Yes, virtual terminals use encryption and tokenisation to keep cardholder data secure. Providers should comply with the Payment Card Industry Data Security Standard (PCI DSS).