"Your application" where? If you're a merchant you need to collect payment data from the end user which is where PCI kicks in. If you want to minimize PCI footp

"Your application" where? If you're a merchant you need to collect payment data from the end user which is where PCI kicks in. If you want to minimize PCI footprint on your downstream systems you can tokenize the payment instrument before it hits them - Cybersource supports tokenization. If you're on the processor side you need the PAN unless it's tokenized by the card network like Visa or MC which is how apple pay works from the tokenization standpoint.