01
Manage
Everything about the subscription itself.
- Plans, billing cycles and seats
- Cost, estimated and actually billed
- Renewal dates and trial endings, on a calendar
- Payment methods, as type and last four digits
- Every plan change kept in history
Subscriptions and access
Every subscription.
Every credential.
One secure place.
A secure workspace for managing subscriptions and everything that goes with them: logins, MFA codes, billing and who has access.
Free during early access. No card needed.
For individuals, teams, startups and businesses that manage more than a few subscriptions.
Why it's different
Give people access without giving away the credentials.
Subment manages everything around a subscription, from the plan to the audit trail, so access is granted, used and taken back in one place.
Subscription
Plan, billing and renewal
Credentials
Encrypted, masked until revealed
MFA
Codes generated on demand
Access
View, Use or Manage, per subscription
People
Workspace members and roles
Audit
Who opened what, and when
The problem
Subscriptions get hard to run once a team is involved.
The plan is the easy part. Everything around it ends up in different places, and nobody can answer the questions that matter.
- Who owns the account?
- Who has access?
- Where is the password?
- Who receives the OTP?
- When does it renew?
- Which card is being charged?
- Who gets removed when someone leaves?
One subscription, five places
The subscription
Plan, seats, renewal date
In the vendor's own dashboard
The password
The login that unlocks it
Somewhere else entirely
The MFA code
The second factor
On one person's phone
The billing
What it costs, and when
In a spreadsheet
The access
Who can use it
In chats, and in memory
Subment gives the subscription a home.
The idea
A subscription is more than a bill.
Behind every subscription there's a plan and a price, but also a login, a second factor and the people who use it. Subment treats them as one connected thing, not five separate ones.
The centre of it all
Subscription
Credentials
The login that unlocks it
Authentication
The MFA and recovery codes
People
Who uses it, and in which role
Access
What each person may see or do
Billing
Price, cycle, seats and card
Subment keeps everything connected to the subscription in one secure place.
The Subment difference
Seven places become one workspace.
Most teams hold their subscriptions together with tools that were never meant to talk to each other. Subment replaces the patchwork with one connected workspace.
The usual way7 tools
- Spreadsheet
- Password manager
- Chat
- Authenticator app
- Calendar
- Manual tracking
Nothing links them, so someone has to remember how.
With Subment1 workspace
One subscription workspace
- Subscription
- Credentials
- MFA
- OTP inboxIn development
- Billing
- People
- Access
- History
One subscription, with everything that belongs to it attached.
The usual wayWith Subment
Where logins live
The usual way: A spreadsheet, a chat thread, someone's memory
With Subment: On the subscription, encrypted and masked
Who can see a password
The usual way: Anyone who has the file
With Subment: Only people you choose. Others can use it without seeing it
Two-factor codes
The usual way: On one person's phone
With Subment: Generated on demand for people with access
Renewals
The usual way: A calendar entry, if someone made one
With Subment: Dashboard and calendar, before they bill
When someone leaves
The usual way: Change everything and hope
With Subment: Remove access, and see what they opened
The product
Manage. Secure. Share.
Everything Subment does is one of three jobs, and all three happen around the same subscription.
02
Secure
Everything that unlocks it.
- Logins, encrypted and masked until revealed
- TOTP / MFA codes, generated on demand
- Recovery codes, kept with the subscription
- OTP inbox for verification codesIn development
- Security health: which logins to fix first
03
Share
Everything about the people who use it.
- Workspaces, members and roles
- Permissions per subscription: View, Use or Manage
- One-time links that open once
- An activity log of every reveal and code
- Offboarding, with a checklist of logins to change
01 · Manage
Every subscription, its plan and its renewal, at a glance.
Plans, billing cycles, renewal dates, seats and pricing in one list, with the rest of each subscription one click away.
- Provider, plan, category, cost and next billing date on one row
- Whether two-factor is set up, and who has access, without opening anything
- Renewals and trial endings on a dashboard and a calendar, before they bill
02 · Secure
Everything that unlocks a subscription sits on the subscription.
The saved login, its two-factor codes and the people who can use them are on the subscription they belong to. No hunting through other tools.
- The saved login, encrypted and masked until someone reveals it
- Two-factor codes generated on demand, with a live countdown, and recovery codes kept alongside
- Verification codes gathered in one inbox (in development, so not shown here)
03 · Share
Give your team access without giving everything away.
