Teramind exists to solve difficult problems: insider threats, data leaks, and compliance - while providing deep visibility into how work actually happens. However, because the platform collects granular activity data to identify productivity trends and risky behavior, it should be used legally and ethically. Used carelessly, monitoring can feel like surveillance; used well, it protects both the company and the employee by highlighting process bottlenecks and catching risks before they become breaches.

Teramind's monitoring platform is built on a "Privacy-by-Design" architecture, ensuring you don't have to choose between security, productivity, and privacy. By utilizing intentional and proportionate configurations, such as refined monitoring profiles, application and website scopes, and exception-based screen recording you can gain critical workforce efficiency insights without casting too broad a net.

This guide walks through how to set up monitoring that is intentional, explainable, and respectful of privacy rights.

Rather than applying a "one-size-fits-all" policy, use Monitoring Profiles to tailor data collection to specific roles.

For example, you might enable Social Media monitoring for your Marketing department (where it is relevant to their job) but disable it entirely for Engineering or HR.

Furthermore, Teramind supports integration with Active Directory and Entra ID, which can be used to seamlessly sync your existing users, computers, and Organizational Units (OUs) directly into Teramind. Beyond simple importing, this integration allows you to leverage directory Groups and Attributes to automate privacy policies. For example, you can configure the system to automatically apply restricted monitoring profiles to specific groups, such as executives or contractors or use attributes to filter reports, ensuring data is viewed in the correct context.

The safest and most effective strategy for preserving data privacy is to avoid collecting information that is not essential to your business objectives. Beyond segmenting users and monitoring timing, you need to decide which data you truly need.

Monitoring Profiles provide granular control through Toggle buttons for each monitoring channels, allowing you to disable data collection for entire channels. For example, if your primary requirement is time tracking or if you are navigating strict local regulations regarding keystroke logging, you can turn off the Keystrokes channel completely to ensure organizational compliance. Or, you can tailor the profiles so that channels like Social Media are only active for specific departments, such as Marketing, while remaining disabled for roles where that data is irrelevant. By identifying the "minimum depth" required for each group, you can utilize these toggles to build a privacy-friendly environment that is both intentional and proportionate.

Once you know who you’re monitoring, the next question is when. With hybrid work and BYOD, this is more important than ever.

Here's how you can configure the monitoring schedule:

In practice, that means you can do things like:

If you configure a schedule at the profile level, you can apply it across channels so you don’t have to redo it everywhere. Or, you can let Screen Recording follow a tighter schedule and keep Applications slightly broader if overtime is expected.

The effect is simple: during defined work hours, Teramind observes what it should. Outside those hours, it’s effectively blind. People can use the same machines for personal activities in the evening without ending up in a report.

Applications monitoring is where you learn which tools are actually being used and for how long. It powers a lot of the time and productivity reporting, and it often feeds rules (“If someone uses this app, alert.”). At the same time, it doesn’t make sense to track someone’s password manager or a personal photo editor.

For a typical office‑based team, you might leave the Applications channel fairly open and then explicitly hide things that are clearly personal. In that case, you might:

Once an app goes into that “don’t monitor” list, Teramind stops tracking its usage time, stops capturing keystrokes in it, won’t use it in rules, and blacks out its windows in recordings. It stays on the user’s machine, but it falls out of your monitoring story.

For contractors or BYOD devices, you might prefer the opposite: “Only look at these few business apps, ignore everything else.”

Here, you would:

Now, only those named apps count as “monitored.” If a contractor opens a game or a personal note app, Teramind simply doesn’t see it as part of that profile’s application activity.

In both scenarios, Applications becomes less about “see everything” and more about “see these tools because they’re what matters for this group.”

Web browsing is where the line between work and personal blends the most. The Websites section of a Monitoring Profile is where you decide how much of that traffic you actually want to capture.

Enabling Don't monitor private browsing is a strong gesture of intent. When a user opens an Incognito or InPrivate window, Teramind stops logging URLs, stops logging keystrokes, and treats that content as excluded on the screen.

