...
A token is a string of letters and numbers that represent a credit card. Importantly a token is not a credit card and thus does not carry the burden of PCI regulations surrounding storing credit cards. AMS only stores tokens, never credit cards. Not storing tokens credit cards is how the winery is able to comply with PCI regulations in a reasonable manner. If AMS were to store card numbers the winery would be subject to the same strict regulations as major banks and retails stores, ostensibly making it impractical/impossible to comply with PCI.
...