Sure, but other companies, e.g., Spreedly, let you outsource PCI compliance as well. This is the first I've seen that let's you get away without having a merchant account.