Click the Add Rule button to add a rule defining scope of the monitoring (e.g., websites) and which browsers (e.g., Chrome, Edge, etc.) should be tracked:

A practical baseline is to track major business sites while explicitly staying away from obvious personal destinations.

For sensitive roles or BYOD use, you can flip the logic: instead of blocking personal sites, you only allow monitoring of a small, curated set.

List key domains in Monitor usage of these websites and combine it with Don't monitor usage when browsing to IPs/Domains not in list. This turns Website monitoring into a tight allowlist where only specified domains are visible.

Even with good domain lists, users may visit pages you didn't anticipate. Use the Don't monitor usage when website content contains field to add words and phrases like "bank account" or "checkout". Teramind will scan the page source (DOM text). If a page contains a matching phrase, monitoring for that page stops immediately, even if the domain is normally allowed.

Keystrokes represent some of the most sensitive data Teramind can collect. For many organizations, the most privacy-friendly approach is to keep this channel disabled for most employees and rely on Applications, Websites, and carefully configured Screen Recording for incident response. When keystroke logging is required for specific administrative roles or highly regulated workflows, the platform provides tools to ensure it acts as a "scalpel" rather than a broad net.

The first line of defense in keystroke privacy is protecting credentials and temporary data. Use the fields below to set your monitoring boundary for password fields and clipboard:

These configurations ensure that while you may see operational commands, you do not capture employee passwords or sensitive personal data, aligning with common sense and regulatory expectations.

You can precisely define the boundaries of keystroke logging to avoid capturing personal or sensitive conversations by utilizing specific configuration fields in the Keystrokes settings panel.

Screen Recording is the most visually powerful part of Teramind. It is also where privacy concerns tend to spike because a live or historical recording of a desktop can show personal content and bystanders’ data. To make Screen Recording fit a privacy-conscious deployment, you can change the default expectation from “always on” to “on when it matters" using specific settings within each Monitoring Profile.

The primary control for privacy is the Record only when behavior rule was violated toggle. When enabled, Teramind stops constant background video streaming. Instead, it waits for a Behavior Rule with a Record Video action to trigger, capturing only a small window of time around that specific event. For example, you might define a rule to record two minutes before and after someone copies sensitive customer data to an unapproved cloud drive. This results in a short, targeted clip that provides clear context without requiring you to sift through hours of unrelated activity.

Beyond incident-based recording, you can use Application recording and Websites recording to define exactly what the "camera" sees.

Another sensitive boundary is what happens when a user locks their machine or walks away. The Record locked sessions option determines whether video is captured while a workstation is locked or a remote desktop window is minimized. If this is turned off, the Agent pauses recording during these periods and does not count that time as active work. In dashboards, the user will appear as “locked,” and live or recorded views will show a blank or placeholder frame. For most organizations, this is the appropriate default to avoid recording hours of screensavers.

Teramind allows authorized admins to take full control of a desktop or freeze input from the Session Player. While useful for IT support, these functions can feel invasive if misused. The Allow remote control toggle in Screen Recording settings determines if these functions are available for a profile. For most employees, the safest choice is to keep this off. Where it is required, you should use the Messages to display fields for During remote control and During input freeze to show explicit on-screen notices, ensuring the user is never surprised by administrative intervention.

Every recording stored is a piece of sensitive data. For On-Premises or Private Cloud deployments, the Delete history after setting allows you to define specific retention windows for each profile—for instance, 30 days for standard staff and 90 days for high-risk environments.

While Applications, Websites, Screen Recording and Keystrokes channels capture the bulk of user activity, ensuring a privacy-compliant environment requires fine-tuning the remaining channels. These options govern how data is collected from communications (e.g., Emails, Instant Messaging), peripherals (e.g., Audio, Printing), and environmental factors (e.g., Network, Geolocation). The goal is to strictly apply the data minimization principle across all data sources, collecting only what is adequate, relevant, and necessary for your stated business purpose.

This channel can be highly intrusive as it records system sounds and conversations. Audio monitoring should almost always be disabled by toggling the channel off unless there is a strong, explicit, and legally justified business requirement. If necessary, administrators should use the Monitor when these applications use the microphone option, configuring it to record audio only when specific work-related applications (like voice-over-IP software) are actively utilizing the input device, rather than recording continuously.

