Operational privacy, prepared
Privacy you can hold.
A complete, hardened operating posture — provisioned, compartmentalised and verified before it ships. The device is the vessel. The preparation is the product.
Privacy shouldn't depend on setup skill.
Every layer is configured and verified at the bench — so protection doesn't rest on what the owner remembers to switch on. It arrives done.
Prepared before arrival
Configured before first boot.
Each device passes through a fixed preparation sequence. By the time it reaches you, the work that usually goes wrong is already finished — and verified.
- 01Verified boot confirmedverified
- 02Bootloader relockedverified
- 03Profiles compartmentalisedverified
- 04Mullvad VPN provisionedverified
- 05Secure comms preparedverified
- 06Emergency layer armedverified
- 07eSIM stagedverified
- 08Update channels verifiedverified
- 09Integrity checked before dispatchverified
Choose the vessel — Pixel 10 range.
Pick the hardware. The system comes prepared either way.
Configure your finish
Pixel 10 Pro, your way.
Four finishes. One prepared system. The colour is a preference — the hardening, provisioning and failsafe layer are identical.
Hardened in the details.
Inspected, relocked and verified before dispatch
Every sensor, sealed and checked.
The camera system is inspected and the housing sealed before a device is ever cleared. Nothing ships unverified.
Bootloader relocked. Boot verified.
The frame is the easy part to admire. The hard part is underneath — a relocked bootloader and hardware-attested verified boot, confirmed on every unit.
Four finishes. One standard.
Obsidian, Porcelain, Hazel, Bay. The colour is yours to choose. The hardening never changes.
It arrives as a complete operational system.
Not add-ons. The stack, provisioned and onboarded for you.Threema, provisioned and keyed.
Licensed, installed and configured before dispatch. No account setup, no key exchange left for you to get right.
Mullvad VPN, already running.
Twelve months provisioned, always-on, no logs and no configuration required. Connectivity is private from first boot.
Global eSIM, staged.
Data ready on arrival. Move between regions without exposing a home number or re-running setup.
Separate profiles, by design.
Work, travel and personal contexts kept apart — so one situation can never expose the rest.
Prepared to cross borders.
A clean, minimal-metadata posture configured before you pack — nothing to scramble for at a checkpoint.
Fleets, to one standard.
Multiple devices prepared to a single specification, NDA-backed and ABN-invoiced, delivered ready to hand out.
The setup you'd dread is already done.
Subscriptions activated, comms keyed, network running, connectivity staged. You receive a system in a known-good state — not a box of tasks.
The failsafe layer
Phantom Protocol.
A prepared, layered response held quietly in reserve — duress separation, compartment continuity and remote erase, configured at build time. Composed readiness for the moment it's needed, not a feature you hope you never test.
Prefer to save? Pixel 9 range.
Same preparation. Last-generation hardware.
Executive & travel
Carry a lot. Reveal little.
From a single executive device to a prepared fleet — configured, compartmentalised and ready before departure. The preparation travels with you.
Trusted with serious deployments.
Operators, executives and private clients"It arrived ready. No setup, no guesswork — the failsafe layer was already configured the way we'd have asked for."
Security lead · professional services
"We deployed across a travelling team. One standard, NDA-backed, invoiced to the ABN. It simply worked."
Operations director · private firm
"I'm not technical — that was the point. I turned it on and the protection was already there."
Private client
Documented, not described.
Every build is photographed through preparation and dispatch
Operational photography — preparation through dispatch.
Three ways to carry a phone.
Where the preparation actually happens| Off-the-shelf | De-Google it yourself | Privacy Devices | |
|---|---|---|---|
| Verified boot & relock | Not available | Manual, error-prone | Confirmed on every unit |
| Provisioning & onboarding | Your problem | Your problem | Done at the bench |
| Failsafe layer | None | None | Phantom Protocol, armed |
| VPN · secure comms · eSIM | Separate, unconfigured | DIY, piecemeal | Provisioned & keyed |
| Support & fleet | Carrier queue | Forums | Engineer-led · NDA · ABN |
Questions, answered.
Is a hardened GrapheneOS phone legal?
Yes. These are standard Pixel devices running GrapheneOS — an open-source hardened Android — configured for lawful personal and professional use.
What arrives already set up?
Verified boot, relocked bootloader, compartmentalised profiles, Mullvad VPN, Threema, a staged eSIM and the Phantom Protocol failsafe layer — configured and verified before dispatch.
Do I need to be technical?
No. The preparation is the product. You receive a system in a known-good state and turn it on.
Can you deploy a fleet for a team?
Yes — multiple devices to one specification, NDA-backed and ABN-invoiced, delivered ready to hand out.
How is it shipped and paid for?
Same-day Australian dispatch before 2pm AEST. Card via Stripe, or BTC / Lightning. Backed by a 24-month hardware warranty and 14-day money-back.
What happens with updates?
Update channels are verified before dispatch, and GrapheneOS continues to receive security updates you apply directly on the device.
Privacy Devices
Already configured. Already hardened.
Talk to the engineer who prepares them. No sales script — the right system, provisioned and verified before it ships.
The system is ready before you are.