What’s your approach to demonstrating your platform's security to potential clients/investors?

This seems like a tricky one to me - especially due to the fact that many companies are still anxious about any data stored on cloud and strictly prefer on prem. side note, launched my first product Smartrazor today and any feedback/critique would mean the world to us!