Files monitoring should be focused exclusively on corporate data movement to avoid capturing personal documents. Instead of tracking all files, use the File Types to restrict monitoring specific file types such as documents. Use the File locations to skip option to explicitly exclude monitoring on personal folders (e.g., \Personal) and system directories, confining data collection strictly to corporate assets.

Network tracking captures communication data and application connections, which can expose non-work activity. You can disable monitoring of secure content by turning off the SSL option, which stops the capture of content from web-based emails and social media. Alternatively, use the Monitor only selected IPs option to restrict monitoring only to the corporate network range, automatically excluding all traffic occurring when the employee is on a non-corporate, home network.

Emails monitoring captures private correspondence and requires fine-grained control to protect content and attachments. To protect communication content, disable Monitor email content and Capture email attachments options if only metadata is needed. Use Monitor emails apps to only monitor official clients (e.g., Outlook) and don't monitor private emails such as Yahoo Mail or Gmail.

These channels often mix professional and personal use, demanding function-based restriction. Use the Track these applications option to restrict tracking exclusively to platforms and apps relevant to a specific role (e.g., social media platforms used by the Marketing team, chat channel used by the Support, online meetings used for Sales calls). This ensures that a user's personal activity on excluded social media and IM platforms is ignored, minimizing data collection based on job necessity.

Tracking physical location is highly sensitive, especially for remote staff. Geolocation tracking should be disabled unless explicitly justified.

Printing controls mitigate the risk of content leakage while offering privacy controls. To avoid capturing sensitive content, configure Content capturing to select the Document’s name only, rather than the Actual document option. Furthermore, use the Don't monitor these printers field to ignore printers known to be used for personal tasks (e.g., a home label printer). This way, you can restrict monitoring to high-risk, corporate printing events only.

The Offline Recording option is highly relevant for remote worker privacy as it dictates data collection when the employee is disconnected from the corporate network, which frequently happens during personal time at home. The most private configuration is to turn off the option completely, ensuring no screen activity is captured off-network. If offline recording is mandated for security, administrators must severely reduce the Offline recording’s buffer length (e.g., from 24 hours to 2) and/or set a low Offline recording’s buffer size limit. These steps minimize the volume of potentially sensitive, non-work-related video data captured locally on the remote worker's device before it can be transmitted upon reconnection.

Before fine-tuning individual channels, consider the fundamental depth required for each profile. The Advanced tab within a Monitoring Profile allows you to decide how deeply the Agent interacts with the system.

To maintain a privacy-friendly balance without using intrusive system-wide settings, you can utilize these options:

By asking, "What is the minimum depth needed to achieve our goals?", you can use these granular exclusions to run a "depth setting" that respects user privacy.

Teramind Cloud accounts follow a standard data retention policy. If your organization requires longer retention periods, you can opt into the Compliance Bundle to extend these limits. For detailed information on our standard retention caps and the extension options, please refer to this article.

If your organization requires full manual control over data lifecycles, including backups and archived copies, we recommend the On-Premises or Private Cloud deployment options. These allow you to configure custom retention periods to meet your specific internal or legal requirements.

The Delete history after setting in Screen Recording monitoring settings allows On-Premises/Private Cloud customers to specify how long collected video data is stored (see above).

The Configurations > Settings > Security screen has a few options that can be configured to restrict data flow:

Teramind On-Premises/Private Cloud customers can delete the actual records from their server if wanted. Cloud customers can contact [email protected] to help remove records for compliance purposes.

The Time Tracking > Time Cards, Time Tracking > Time Records dashboards and the Snapshots tab on the Employee Details screen comes with a Add Time and Add/Remove Time buttons that allow you to add/remove time. Using the Remove Time option, you can correct monitoring errors and protect sensitive data that was accidentally or unnecessarily captured.

In the Add/Remove Time panel, the Remove time and screen records is the most direct privacy option to select. If an administrator finds that a segment of activity was entirely personal (e.g., an employee logged in briefly over the weekend for a personal task) or was collected in error, choosing this permanently deletes both the time record and the associated video evidence. The Remove time and restrict screen records option enforces confidentiality by removing the general work time log but retaining the screen recording, making it viewable only by personnel with the Restricted historic screen stream access permission. This ensures sensitive, but necessary, evidence is protected from general managerial view.

