What employee monitoring software does and how it works

Employee monitoring software runs on company computers and records what employees do during work hours—websites visited, applications opened, time spent on each task, and sometimes screenshots or keystroke logs. The software sits in the background and sends reports to a manager or administrator dashboard where you can review activity by employee, date range, or process.

Most monitoring tools work in one of three ways. Passive monitoring logs activity silently without alerting the employee; active monitoring shows the employee that monitoring is happening (usually with a visible icon); and hybrid monitoring logs everything but only shows detailed reports to managers. Which approach you choose depends on your company size, industry, and what you're trying to measure.

The software typically installs on Windows, Mac, or Linux machines and requires administrator access to set up. Once running, it collects data continuously and stores it either on your company server or in cloud storage that the software provider manages. You access the data through a web dashboard or desktop process where you can filter by employee, time period, or activity type.

Key Takeaways

  • Employee monitoring software records website visits, process use, and time spent on tasks, then displays that data in a manager dashboard organized by employee and date.
  • You must disclose monitoring to employees in writing before installing software, and some states require written consent or have limits on what you can monitor.
  • Common tools include Teramind, ActivTrak, Hubstaff, and Toggl Track, each with different features for productivity tracking versus detailed activity logging.
  • Monitoring works best when paired with clear policies about acceptable use and what data you will collect, so employees understand what to expect.
  • Legal risks increase if you monitor personal devices, collect data outside work hours, or monitor in ways that violate state wiretapping laws or union agreements.

Legal requirements before you install monitoring software

Before installing any monitoring software, you must tell employees in writing that monitoring will happen. Most states require notice—employees need to know the software exists. Some states go further and require consent—employees must agree in writing before you can monitor. California, Connecticut, Delaware, and New York have stricter rules than others, so check your state's labor department website or consult an employment lawyer before you proceed.

The rules also depend on whose computer you're monitoring. Monitoring a company-owned device that employees use only for work is generally legal if you've given notice. Monitoring a personal device (even if the employee uses it for work) is much riskier legally and often requires explicit consent. Some states treat email and messaging differently from general web browsing, so the type of data you collect matters.

If your company has a union or a collective bargaining agreement, monitoring may be a negotiable issue—you may need to bargain with the union before you can implement it. Federal law (the Electronic Communications Privacy Act) prohibits intercepting email or messages without consent, so keystroke logging and message capture carry higher legal risk than straightforward website logging.

Choosing between monitoring tools and what each one tracks

Teramind is built for detailed activity logging and includes keystroke capture, screenshot intervals, and website categorization. It's common in industries with high security needs (finance, healthcare, law firms) and costs roughly $10 to $30 per employee per month depending on features. ActivTrak focuses on productivity metrics—it shows time spent per process and project, idle time, and activity levels—and runs $10 to $20 per employee monthly. Hubstaff combines time tracking with activity monitoring and works well for remote teams; it costs $7 to $20 per employee per month.

Toggl Track is lighter-weight and designed for voluntary time tracking rather than surveillance—employees manually log what they're working on, and the tool shows where time goes. It costs $10 to $20 per employee per month and works best when employees see it as a productivity tool for themselves, not a surveillance tool imposed on them. Microsoft 365 and Google Workspace both include basic activity logging in their admin consoles (no extra cost), though the data is less detailed than dedicated monitoring software.

The choice depends on what you actually need to measure. If you want to know whether employees are working during their shift, a straightforward time-tracking tool is enough. If you need to investigate suspected policy violations or security breaches, you'll need keystroke logging and screenshot capture. If you're managing remote teams and want to understand where time goes, activity-level monitoring is sufficient. Buying more surveillance than you need creates legal risk and damages employee trust.

Setting up monitoring software on company computers

Start by choosing whether you'll deploy the software yourself or have the software vendor handle installation. Most tools offer both options. If your company has an IT department, they can usually install via group policy (on Windows networks) or mobile device management (MDM) software, which pushes the installation to many computers at once. If you're a small business without IT staff, the vendor can often send you an installer file or a link that employees click to install themselves.

Before you install anything, send employees a written notice that explains what will be monitored, why, how long data will be kept, and who can see it. Include the notice in your employee handbook or have employees sign an acknowledgment. This step is legally required in most states and prevents the "I didn't know" defense if an employee later claims they weren't told.

After installation, test the software on one computer first to make sure it doesn't conflict with other applications or slow down the machine noticeably. Check that the dashboard is working and that data is flowing correctly. Then roll out to the rest of your workforce. Most tools let you set up different monitoring levels for different departments—for example, you might monitor developers more closely than office staff, or monitor customer service representatives' screen activity but not their personal email.

