[asharp]

There is something similar called token payments that is what most people (hopefully) use.

Basically when you get somebodies CCard, you take the details and pass them to the provider (storing them nowhere). You then receive back a token.

You can then bill said token like a standard card, but on compromise you can just invalidate all the tokens and no sensitive data has leaked.