Zero trust. Zero compromise.
High-security smartphones
GrapheneOS phones configured individually for your threat model. Hardware-backed key protection, encrypted communication and separated work profiles, without unnecessary services. Your device arrives ready to work.
About Vault Nero
We don't sell ordinary phones. We build mobile security environments for people who need maximum control over their data and communication.
We treat every device as a project of its own. We start by understanding how you work and what you need protection from, and finish with a phone that follows the agreed rules from the very first start. No unnecessary apps, no manufacturer defaults and none of the compromises usually made for convenience.
- System
- GrapheneOS
- Encryption
- AES-256 and E2EE
- Payment
- On delivery
Security technology
Five layers of protection, from hardware to data access policy. Each works independently, and together they contain the impact of any single weakness.
-
Zero Trust
Access policy layer
Limited trust, access control and app isolation. No app gets more than it needs, and each one runs in its own isolated environment.
-
AES-256 and E2EE
Data and communication layer
Encryption of data and communication. Stored data is encrypted on the device and messages are protected end to end, so only the sender and the recipient can read them.
-
Hardened OS
System layer
Security-focused operating systems, including GrapheneOS. A hardened kernel, a reduced attack surface and fast security updates.
-
Verified Boot
Boot layer
System integrity verification. Every time the phone starts, it checks that the system has not been modified before any data becomes available.
-
Hardware Security
Hardware layer
Hardware protection of cryptographic keys. Keys are kept in a dedicated security chip and never leave it.
More than a smartphone
Individual configuration, fewer unnecessary services, permission control and separated work environments. Every device is tailored to a specific threat model.
Configuration covers which services are switched off, which permissions each app receives and how work environments are separated. We agree every one of these decisions with you before the device is prepared.
See the modelsConfiguration profile
- Individual configuration
- Settings chosen for your threat model, not a template.
- Fewer services
- Only what you actually use. Every service removed is one less path of attack.
- Permission control
- Network, sensor and file access granted deliberately, app by app.
- Separated environments
- Distinct profiles for work and private life, with separate data and apps.
From order to first start
A simple, predictable process. You pay nothing upfront, and we agree every stage of the configuration with you by email.
-
Order
Choose a model and place your order in the shop. You enter no payment details and pay nothing upfront.
-
Consultation
We contact you by email to understand how you work, define your threat model and agree the scope of configuration.
-
Configuration
We prepare the device: install the system and set up encryption, app permissions and separated profiles.
-
Delivery
A courier delivers the phone. You pay on delivery, once the device is in your hands.
Who is it for?
Entrepreneurs, executives and professionals who work with confidential information.
Entrepreneurs
Business owners who handle negotiations, investor talks and correspondence that must not leak.
Executives
Board members and directors who know strategies, results and decisions before they are announced.
Professionals
Lawyers, advisers and specialists who work every day with information protected by professional secrecy.
- Fewer unnecessary services.
- A smaller attack surface.
- More control.
We don't promise invisibility. We engineer security on proven technologies.
Order a custom configurationFrequently asked questions
A short guide to what Vault Nero phones are and what you can expect from them.
How is a Vault Nero phone different from an ordinary smartphone?
An ordinary smartphone is configured for convenience and the manufacturer's services. A Vault Nero phone runs a security-focused system, including GrapheneOS, with a limited set of services, controlled app permissions and separated profiles. Every device is tailored to a specific threat model.
Does the phone make me fully anonymous?
We don't promise invisibility, and no device offers absolute protection. We engineer security on proven technologies that substantially reduce the attack surface and the risk of unauthorised access to your data.
Which operating system does the phone run?
We use security-focused systems, including GrapheneOS: a hardened kernel, integrity verification at every start and fast security updates.
What does tailoring to a threat model mean?
A threat model answers the question of what, and whom, you need to protect your data from. Based on it, we decide which services to switch off, which permissions to grant apps and how to separate work environments.
Can I keep work and private use apart?
Yes. We configure separate profiles for work and private life, with separate data and apps. One device replaces two, and information from the two environments does not mix.