Introduction to Ask Timmy
Timmy is currently available to a limited number of customers, and we're opening it to more soon. To ask about access, contact your Customer Success Manager.
Also, note that Timmy is currently a preview feature. Its interface and capabilities may change as we continue to improve it.
AI-Generated Answers
Timmy uses generative AI, so its answers may sometimes be inaccurate, incomplete or out of date. Verify important information, and don't rely only on Timmy for critical decisions.
Timmy is Teramind's AI assistant. You can ask it questions about your company's monitoring data in plain language, from simple questions to more complex ones that combine several kinds of data, compare periods or look for the reasons behind a change. For example:
Simple Questions: Which rules were violated most often last month? or How many hours did each department spend in online meetings last week?
Security Investigations: Identify any anomalies from an insider risk perspective over the past 7 days.
Trends and Root Causes: Compare each department's active time in October with September. Which department changed the most, and which applications drove the change?
Timmy answers with a summary, an interpretation of the results and tables of the records it found. Depending on the question, an answer can be a few sentences or a longer analysis with several tables. You can ask follow-up questions to dig deeper.
Timmy works with anything Teramind captures, like activity, productivity, insider risk and AI usage, as well as the content that passed through Teramind, such as emails and chats. This includes applications, websites, emails, files, printed documents, keystrokes, instant messages, social media, online meetings, AI prompts, behavior rules, etc. It also knows which of these features are switched on and capturing in your monitoring profiles.
Timmy doesn't cover OCR data or the activity falsification detections shown on the Insights page yet.
You can ask Timmy in any language, and it answers in the language of your question, whatever your interface language is. The Ask Timmy screens and suggested questions follow the language set on the Locale tab in Configurations > Settings, or on the Account tab in My Profile. For any other interface language, they're shown in English.
There are two ways to use Timmy:
Ask Timmy Page: Click Ask Timmy on the main menu to ask about any of your data and manage your conversations. See the Accessing Timmy section.
Talk to This Report: Click the Talk to This Report button on a preset dashboard to ask about the dashboard you're looking at. See the Talking to a Report (Querying a Dashboard) section.
Built for Privacy and Security
Timmy is built with your data's privacy in mind:
Data Stays Home: By default, Timmy runs on Teramind's own secured AI model, hosted in your region, so your data never goes to an external AI cloud.
Your Access Only: Timmy only uses the data you are allowed to see. Your access is checked for every question based on your Access Control policies, so two users asking the same question may get different answers.
Private Conversations: Your conversations are visible only to you. Other users, including administrators, can't open them.
Masked Secrets: Passwords, keys and tokens found in the captured data are masked before Timmy reads them. Timmy also doesn't search what people typed for card numbers, PIN codes or security codes.
No Pay Data: Timmy doesn't read what employees earn, like hourly rates or wage costs, so it doesn't answer questions about pay or the cost of work time.
Read-Only: Timmy only answers questions from your own Teramind data. It can't change any data or settings.
Nothing Kept by the Model: The AI model only gets what it needs to answer the question and doesn't keep anything after the answer. See the What Timmy Sends to the Model section.
Bring Your Own AI: You can connect Timmy to your own AI model, like an OpenAI (ChatGPT) model or a model you host yourself, with a custom LLM (any OpenAI-compatible model is supported), so your data goes only to the provider you choose.
Your Data Stays On-Premises: On On-Premises deployments (coming soon), Timmy can use a model you host on your own network, so the captured data doesn't leave your environment.
Permissions and Data Access: Administrators control who can use and configure Timmy, each question is recorded in the audit log, and conversations are deleted automatically after the retention period. See the Permissions and Data Access section for details.
Timmy is currently available on Cloud deployments, and On-Premises support is coming soon. It's turned off by default; an administrator can turn it on in Configurations > Settings > AI Features (see the AI Features section). While Timmy is off, administrators still see Ask Timmy on the main menu. Clicking it opens the Meet Timmy introduction, and clicking Configure Timmy there takes them to the AI Features tab.
Accessing Timmy
To use Timmy, open the Ask Timmy page from the main menu. The page lists your conversations on the left and shows the selected conversation on the right:
1. Ask Timmy: Click Ask Timmy on the main menu to open the Ask Timmy page. The Preview tag shows that Timmy is a preview feature.
2. Panel 
: Hides or shows the conversation list.
3. New: Starts a new conversation.
4. Search: Type to find a conversation by its title.
5. Three Dots ⋮: Opens the conversation's menu. See the Managing Conversations section.
6. Resumed: Shows that you reopened a saved conversation, so its answers are shown from your conversation history instead of being answered again.
7. Print or Save to PDF 
: Prints the whole conversation, or saves it as a PDF file.
