BookmarkIT & infrastructure
Keep dashboards, runbooks, vendor portals and internal tools in a collection your colleagues can find.
FOR TEAMS THAT WANT TO OWN THEIR TOOLS
Shared knowledge.
Your infrastructure.
Give teams a consistent starting point for the tools, documentation and resources they use every day. Keep control of where the encrypted collection lives.
ONE FOLDER. MANY USES.
A common
starting point.
New starters & project teams
Invite colleagues by email to a Business or Enterprise workspace. An administrator verifies the new identity and provisions encrypted access.
Distributed workspaces
Use selected collections in Chrome/Chromium 120+ or Firefox 140+ desktop extensions. Firefox's current download is unsigned for temporary installation.
A CLEAR VIEW OF WHAT’S HERE AND WHAT’S NEXT
Start with what works.
Plan for what’s coming.
Bookmark Sync is an early-stage project. These are available capabilities and a roadmap, not an enterprise service contract or release-date promise.
Team workspaces you can host.
- Business and EnterpriseSelf-hosted workspaces with email invitations, member inventory, signed controls, workspace audit metadata, and per-client session revocation.
- Enterprise organizations and rolesCreate organizations and assign members. Enterprise roles are admin, user, and read-only; non-admin members are scoped to assigned organizations.
- Enterprise E2EEEnterprise always uses client-held collection keys. Admins confirm invitees' key fingerprints, approve signed grants, and an unlocked client provisions collection envelopes.
- Business encryption choiceBusiness can use client-held E2EE or explicitly choose server-held team keys. In server-held mode, the service operator can decrypt collections.
- Signed snapshot receiptsEnterprise clients verify the pinned, fingerprint-confirmed administrator history and signatures on collection snapshots.
- Scoped removal requestAdmins can request best-effort client deletion across managed collections in 100-folder signed chunks without a total deletion cap. Offline clients and private or moved bookmarks are not remotely wiped.
Connect an identity provider.
- SAML & OIDC single sign-onAuthenticate organizational identities through an identity provider or broker.
- Identity-provider group synchronizationMap trusted external group identities to existing organization membership and key-provisioning workflows.
- Automated lifecycle and policyDefine account linking, group-removal handling, and organization policy without weakening client-held key authorization.
- Managed distribution and scalePlan signed extension distribution and shared coordination before multi-process deployment.
SIMPLE ANNUAL EUR PRICING
Start free.
Scale by accepted seats.
Stripe upgrades and subscription changes show a quote or proration preview and require administrator confirmation. The selected Enterprise tier's rate applies to every accepted seat. Pending invitations reserve capacity but are not billed until accepted.
Free for one.
Up to 100 personal collections. Personal folders cannot create new invitations; existing legacy shares and members remain unchanged.
€4 per seat / year.
Free for up to 5 members. Paid Business supports up to 15 members, 3 collections and 250 bookmarks total. Paid billing has a 5-seat minimum (€20/year minimum).
Free for up to 5.
Free tier: 3 collections and 250 bookmarks total. Paid tier: unlimited product quotas. Annual all-seat rates: €4 per accepted seat for 6–29; €3 for 30–49; €2 for 50+. Accepted members with a pending collection key are billed as seats.
THE SECURITY MODEL, WITHOUT THE FINE PRINT
Authentication is
only half the story.
Signing in proves who you are. Unlocking an E2EE collection also requires a client-held private key. SSO is not implemented and would not replace recovery or device pairing.
Encryption depends on your plan
Enterprise is client-held E2EE: the service sees account and membership metadata, public keys, and encrypted snapshots, but not collection keys. Business may choose the same mode or server-held keys that let the service operator decrypt Business content.
Signed trust must start out of band
Enterprise clients pin a genesis administrator signing key after independently confirming its fingerprint. Signed controls and snapshot receipts detect unauthorized changes relative to that trust anchor. A host that controls delivered website code can still attack an unlocked client.
Removal is not erasure
A signed member revocation blocks future server access and pauses affected E2EE collections until key rotation. Optional client deletion is best-effort across managed collections, processed in signed 100-folder chunks with no total product cap; moved/private bookmarks and data already copied are not wiped. No independent security audit is claimed.
YOUR DEPLOYMENT, YOUR DECISIONS
A sensible pilot starts small.
Choose a trusted server.
Use HTTPS, persistent storage and a tested backup process. This version is designed for one server process.
Start with a small team.
Decide whether guests are appropriate. New account and guest creation can each be disabled by the server administrator.
Test your actual workflow.
Check recovery, offline use, member removal and your supported browsers before expanding the deployment.