First generation tokenization systems use a database to map from live data to surrogate substitute tokens and back.
Another limitation of tokenization technologies is measuring the level of security for a given solution through independent validation.