Is SOVEREIGN Legit?
A fair question. Here's the honest answer, and here's how to verify it yourself.
Buying a $1,290–$4,490 phone from a business you haven't heard of before is a legitimate thing to research. This page is written for exactly that reason.
We're not going to ask you to take our word for it. We're going to show you how to verify us independently — before you spend anything.
Who we are
SOVEREIGN is a trading name of Flux Holdings, an Australian business operating under Australian Consumer Law. We configure and sell Google Pixel smartphones running GrapheneOS — a free, open-source operating system.
We are not affiliated with, endorsed by, or partnered with the GrapheneOS Project. GrapheneOS is their trademark. We install their software.
We use Proton Mail for business email — the same product we recommend to customers. We ship to Australia and New Zealand.
Flux Holdings — ABN 50 427 230 683
Contact: [email protected]
How to verify us — without taking our word for it
- 01
Check the verified boot fingerprint
Every SOVEREIGN device ships with a published verified boot fingerprint on our /verify page. Compare the number shown on your phone's boot screen against ours AND against the GrapheneOS Project's own official values at grapheneos.org/install/fingerprints. If they all match, you have hardware-level cryptographic proof that your phone is running genuine, unmodified, official GrapheneOS — and that we shipped exactly what we said.
- 02
Check the ABN
Our Australian Business Number can be verified at abr.business.gov.au. Any registered Australian business has a public ABN record. If we are not in that register, don't buy from us.
- 03
Contact us before you buy
Email us at [email protected] and ask a specific technical question about your setup. We encourage this — a business that won't answer a technical question before you spend $2,000+ is not a business worth buying from.
- 04
Check our email headers
When we email you, your email client can show you the full headers. Our email is sent from a Proton Mail Business account with DKIM, SPF, and DMARC configured. If our email fails those authentication checks, do not buy from us.
- 05
Look us up in the GrapheneOS community
Search for SOVEREIGN on r/GrapheneOS, r/privacy, and the GrapheneOS community forums. We are transparent members of the community, not outsiders.
Why all sales are final
All sales are final once a phone ships — this is industry standard for every GrapheneOS reseller in Australia. The reason is not to protect us from refunds. It's because a returned device may contain the customer's most sensitive personal data, and we have no way to verify its state or history. We cannot safely wipe a returned device and re-sell it without knowing what data may be on it.
Manufacturing defects are handled under Australian Consumer Law — that protection always applies. The all-sales-final policy is specifically for change-of-mind returns only.
If you have concerns about whether a SOVEREIGN phone suits your needs, book a right-sizing consult before you buy. That's what it's for.
What legitimate privacy phone sellers do and don't do
This applies to any privacy phone purchase, not just SOVEREIGN. Use it as a checklist.
A legitimate reseller will:
- Publish verified boot fingerprints you can check against the official GrapheneOS project values
- Have a registered Australian ABN (for AU-based sellers)
- Answer technical questions before purchase
- Be transparent that GrapheneOS is free, open-source software and that you're paying for configuration and support, not a proprietary OS
- Have a clear, honest returns policy
Be cautious of sellers who:
- Claim a "custom" or "enhanced" version of GrapheneOS — verified boot fingerprints will tell you if this is true or false
- Refuse to answer technical questions before purchase
- Cannot provide an ABN or registered business address for an Australian operation
- Use fear-based marketing ("your phone spies on you 90 times per hour") without sourcing
- Cannot explain what their hardening profile actually does
What we commit to
- We publish the verified boot fingerprints for every device we sell. You can check them.
- We tell you exactly what GrapheneOS is: a free, open-source project. We charge for configuration, documentation, and support.
- We operate under Australian Consumer Law. Your statutory rights always apply.
- If you have a problem with your SOVEREIGN phone, contact us. We are reachable at [email protected] and we will respond.
Common questions
- Is SOVEREIGN an Australian business?
- Yes. SOVEREIGN is a trading name of Flux Holdings, ABN 50 427 230 683, registered in Australia and operating under Australian Consumer Law. You can verify the ABN at abr.business.gov.au. We ship from Australia.
- Do you modify GrapheneOS?
- No. We install official, unmodified GrapheneOS from the GrapheneOS Project. Our work is configuration — applying a documented hardening profile, installing a curated set of apps, and attesting the device. You can verify this yourself: the verified boot fingerprint on your device will match the GrapheneOS Project's own published values exactly.
- How do I know you haven't added spyware or modified the OS?
- The verified boot fingerprint on your device is a cryptographic hash of the actual OS image. If we had modified GrapheneOS in any way, the fingerprint would differ from the official value published at grapheneos.org/install/fingerprints. Check it yourself against both our published fingerprint and the official one. If they match — and they will — you have hardware-level proof the OS is genuine.
- What if something goes wrong with my phone?
- Contact us at [email protected]. For manufacturing defects, Australian Consumer Law guarantees apply and we will handle it. For configuration issues, we offer a support service. For accidental wipes or factory resets, our reconfiguration service exists specifically for that situation.
- Are you affiliated with or endorsed by the GrapheneOS Project?
- No. We are an independent business. GrapheneOS is a trademark of the GrapheneOS Project. We install their software, which is free and open-source. The GrapheneOS Project does not endorse, certify, or have a commercial relationship with any reseller, including us.
- Can I visit you in person?
- We are an online business and do not operate a retail location. All communication is via email, and all orders are shipped. We are happy to answer questions before purchase via email or a right-sizing consult call.
Questions before you buy?
Email us at [email protected] or book a right-sizing consult.