Presumably you have to get certified with SAQ D for actually storing your custopmers payment info instead of tokenizing. Huge hassle.