Frequently Asked Questions About Employee Monitoring Software

TIMO360 is employee monitoring and workforce management software. A lightweight desktop agent tracks attendance, active and idle time, breaks and application usage for remote, hybrid and in-office teams, and managers see it all in one multi-tenant dashboard. It never takes screenshots, logs keystrokes or accesses the webcam.

Employee monitoring software records how a team works — attendance, active time and application use — so managers can report on it. TIMO360 does this using presence signals only: it never takes screenshots, logs keystrokes or accesses the webcam, so you get workforce insight without recording what employees see or type.

It means measuring how work happens — who is present, active or idle, and which applications are in use — instead of recording what employees see or type. TIMO360 works from presence signals and attendance records only, so managers get workforce insight without screenshots, keystroke logs, webcam or microphone access, and employees can view their own data.

Yes. If you are comparing employee monitoring tools and want one that does not capture screenshots, record the screen or log keystrokes, TIMO360 is built for exactly that. It covers attendance, active and idle time, application usage and alerts from presence signals alone, so there is no screen content to store, review or secure.

Operations managers, HR and people teams and IT administrators who need attendance and productivity visibility for teams of any size. Licenses are per employee, so cost follows your headcount, and departments with assigned managers let larger organizations decide who sees what.

Yes. The agent runs on each employee's own computer, so attendance tracking, active and idle time and app reports work the same wherever people work. Employees punch in and out and take breaks from the agent, and managers see their whole team in one place.

No. The agent only detects binary input presence (whether keyboard or mouse activity is occurring), never what was typed or clicked. There is no code path in the desktop agent or backend API that records keystrokes, clipboard data, passwords, webcam video or screen captures.

Yes. TIMO360 builds its reports from presence signals: the active application, window title text, a yes/no keyboard and mouse activity signal, and the punch in/out, break and meeting times employees record in the agent. None of these require capturing the screen, so there are no screenshots to take, store or review.

Collected: the active application name, window title text, a yes/no keyboard and mouse activity signal for active versus idle detection, the punch in/out, break and meeting times employees record in the agent, and device metadata such as OS and agent version. Never collected: keystroke content, passwords, form contents or clipboard data, private message contents, full page URLs or query strings, screenshots, screen recordings, audio or webcam capture.

Not as URLs or domains. The desktop agent records the title of the active window, and for a browser that is the name of the tab in front, such as a page or document title. It does not record page URLs, domains or page content. Window titles show as a detail line in the employee's timeline, and on macOS each employee chooses whether to allow them.

Yes. Every employee gets a personal transparency report of their own data, and employees can only view their own activity. Organizations remain responsible for explaining their tracking policy to staff.

On macOS, the operating system requires the Screen Recording permission before any app can read window titles. Employees choose whether to grant it in the agent, and declining only removes window-title detail. TIMO360 does not capture screenshots or record the screen.

Every database record is scoped to an organizationId derived directly from cryptographic JWT claims, never from user-controllable input. Managers are further restricted to their assigned department members, and employees only have permission to view their own activity.

Passwords are hashed with Argon2id. Access tokens are short-lived (15 minutes) and refresh tokens are single-use and rotated, which prevents session replay. Two-factor sign-in is also supported.

TIMO360 is designed around data minimization: it never collects keystrokes, screenshots, webcam or audio, never records full page URLs, and lets you set automatic retention windows. That makes it easier to meet GDPR, CCPA and local employment-law requirements, but compliance also depends on how your organization uses the data. Organizations remain responsible for telling employees how they are tracked and for complying with local employment and privacy law.

Raw activity events, aggregated sessions and generated reports each have their own configurable retention window, from 1 day up to 10 years. Raw activity events are kept for 7 days by default, aggregated sessions for 365 days and reports for 730 days. Data older than the window is deleted automatically by a scheduled retention job.

The agent detects whether keyboard or mouse input is happening as a simple yes/no hardware signal. It never sees what was typed or clicked. When there has been no input for longer than your idle threshold, the device is marked idle.

Yes. Admins can set how long a device may be inactive before it is marked idle — anywhere from 30 seconds up to an hour — per organization.

Yes. Employees punch in and out and take breaks from the desktop agent, and reports break each day into working, idle and break time. Breaks pause tracking, so they are never mistaken for idle time, and meetings can be marked from the agent too and count as active time.

Sessions left open are closed automatically overnight and administrators are notified, so records stay clean without manual corrections.

Yes. It records which application is in the foreground along with its window title text, and each employee's report lists their top applications. TIMO360 does not classify applications or websites as productive or unproductive.

Daily, weekly and monthly reports covering working, idle, break and meeting time for each employee, which you can export as CSV, Excel or PDF.

Administrators get in-app notifications, pushed live to the dashboard, when an employee has been idle or offline for over 2 hours while punched in, when a device stops reporting, and when a forgotten session is closed automatically.

Employees are grouped into departments with assigned managers. Roles are Org Admin (full or view-only access), Manager and Employee: managers see only their assigned departments, and employees see only their own data.

Yes. The device fleet view shows the health of every enrolled Windows, macOS and Linux machine — online, idle, offline or disconnected.

Yes. The desktop agent supports Windows: Windows 10 or later, 64-bit; macOS: macOS 12 Monterey or later, Apple silicon and Intel; Linux: Any x86_64 distribution with a desktop session.

Each employee downloads the agent from the TIMO360 download page, installs it and enters the single-use enrollment code from their invite email. Codes expire after 1 day, and administrators can resend an invite from the employee's page in the dashboard.

Yes, the agent checks for updates when it starts and installs them automatically.

The agent sends batched events and heartbeats. If a device stops reporting, it is marked offline and administrators are alerted when it has been silent for over 2 hours while its employee is punched in.

The agent sends at most one batched heartbeat every 30 seconds rather than streaming continuously.

TIMO360 is priced per employee license. The current price is shown on our pricing page and is the same one used at checkout.

Licenses are bought per employee as one-time payments through Razorpay checkout, and nothing renews automatically. An org admin can add or reassign licenses at any time from the billing page and renew them in the last 7 days before they expire, and a short grace period keeps monitoring running if a renewal is delayed.

Taxes such as GST are shown separately from the per-employee price on the pricing card.

Yes. Because licenses are per employee, an org admin can add licenses or reassign them from the billing page as your team grows or changes.