While Teramind's policies and rules are usually implemented to protect the data of the company and its customers, they can be strategically configured to actively protect employee privacy as well. They are an effective means of achieving privacy-friendly monitoring because they allow the organization to move away from intrusive continuous monitoring toward targeted, exception-based intervention, thus strongly enforcing 'data minimization' and 'purpose limitation'. These rules link a specific user action or content violation to an automated response, ensuring that the system only captures, alerts on, or intervenes in activity directly relevant to security or compliance, while leaving routine, harmless work activity unmonitored.

Some effective use of rules for privacy are:

Teramind Revealed Agent is highly effective for privacy-friendly monitoring because it embodies the principles of transparency and employee awareness. By placing a visible UI on the desktop, it ensures monitoring is conducted lawfully and fairly, addressing legal requirements for consent. It also includes controls (like a web clock-in/out) that enable the employee to manually suspend monitoring during personal time or breaks. This not only builds trust but also empowers the user to enforce data minimization themselves by clearly defining the boundary between work and private activity.

When using the Stealth Agent, you can fulfill transparency requirements by creating a behavior rule designed to display a constant privacy notice to employees. This action ensures users are informed of monitoring status. See the Useful Resources below for detailed instructions on rule creation.

To ensure transparency and simplify compliance, consider allowing employees to view their own collected monitoring data.

On the Employee's Profile > Account tab, several options enable this, such as allowing users to log in to their own dashboards, enable self-history (session) playback, and permit viewing of their activity reports.

This practice not only fosters a transparent work environment but also helps your organization comply with key GDPR requirements, specifically the "Right to be Informed" and the "Right of access" (Subject Access Request or SAR). By giving employees this access, they immediately know what data is collected and have an easy mechanism to obtain a copy of their personal data.

Privacy-friendly monitoring starts with controlling who can see the data Teramind collects. The first layer is the account access level: a fixed, built-in role that defines how much of the dashboard and monitoring data each user can reach, enforcing the 'need-to-know' principle from the start.

Each user has exactly one access level, which you set from the employee's profile (Employees > Edit > Account tab > Access Level). The built-in levels grant progressively broader access:

In addition, an Employee who is assigned as a manager under Configurations > Departments becomes a Department Manager and can see data only for the departments they manage. Because Administrators have broad access, grant this level to as few people as possible and rigorously audit their actions ('zero trust' principle), so monitoring data remains confidential and is viewed only by personnel explicitly authorized to see it.

Account access levels are fixed and apply to all of a user's data. When you need finer control, use the Configurations > Access Control screen to create custom policies that give non-admin users and department managers exactly the permissions they need, and only for the employees, computers, departments or shared lists you choose. The built-in access levels are also listed on this screen with a Default badge, so you can review (but not edit) what each one allows. Teramind offers two policy types:

Permissions are grouped into the View, Play, Edit, Management features (Role policies only) and Access Widgets tabs. To minimize the exposure of private data, keep the most sensitive permissions in separate, narrowly targeted policies:

Keep in mind that every permission in a policy applies to every target in that policy. If a user needs different permissions for different groups, add a separate policy tab (+ New Policy) for each combination. Saving a policy also requires you to confirm your identity (for example, with your password), which adds another safeguard against unauthorized changes. If a user is both a Department Manager and has Access Control policies, the policies take precedence over the Department Manager permissions.

This segmented approach ensures that users hold only the minimum permissions necessary for their roles, preventing the security risks associated with blanket administrative rights and keeping access to sensitive monitoring data, such as screen recordings and reports, strictly segmented and controlled.

These controls add an additional layer of security to lock down access to the dashboard from those with unauthorized access and to protect employee data in case of stolen credentials. Teramind supports several authentication options: basic user/password authentication, 2 factor authentication (enforceable for both admins and regular employees), SSO (over SAML 2.0), Active Directory LDAP, and IP whitelist. Note that some of these options may not be available to Cloud deployments. You can access these settings from the Configurations > Settings > Authentication tab. Check out the links under Useful Resources below for more information.

