Earlier quoted context omitted.
Well there is, but it's not cheap. You get a trusted third party to Audit you and publish the result of their Audit, something similar to a SAS70. It's not a perfect solution but it's an option to consider
fair point – this is something we consider doing before expanding to b2b market. but: my day job is in ecommerce (I work as a product manager at FastSpring) and I used to work on CleanMyMac at MacPaw – had to work with trust in both. it's somewhat unexpected but people who are buying software for themselves usually don't care about PCI compliance, audits, and other artifacts of "institutional validation". they care a…
Having said that, I deal with independent audits in my job, and they're not all that reassuring.