SECURITY INFORMATION
What makes SovereignOS different from a regular phone?
It's a Google Pixel running a hardened build of Android. We start from GrapheneOS, strip out Google and its tracking, lock down the bootloader and USB data paths, and pre-install a vetted set of secure tools. You get a hand-configured secure device without having to be the expert who set it up.
How do you handle data sovereignty?
Your data stays on your device, under your control. No Google account, no default cloud sync, no telemetry phoning home. You decide what gets installed and where anything is stored. That's the whole idea behind the name.
Is SovereignOS FIPS or Common Criteria certified?
SovereignOS itself isn't formally FIPS or Common Criteria certified, and we won't pretend it is. It's built on GrapheneOS and Pixel hardware, including Google's Titan M2 secure element and hardware-backed verified boot. If you have a specific compliance requirement, contact us and we'll tell you straight what we can and can't support.
Can I use my own apps and messaging tools?
Yes. Install what you need through our app installer, no Google account required. Secure messengers like Signal, Molly, and SimpleX come ready to go through our Comms Installer, and you can add your own.
Which phones does SovereignOS run on?
We build SovereignOS for Google Pixel hardware, because the Pixel's Titan M2 secure chip and verified boot are what make the rest of our hardening possible. Right now that's the Pixel 8, 8a, and 8 Pro, the Pixel 9, 9a, 9 Pro, and 9 Pro XL, and the Pixel 10, 10a, 10 Pro, and 10 Pro XL. If you already own a supported Pixel, you can flash it yourself. If not, we can source one and ship it ready.
What does it cost, and what am I paying for?
There are two ways to get it. Self-Provision is $299 (normally $325): you bring a supported Pixel and we walk you through flashing SovereignOS yourself, so you're not paying for an operating system you could install for free. White Glove starts at $999 and varies by model: we source the device, set it all up, and ship it ready to use. Same hardened OS either way. You're paying for the setup, the tested app loadout, and the time you don't have to spend.
Why not just install GrapheneOS myself?
You can, and we'll think more of you for it. GrapheneOS is a strong base and we build on it in the open. What you pay us for is the work on top: the right apps already in place, the bootloader and USB data paths locked down, and a phone you can trust the moment it powers on instead of after a weekend of reading. Want to do it yourself? Self-Provision gives you our setup at a fair price. Want to skip the work? White Glove hands you the finished phone.
How do updates work?
Updates arrive over the air, straight to the device, tracking GrapheneOS and Google's monthly Pixel patches. They don't route through us and there's nothing to log into. You decide when to apply them. We're not sitting between you and your own phone.
Do I have to trust Spicy's servers or sign up for an account?
No, and that's deliberate. We don't want to be one more company sitting in the middle of your data. SovereignOS hardens the phone and then gets out of the way. It leans on public, open infrastructure where that's the stronger choice: open-source apps from F-Droid and the Aurora Store, Signal's network for messaging, ordinary mobile networks for service. There's no Spicy account, no phone-home, and no management server watching the device. Once it's yours, it's yours.
Can forensic tools unlock it?
No phone is uncrackable, and we won't pretend ours is. What SovereignOS does is make it slow and expensive: a locked bootloader, verified boot, strong encryption tied to the Titan M2 chip, and USB data disabled so the usual extraction paths are closed. A powered-off SovereignOS phone is a genuinely hard target. We'd rather be honest about the limits than sell you a guarantee no one can keep.
Won't carrying a "secure phone" make me stick out?
It's a real concern. A device that screams "I have something to hide" can attract the exact attention you're trying to avoid. SovereignOS is built to look and behave like an ordinary Android phone. It runs normal apps, makes normal calls, and doesn't advertise what it is. The point is a phone that's quietly hard to crack, not one that turns heads.
Can you set up phones for a whole team?
Yes. A lot of our work is for groups who need several devices configured the same way: newsrooms, legal teams, security details, small companies. We can handle bulk setup and tune the app loadout to how your people actually operate. Email hello@spicycorp.com and tell us what you're protecting.
ORDERING INFORMATION
When is payment taken from my account?
Payment is taken when you place your order, through our standard secure checkout.
How fast will I get it?
It depends on how you order. With Self-Provision, it's immediate: once your order clears, you flash your own supported Pixel using our guided web installer. With White Glove, we configure and harden the device and ship it ready to use, usually within a few business days. See our Shipping page for details.
What if I receive a damaged or wrong product?
Contact us at hello@spicycorp.com right away. If it's hardware, we'll make it right. If it's something we can fix remotely, we usually can. Our Refund and Returns policy has the full details.
Can I change or cancel my order?
It depends on whether the device has shipped or any flashing tokens have been used. Reach out to hello@spicycorp.com as soon as you can and we'll figure out how to make it work.
How do I track my order?
Use the Order Tracking link in the top menu, or the link in your order confirmation email, to check your status anytime.
