I've seen instances of using example.net instead of the primary example.com domain, but as a user I prefer subdomains. It's easier to confirm ("visually", just from the domain name) that it's actually coming from the same company and not a phishing email, for example.

Either way is fine. A subdomain is generally easier for users to grok and it looks less like a phishing attempt.