What is the role of tokenization in Phreesia's payment security?

• A. It converts card data into a token to protect the actual card number
• B. It increases speed by skipping encryption
• C. It stores card numbers in plaintext on device
• D. It is used for video authentication

Answer: (A)

Tokenization replaces sensitive card data with a non-sensitive token, so the real card number is never exposed in the payment process. In Phreesia’s payment flow, the card details are sent to a secure token service that returns a token. That token is used for processing instead of the actual card number, and the real data stays protected in the secure vault. This reduces exposure, lowers PCI DSS scope for the merchant, and makes fraud far less likely because the token on its own isn’t usable for purchases.

So the best description is that tokenization converts card data into a token to protect the actual card number. The other options don’t fit: skipping encryption would weaken security; storing numbers in plaintext on a device is unsafe; and video authentication isn’t related to card data protection.