Typically you're going to be storing tokens from e.g. Stripe these days, and not raw cards. Major card carriers provide the same service too. Still worth doing

Typically you're going to be storing tokens from e.g. Stripe these days, and not raw cards. Major card carriers provide the same service too. Still worth doing well and securely, but much less risky