Team Cloud

Team Cloud is the paid plan for teams that work on the same apps and APIs. It gives everyone shared API workspaces, rule sets and mock sets that update live once a manager approves each change, a secrets vault with per-person access, reviews for protected changes, a team session library and CI access, all end-to-end encrypted. A web console at console.subcloak.com handles billing, members, SSO with OIDC (SAML coming later), SCIM, policies and the audit log.

Cloak Proxy itself stays free for life. Team features appear only for people who join a team, and the free app never needs an account.

What your team gets

Shared workspaces and sets

Team API workspaces, rule sets and mock sets, with live updates and no Git needed. Each person chooses which rule and mock sets apply on their Mac. See Spaces, roles and permissions.

A vault with per-person access

Secrets in vault folders that only the people you add can open. Requests use them as {{vault:team/NAME}}. See Team vault.

Reviews for protected sets

Changes to a protected rule or mock set become proposals that a manager approves. See Protected sets and reviews.

CI that uses your team's sets

cloakctl applies team mock and rule sets in a CI job and uploads the recording to the team library. See CI with cloakctl.

Feature	Where to read more
Team workspaces, with live updates and no Git needed	Spaces, roles and permissions
Shared rule sets and mock sets	Spaces, roles and permissions
Roles and per-workspace permissions	Spaces, roles and permissions
Secrets vault with per-person access, end-to-end encrypted	Team vault
Comments and @mentions	Comments and notifications
Team session library with tags	Library and Findings
Review and approve changes to protected rule and mock sets	Protected sets and reviews
Team Findings and Report Bug to the team	Library and Findings
CI recordings from cloakctl, and CI access to team sets	CI with cloakctl
Live pair debugging	Pair debugging
Shared monitors with Slack, PagerDuty and Opsgenie alerts *	Monitors
Hosted team mocks *	Hosted mocks
Shared MCP servers and agent setups (never keys)	Shared agent setups
Admin policies	Policies
1-year audit log	Audit log
90-day version history	Version history
SSO and SCIM at no extra charge	Single sign-on (OIDC; SAML coming later), SCIM
Onboarding call (10+ seats, yearly)	Support and onboarding
First support reply within 1 business day	Support and onboarding

* Not end-to-end encrypted

Monitors and hosted mocks run on Subcloak’s servers, which read them. Nothing goes to them until someone publishes a monitor or a mock set from Cloak Proxy, item by item, after a warning. Everything else your team syncs is end-to-end encrypted.

How your team’s data is protected

• End-to-end encrypted. Team data is encrypted on members’ Macs before it’s uploaded. The keys are on members’ Macs, on the CI tokens admins create (for the spaces they’re given) and on the team’s printed Team Recovery Kit, never on Subcloak’s server. Subcloak can’t read your team’s workspaces, rule and mock sets, library, Findings, comments, agent setups or vault, or their names. With automatic approval after SSO turned on, Subcloak’s server and your identity provider can admit a Mac as an existing member; it’s off unless an admin turns it on.
• Every Mac checks the server. Who is in the team, their roles, which Macs are theirs, who can open each restricted space and who approved a protected change are all signed by members’ Macs. A Mac refuses anything the team didn’t sign, so the server can’t add a person, raise a role or approve a change.
• A person approves every new Mac. By default, a person’s first Mac joins only after they and an admin compare a 6-digit code, and each further Mac after they compare one with a Mac of their own. Signing in, even with SSO, never gives a Mac the team’s keys, unless an admin turns on automatic approval after SSO.
• The console holds no keys. An owner or billing manager can run billing, seats and settings without being able to read the team’s data, as long as automatic approval after SSO is off. Anything that needs a key, such as approving a member, is done by an admin’s Mac.

What Subcloak can see, such as members’ emails, roles and activity times, is listed on What Subcloak can and can’t see. The design and its limits are on Security model.

Who does what

Role	Needs a seat	What they do
Owner	No (optional)	Buys the team and has every console control: billing, seats, members, policies, SSO and SCIM, the audit log and deletion. One per team.
Billing manager	No	Billing, invoices and seat count, in the console.
Admin	Yes	Approves new members’ first Macs, invites and removes people, sets policies, SSO and SCIM, and creates CI tokens. Manages every open space.
Member	Yes	Uses the team’s spaces in Cloak Proxy at the role each space gives them.

See Spaces, roles and permissions for the details.

Pricing

Plan	Price
Team monthly	$5 a seat a month
Team yearly	$48 a seat a year ($4 a seat a month)

• At least 2 seats. Each seat is one named person who uses Cloak Proxy with the team. Owners and billing managers who don’t use the app, and CI tokens, don’t take a seat.
• Plus local tax, in US dollars. You buy in the console, and pay on the checkout page of Polar, our merchant of record.
• No free trial. A full refund of any team payment within 30 days, on request. See Billing and seats.
• A Team seat doesn’t include Personal Cloud, and a Personal Cloud subscription doesn’t count as a seat. They’re separate purchases.

Team Cloud and Personal Cloud

A person can use Personal Cloud beside any number of teams. Each has its own keys, and nothing moves between them unless the person chooses Copy to Team… or Copy to Personal, which copy (never move) and strip secrets as sync does. Leaving a team, or being removed, affects only that team’s data on the Mac.

	Personal Cloud	Team Cloud
For	One person’s own Macs	A team
Bought	In the app, Settings › Cloud	In the console, console.subcloak.com/start
Price	$3 a month or $25 a year	$5 a seat a month, or $48 a seat a year
Share links	Yes	No (share links are part of Personal Cloud)
Shared spaces, vault, reviews, CI, SSO, SCIM, audit log	No	Yes

Requirements

• Cloak Proxy 0.7.0 or later on a Mac with macOS 14 or later, for everyone who takes a seat.
• A web browser for the console. An owner or billing manager who doesn’t take a seat needs nothing else.
• For CI, cloakctl 0.7.0 or later on a macOS runner. The Linux cloakctl gets the team commands in a later release.

If your organization manages your Macs

CloudDisabled turns off Personal Cloud and Team Cloud together. CloudPersonalDisabled turns off only Personal Cloud, so people can use the team without a personal account syncing beside it. See Deploy to a team.

Related

Get startedBuy a team, set up its keys and invite people.

What Subcloak can and can't seeExactly what our servers hold for a team.

Billing and seatsPrices, seats, proration and refunds.

Security modelKeys, roles, who enforces what, and the limits.