8. Copy as CSV: Copies the table under it to the clipboard in CSV format, so you can paste it into a spreadsheet. When a table is long, Timmy shows how many of its rows are included (e.g., 10 of 42 rows shown), and Copy as CSV copies the rows shown.
9. Reading: Timmy's interpretation of the results, such as patterns or unusual values it noticed. It's labeled an interpretation, not a record so you can tell it apart from the recorded data in the answer.
10. Answer Actions: Use the icons under the answer to:
Thumbs Up
or Thumbs Down 
: Rate the answer as helpful or not helpful. With thumbs down, you can add a note about what was wrong.Copy
: Copy the answer.
11. Follow-Up Box: Ask a follow-up question or something new. Press Enter to send, or Shift+Enter for a new line.
12. AI Disclaimer: A reminder that Timmy uses generative AI, so you should verify important information.
Below the answer, Timmy also tells you if the data doesn't cover the whole period you asked about (e.g., when you ask about this week and the data is recorded up to today). While Timmy is writing an answer, you can click Jump to latest to go to the latest part of the answer.
Asking a Question
When you start a new conversation, Timmy shows the question box with a few suggested questions:
1. Question Box: Type your question and press Enter, or click the Send icon. A question can be up to 2,000 characters long. When you get close to the limit, a counter shows how many characters you used.
2. What Can I Ask?: Starts a conversation where Timmy lists the kinds of data you can ask about, with example questions for each (e.g., Time at work, idle time and productivity, Alerts, E-mails, Files and removable media, etc.).
3. Suggested Questions: Click a question to ask it. Timmy has a set of suggested questions that fit the reports you can access, and shows a few of them at random each time you open the page.
4. AI Disclaimer: A reminder that Timmy uses generative AI, so you should verify important information.
Here are some examples of questions you can ask:
Productivity and Time:
Which applications took the most active time yesterday?
What share of tracked work time was idle, per department, this month?
How many hours did each employee work outside any office this month?
How long was each computer in use yesterday?
Security and Compliance:
Which rules were violated most often last month?
Which employees have the highest total risk this quarter?
Who uploaded files to cloud storage sites this month?
How many console commands did each employee run this month?
Identify any anomalies from an insider risk perspective over the past 7 days.
Communication:
How many hours did each department spend in online meetings last week?
Which departments wrote the most messages in Microsoft Teams yesterday?
Which departments posted on LinkedIn this week?
AI Usage:
How many prompts did each department write to AI assistants last week?
How many files were sent to AI assistants per day this month?
Comparisons and Analysis:
Compare each department's active time in October with September. Which department changed the most, and which applications drove the change?
Which employees triggered the most behavior alerts last month, which rules did they violate, and did any of them also visit high-risk websites?
Here are a few tips for getting good answers:
Mention the Period: Include a period in your question, like yesterday, last week or past 7 days, or exact dates, like between October 1 and October 31, 2026.
Say How to Group the Results: Add how you want the results broken down, like per employee, by department or per day.
Build on the Answer: Start broad, then drill down with follow-up questions in the same conversation, like Can you break that down by department? See the Asking Follow-Up Questions section.
Narrow It Down: If a question takes too long to answer, Timmy stops it and asks you to narrow it down, for example to a shorter period, one employee, department or computer, or one thing at a time.
Ask What You Can Query: Click What Can I Ask?, or ask Timmy about a specific kind of data, like What data do you have available for file transfers?
Ask for Facts, Not Advice: Timmy reports what the data holds and explains what it noticed, but it doesn't give recommendations, like how to improve engagement or processes. It also doesn't answer in money, like the cost of unproductive time, since it doesn't read pay data.
If your question isn't clear enough, Timmy asks you back before it answers. For example, when a name matches more than one employee, Timmy lists the matching employees you can see:
1. Clarifying Question: Explains what Timmy needs to answer your question.
2. Options: Click the one you mean.
3. Your Choice: Timmy sends your choice as your next message.
4. Answer: Timmy answers your original question for the option you picked. The clarifying question stays in the conversation, so Timmy doesn't ask it again.
If Timmy can't answer a question, it shows Timmy did not answer this with the reason, for example when you ask for card numbers or PIN codes people typed, or for data you aren't allowed to see.
Timmy answers with text and tables, not charts. To chart the results, click Copy as CSV above a table and paste the data into a spreadsheet, or use a dashboard.
While Timmy is answering, you can click Stop. Timmy still completes the answer and keeps it in the conversation. Up to two questions from your company can run at the same time. If someone asks another one, it waits and starts as soon as one of them finishes. You can ask up to 20 questions per minute. If no answer arrives for several minutes, Timmy closes the connection and asks you to ask again.
