 With the lack of standards, the latter is critical to establish the strength of tokenization offered when tokens are used for regulatory compliance.The PCI Council recommends independent vetting and validation of any claims of security and compliance