Comment by mnahkies

That makes sense, but simply isn't viable cost wise IMO if you're trying to bootstrap a side project - until you have your first users and a sense that you have something people are willing to pay for, spending thousands on compliance certifications seems pretty risky.

I'm interested in what the best strategy to build/establish trust when you can't yet afford to pay for certification is.