Network tokens are scheme-issued replacements for the card PAN. Because a network token isn't the raw card number, using it in place of a PAN reduces the sensitive data flowing through your environment, complementing vaulting in lowering PCI exposure.

With Guardian's forwarding, even the cryptogram a network token needs can be injected server-side, so SAQ-A merchants can use network tokens without ever handling raw payment credentials.

→ Learn about network tokens