Asking Follow-Up Questions
You can keep asking in the same conversation to dig deeper. Timmy remembers the earlier questions and answers, so you can refer to them without repeating the details. For example, after asking Which applications took the most active time last week?, you can ask Which employees spent the most time in the top application?:
1. First Question: The conversation's title shows the question you started with.
2. Follow-Up Question: Your follow-up refers to the earlier answer (the top application) instead of naming it.
3. Assumed: Timmy says how it understood your follow-up. Here, it took the top application to mean Microsoft Excel, the top application in the previous answer, and kept the same period.
Other follow-ups, like Can you break that down by department?, work the same way.
To ask about something unrelated, start a new conversation with New, so the earlier questions don't affect the answer.
Managing Conversations
Your conversations are listed on the left side of the Ask Timmy page. Pinned conversations are shown at the top, followed by the rest grouped by day (e.g., Today, Yesterday, then the date for older conversations).
Click the Three Dots ⋮ icon next to a conversation to open its menu:
Pin: Keeps the conversation at the top of the list. Select Unpin to remove it from the top.
Mark as Unread: Shows the conversation's title in bold so you can come back to it later.
Rename: Lets you change the conversation's title.
Delete: Permanently deletes the conversation and its answers after you confirm.
You can rename or delete a conversation at any time, even while Timmy is still answering in it.
If your permissions changed after a conversation was created, the conversation is shown as it was and you can't continue it. Click Continue in a new conversation to keep asking with your current permissions.
Talking to a Report (Querying a Dashboard)
You can ask Timmy about the preset/built-in dashboard you're looking at. Click the Talk to This Report button at the top of the dashboard, and a panel opens on its right side:
1. Talk to This Report: Opens the panel. If the panel is already open, clicking the button again brings you back to it. Click the X icon to close the panel. If an answer is still running, Timmy asks you to confirm before it closes.
2. Report Context: Shows the dashboard and its date range (e.g., Overview, May 1 - Oct 31, 2026). Timmy answers for the dashboard's period and filters, and refers to its figures by name. The context is taken from the dashboard as it is when you ask your first question, and it travels with that question.
3. Open in Timmy: Opens the conversation on the Ask Timmy page.
4. Earlier: Lists your earlier conversations about this dashboard, with their period, date and number of questions. From this menu, you can also start a New conversation or see All conversations in Timmy.
5. Question Box: Type your question about the dashboard and press Enter, or click the Send icon.
6. Suggested Question: Click the question to ask it.
7. AI Disclaimer: A reminder that Timmy uses generative AI, so you should verify important information.
The Talk to This Report button isn't available on custom dashboards.
For example, on the Overview dashboard, you can ask Which websites did employees spend the most time on in this period? Timmy answers for the dashboard's date range and filters:
1. Report Context: After your first question, the panel shows the dashboard and the period the conversation is based on (e.g., Overview, Aug 1 - Oct 31, 2026).
2. Your Question: The question you asked about the dashboard.
3. Answer: Timmy's answer, with a summary, tables of the results and a Reading section, just like on the Ask Timmy page. Scroll down in the panel to see the whole answer, or click Open in Timmy to continue on the Ask Timmy page.
Conversations you start from a dashboard are also listed on the Ask Timmy page, so you can continue them later.
Permissions and Data Access
Data Timmy Can Use: Timmy only reads the data the asking user is allowed to see in the reports. Your access is checked for every question based on your Access Control policies.
Who Can Use Timmy: When Timmy is turned on, administrators can use it right away. To let other users use Timmy, including the Talk to This Report button, create a Role Access Control Policy with the Timmy permission (on the Access Widgets tab). See the Creating a Role Access Control Policy section. Then assign the policy to the users from the Access Control tab on their employee profile. The other default roles (Operational administrator, Infrastructure administrator and Employee) don't include it. Department managers who don't have a role assigned can use Timmy for their own departments only. Users without the permission who open the Ask Timmy page see You do not have permission to use Timmy and are asked to contact their administrator.
Who Can Configure Timmy: Users with the Configure all settings permission (on the Management features tab), like administrators, operational administrators and infrastructure administrators, can open Configurations > Settings > AI Features and turn Timmy on or off for the whole instance. Only full administrators can change the AI provider. See the AI Features section.
Conversation Privacy: Each user's conversations are visible only to that user, on the Ask Timmy page and in the Talk to This Report panel. Other users, including administrators, can't view another user's conversations, questions or answers.
Audit Log: Each question asked to Timmy is recorded in full in the audit log, together with each data query Timmy ran to answer it, deleted conversations, changes to the Timmy settings and the data acknowledgment. Timmy records are marked as “Timmy conversation” in the Object Type column. Users who can view the Audit dashboard can see these records, but not Timmy's answers.
Feedback: When you rate an answer with thumbs up or thumbs down, your rating and note are sent to Teramind to help improve Timmy.
Conversation Retention: Conversations are kept for the same period as your instance's recordings, or 180 days if that isn't set. Older conversations are deleted automatically. Turning Timmy off doesn't delete stored conversations.