I've written an encryption utility that uses aes 256 and am happy that it all works fine and believe it to be tested well after usage of several months.

I'd like to sell it over the net via a website that is already functional. Is there a formal way to notify people that it does what it says it does without users suspecting any spyware etc?