Tokenizing means swapping the card number for an identifier that only means something inside the certified environment that created it. If that token leaks, it can't be used anywhere else.
It's what allows recurring billing, one-click upsell, and smart retry without the real card data ever passing through your server, which is a PCI-DSS requirement.