PCI tokenizer is pure snake oil.
"dear auditor, i do not store the credit card number, only an unique index to fetch it at any time on this rest service. i promisse it is totally not the same thing"
good luck trying to make thay avoid compliance work.
Blatant FUD. https://support.stripe.com/questions/export-customer-card-da...
I don't think the average ISO has the knowledge let alone a published set of credentials to receive card data, the ISO industry really sticks to the tooling platforms provide.
Conversely, if you’re anything but the most plain jane business, I would avoid transitioning from Stripe to Gravity like the plague. I watched them reject a candy company and a knitting goods business that were both reputable, over a decade in business each, and never had an abnormal spike in sales or questionable products on offer. Gravity either couldn’t get Stripe data transferred or properly integrated and ended up turning away both businesses (while blaming them for noncompliance).
If anyone wants to learn more about how Tilled works directly with ISO's who need a payfac solution for ISV customers email us at [email protected]