card data should never be stored in your own systems. A gateway replaces the card number with a token that is useless elsewhere, keeping your PCI scope narrow while allowing you to bill on schedule. Stored-credential transactions must also be flagged correctly in the authorization or they can downgrade.