Reading reports and interpreting the data

Most monitoring dashboards show a summary view first: total active time per employee, top applications used, top websites visited, and idle time. From there you can drill down into a specific employee's day, hour by hour, to see exactly what they were doing. Some tools show a timeline; others show a list of applications and websites with the minutes spent on each.

Be careful not to misinterpret the data. An employee spending two hours on a social media website might be on a break, taking a mental health break, or doing legitimate work (social media marketing, customer service). An employee with low active time might be in meetings, on the phone, or thinking through a problem. The software shows activity, not productivity or value. Use the data to start a conversation, not to make assumptions.

Set clear thresholds before you start monitoring so you know what you're looking for. For example: "If an employee is idle for more than 30 minutes during core hours, I'll check in." Or: "If more than 20% of the day is spent on non-work websites, I'll review the details." Without thresholds, you'll spend hours looking at data that doesn't matter. Document what you find and keep records in case you need to defend a disciplinary decision later.

Common mistakes that create legal and workplace problems

The biggest mistake is monitoring without notice. Even if it's legal in your state, doing it secretly damages trust irreparably once employees find out. The second mistake is monitoring personal devices or monitoring outside work hours—this crosses into wiretapping territory and can expose you to lawsuits. The third is collecting data you don't actually use; if you're logging keystrokes but never reviewing them, you're creating a liability with no benefit.

Another common error is monitoring the wrong thing. If your goal is to reduce time-wasting, keystroke logging won't help—you need process and website tracking. If your goal is to catch security breaches, you need detailed logs and alerts, not just a weekly summary. Mismatched tools waste money and create resentment.

Finally, don't use monitoring data in isolation to make employment decisions. If you're considering firing someone for low productivity, make sure the monitoring data aligns with their actual work output, their manager's observations, and their job performance reviews. Relying only on software metrics can lead to wrongful termination claims, especially if the employee can show that the software was inaccurate or that other employees doing similar work weren't disciplined.

Balancing monitoring with employee privacy and morale

Monitoring can improve productivity in the short term, but it often damages morale and increases turnover if employees feel surveilled. The most successful implementations are transparent: employees know they're being monitored, understand why, and see the data as a tool to help them manage their own time rather than a weapon used against them.

Consider using monitoring as a diagnostic tool, not a surveillance tool. When you notice a problem—an employee consistently missing important date, or a team spending too much time in meetings—use the monitoring data to understand what's happening, then address the root cause. Maybe the employee needs training, or maybe the meetings are poorly run. The software shows the symptom, not the diagnosis.

Some companies find success with voluntary monitoring: employees can turn on activity tracking to see their own productivity data, and managers can request access if there's a specific concern. This approach builds trust and often gets better buy-in than mandatory surveillance. Others use monitoring only during specific projects or investigations, not as a permanent background process.

Frequently Asked Questions

Can I monitor employees' personal email or text messages?

Not without explicit written consent, and even then it's risky. Federal wiretapping law prohibits intercepting email or messages without consent, and some states require consent from both parties. Personal email on a company device is treated differently than company email—monitoring personal email is much harder to defend legally. Stick to company email accounts and company messaging platforms, and make sure your policy clearly states what you monitor.

What happens if an employee refuses to use a monitored computer?

You can require employees to use company computers for work, and if monitoring is part of your policy, they must comply or face discipline. However, if an employee has a documented disability or religious objection, you may need to make a reasonable accommodation. Consult an employment lawyer before disciplining someone who refuses monitoring.

How long should I keep monitoring data?

Most companies keep data for 30 to 90 days, then delete it. Keeping data longer creates storage costs and increases the risk that it will be subpoenaed in a lawsuit. Your policy should state how long you keep data and when you delete it. Some industries (finance, healthcare) have legal requirements for how long to retain certain records, so check your industry regulations.

Can I monitor employees who work from home?

Yes, but the same legal rules explore: you must give notice, and you can only monitor company devices during work hours. Monitoring a home network, personal devices, or activity outside work hours is illegal in most states. Make sure your remote work policy clearly states what is monitored and what is not.

What's the difference between monitoring and time tracking?

Time tracking records when an employee is working and how much time they spend on each task or project. Monitoring records what they're doing—websites, applications, keystrokes. Time tracking is less invasive and often voluntary; monitoring is more detailed and usually mandatory. Many companies use time tracking without monitoring, or monitoring without keystroke logging. Choose the level of detail that matches your actual need.