Privacy-friendly monitoring requires oversight of privileged users, which is achieved through the Audit dashboard - a specialized tool designed to enforce a 'zero trust' approach by watching the watchers. This dashboard records a chronological and immutable log of all activities performed by administrators and privileged users within the Teramind platform, tracking actions like configuration changes to monitoring policies, administrator logins/logouts, and access to sensitive reports. By establishing a complete audit trail of "Who did What, When," the system ensures accountability and integrity among its most powerful users, preventing the misuse of access to confidential employee data and providing necessary documentation for regulatory compliance (e.g., GDPR, CCPA, HIPAA, etc.).

Teramind provides powerful analytics, but digital footprints rarely tell the whole story. Teramind outputs, such as insights, alerts, scores and recommendations, are for decision-support purposes only and are not a determination about any individual. Never use them as the sole basis for employment decisions such as hiring, pay, performance reviews, discipline or termination. Also, do not use Teramind’s AI features to make solely automated decisions with legal or similarly significant effects, as restricted by regulations like GDPR Article 22.

Always verify outputs, consider the context and apply human judgment before acting. Your organization is responsible for how it uses Teramind and for keeping its decisions compliant with applicable laws and policies. For details, see Important Notice: Responsible Use of Teramind.

Protect employee identities when exporting reports for external stakeholders or wider analysis. Utilize various reports configurations feature (such as hide columns from the grid widget, or apply data minimization filters) to remove names and personal details, ensuring the focus remains on aggregate trends rather than individual surveillance.

For organizations adhering to strict privacy standards, we recommend using the TMHASHUSERNAMES installation parameter for the Windows Agent to implement a 'blind monitoring' strategy. This configuration enforces pseudonymization at the source by converting employee names into randomized hash strings before data is recorded. This ensures that while management retains full visibility into critical organizational insights, such as security threats, compliance gaps, and operational trends, managers cannot view identifiable personal activities. By technically decoupling the activity from the individual, this approach guarantees that monitoring is used strictly for organizational health rather than personal surveillance.

While Teramind Cloud deployment offers best in class privacy and security for your organizations and employees, if you want full control of your data, you should opt for Teramind On-Premises or Private Cloud (AWS, Azure) deployment option. Especially if you are concerned about laws such as cross-border sharing or to avoid taking responsibility for a third-party data breach, avoid signing a BAA (business associate agreement), etc. If this is the case, considering a deployment option like these might be your only choice to ensure not only data privacy but also compliance with regulations.

The primary objective of End-to-End Encryption (E2EE) is to enhance the data flow security, by combining envelope encryption with end-to-end encryption for all communications between the Agent and Server(s). If you want the most privacy for your data, you can consider E2EE. When E2EE is enabled, the data will be encrypted at all points from its origin to its consumption or presentation. The data will only be viewable by those with decryption keys and passphrases. In other words, E2EE prevents unintended users, including privileged users, from reading or modifying data.

There is some concern that employee monitoring and data loss prevention solutions may conflict with employee and customer privacy rights, and the rapid growth of privacy and AI regulations around the world adds to the confusion. Does employee monitoring violate the GDPR, or does it help organizations meet its requirements? Is a remote employee in Brazil protected under the LGPD? And how should organizations balance the need to protect their business with the legitimate privacy rights of employees and others whose personal data is at stake?

The regulatory landscape continues to evolve, with a growing focus on transparency and on AI-driven decisions about workers. Notable developments include:

Monitoring and privacy don’t have to be a binary choice. With a privacy-friendly configuration, user activity monitoring can coexist with rigorous frameworks like the GDPR and CCPA. The practices in this guide support that goal:

By following these practices, organizations can keep the oversight they need for security and productivity without compromising ethical standards or legal compliance. Requirements vary by jurisdiction and change often, so consult your legal counsel to confirm your obligations.

Explore these articles, guides, case studies and op-eds from Teramind experts for a deeper look at ethical monitoring, privacy-first deployment, data governance and compliance in practice.