Subscriptions and people are organized by workspace, so each team sees its own. Decide who can open each subscription and what they see when they do.
- Choose what each person sees: service details, logins, 2FA codes or passwords
- Share with a one-time link that opens once, then stops working
- Every reveal of a login or code is recorded in the activity log
Try it
Try the parts that make it different.
Four small, working models of how Subment handles sensitive access. It's sample data only, and nothing you do here is sent anywhere.
01
Masked until you say so
A saved password stays hidden. Revealing or copying it is a deliberate act, and it leaves a line in the activity log.
Team admin login
•••••••••••
Masked until someone asks to see it.
Activity
- Nothing yet. Reveal the password and watch this.
02
A code that's really ticking
Two-factor codes are generated when someone needs one, with the same countdown your phone shows.
Authenticator · Notion
--- ---
30
A live code from a demo secret. It's computed in your browser the same way an authenticator app does (RFC 6238), and it changes every 30 seconds.
03
A link that works once
Share a login with a contractor without pasting it into chat. Make a link, open it, then try to open it again.
What should the person see?
Link expires after
04
Access, in three plain levels
View, Use or Manage: pick one for each person and see exactly what changes for them.
Access to Slack
- See the subscription's details and billingallowed
- See which logins existallowed
- Copy a password or a 2FA codeallowed
- See a password in plain textnot allowed
- Edit the subscription and share itnot allowed
Who it's for
The same workspace, whether it's yours or your company's.
Individuals
Keep your own subscriptions, logins and renewals in one place, and see what renews before it bills.
Teams
Share access without sharing passwords in chats. Everyone gets what they need, and it's recorded.
Startups
Centralize your SaaS stack and who owns each account as the team grows, and take access back the day someone leaves.
Businesses
Manage the subscription lifecycle: billing, roles, per-subscription access and offboarding, with an activity log to show who opened what.
Security and trust
Why trust Subment with your credentials?
Subment holds the details that unlock your subscriptions, so this is what it stores, how it's protected, who can reach it, and what we don't claim yet. Every line describes what is built today.
What Subment stores
Stored encrypted
Logins and API keys, TOTP secrets and recovery codes.
Stored, scoped to your workspace
Subscriptions, plans, costs and renewals, plus members, roles and activity.
Kept minimal
Payment methods are type, provider, last four digits and a nickname. There is no field for a full card number.
How we protect your data
How is sensitive data protected?
Encryption
At rest, each secret is encrypted individually with AES-256-GCM before it is stored, each workspace under its own key, which is itself protected by a key management service. In transit, traffic between your browser and Subment is sent over HTTPS.
How is my account protected?
Authentication
Account passwords are hashed with Argon2id, and two-factor sign-in is available. Sign-in tokens live in httpOnly cookies that page scripts cannot read, and sign-in and sensitive actions are rate-limited.
Who can access it?
Access control
Only members of a workspace, by role, and per subscription at View, Use or Manage. Permissions are checked on the server every time, and access to one workspace never extends to another.
What happens to a credential?
Secrets
Stored encrypted, listed masked, revealed only on request by someone permitted. Revealing or copying a login, or generating a 2FA code, asks for a recent sign-in confirmation. Exports never contain passwords, keys or 2FA codes.
How is access logged?
Auditability
Revealing a password or generating a code is recorded with who and when, and never with the secret itself. When someone leaves, the log shows what they opened.
The activity log, in the product
Transparency: what we don't claim yet
- Subment is not zero-knowledge. The service can decrypt a secret when an authorized person asks to reveal it. That is what lets it generate 2FA codes and share a login.
- We hold no security certifications or audit reports yet, and we won't imply otherwise.
- Hosting and data-location details will be published here as soon as they are final.
Early access
We're building Subment with the people who will use it.
Subment is early, and it's open. You can create an account today. It's free while we shape it, and Early Access is temporary. That's also why this page has no customer logos, testimonials or numbers we can't stand behind.
Early product access
Use the working product now, free, with no card. Expect rough edges and change.
A say in what's built
Ask for features from inside the app, and tell us what you'd change.
No surprises
You'll get notice before paid plans start, and nothing you've stored is deleted or locked because of a plan.
Where the product is today. No dates, no promises.
Working today
- Subscriptions with plans, plan history and estimated vs. billed cost
- Encrypted credentials, masked until revealed, and 2FA codes on demand
- Sharing at View, Use or Manage, and one-time links
- Activity log of every sensitive action
- Workspaces, members and invitations, with offboarding
- Renewal calendar, and a dashboard of what needs attention
- Security health, with an on-demand scan for weak and reused passwords
- Domain and SSL expiry tracking
- Reports, CSV import, CSV or JSON export, and a service library
- Download your data and delete your account any time
In development
- OTP inbox: verification codes in one place
- Mobile app
Coming later
- Paid plans (planned prices are on the pricing page)
- Hosting and data-location details
- Documentation
Questions
What you'd want to know before trusting us.
What is Subment?
Subment is a secure workspace for managing subscriptions and everything needed to access and run them: plans and billing, saved logins, 2FA codes, and the people who use each one. It's for individuals, teams, startups and businesses, and it's in early access.
How is Subment different from a password manager?
A password manager stores logins. Subment is built around the subscription: its plan, cost and renewal, the credentials that unlock it, its 2FA codes, and who on your team can use it. It overlaps with a password manager where logins are concerned, so keep your personal passwords wherever you like.
Can I share a subscription without sharing the password?
Yes. Set each person's access to a subscription to View, Use or Manage. At Use, someone can copy a password or a 2FA code to sign in but can't see the password in plain text; that takes Manage. Copying still puts it on their clipboard, so this is controlled and recorded access, not a guarantee against a determined person. You can also send a one-time link that opens once, then stops working.
How does MFA / TOTP work?
A subscription's TOTP secret is encrypted like any other secret. When someone with access asks for a code, Subment generates it, with the same countdown an authenticator app shows, and records that in the activity log. Recovery codes are kept with the subscription. Verification codes sent by email or SMS will come with the OTP inbox, which is still in development.
Can my team use Subment?
Yes. Create a team workspace, invite members and give each a role. Each workspace has its own subscriptions, people and encryption key, and agencies can keep each client in a workspace of their own.
Can I manage personal subscriptions?
Yes. Every account has a personal workspace for your own subscriptions, logins and renewals, separate from any team workspace. It's included on every plan and doesn't count toward your team workspace limit. Your plan's subscription limit is one total across all the workspaces you own, personal included.
What happens when someone leaves the workspace?
Open their offboarding view to see everything they could reach, take that access back in one step, and get a checklist of the logins they knew. Subment can't change a password at the vendor for you, so the checklist ticks itself off as you change them. Removing someone ends their access on their next request, and the activity log shows what they opened.
How is sensitive information protected?
Secrets are encrypted individually with AES-256-GCM before they're stored, each workspace under its own key. Account passwords are hashed with Argon2id, sessions use httpOnly cookies, and sign-in and sensitive actions are rate-limited. Two-factor sign-in is available, and revealing or copying a login asks for a recent sign-in confirmation, so a session left open on a laptop isn't enough on its own. The Security section has the full list.
Can Subment see my credentials?
Secrets are encrypted before they're stored, and the activity log never contains them. But the service holds what it needs to decrypt a secret when an authorized person asks to reveal it. That's what lets it generate 2FA codes and share a login with a teammate. We'd rather tell you that than imply otherwise.
Is Subment zero-knowledge?
No. A zero-knowledge design would mean the service can never decrypt your secrets, which would rule out generating 2FA codes and sharing a login on your behalf. We chose to make those work, and to say so plainly. If key management ever changes, this page will change with it.
What security certifications does Subment currently have?
None yet. Subment holds no security certifications, such as SOC 2 or ISO 27001, and has no independent audit report to share. If that changes, it will be listed here.
Where is my data stored, and can I take it out?
We'll publish hosting and data-location details on this page as soon as they're final. We'd rather wait than promise something we might have to take back. You can export your subscriptions as CSV or JSON, download everything held about you, and delete your account, all from Settings. Exports never contain passwords, keys or 2FA codes.
What will it cost?
Nothing while Subment is in early access, which is temporary: everything is free and no card is needed. Paid plans are planned, and the planned prices are on the pricing page. Nothing you've stored is ever deleted or locked because of a plan, and you'll get notice before anything changes.
Your subscriptions shouldn't live across spreadsheets, chats, password managers and inboxes. Bring them together with Subment.
Free during early access. No card needed.
Not ready yet? Leave your email and we'll tell you when paid plans start. No spam.