Teramind employee monitoring and insider risk platform

What Teramind is

Teramind is a workforce monitoring platform built for two jobs that most organisations treat separately: understanding how work gets done, and stopping sensitive data leaving through the people who handle it. The same agent that reports active and idle time can also flag a file copied to a USB drive, a customer list pasted into an AI chat or a pattern of behaviour that looks like a departing employee taking data with them.

That breadth is why we built this site around it. Depending on the plan and how you configure it, Teramind can cover:

• User activity monitoring: applications, websites, files, email, printing, online meetings and console commands, with a searchable audit trail. See user activity monitoring software.
• Productivity analytics: productive and unproductive time, idle time, schedules and team trends. See employee productivity monitoring software.
• Insider threat detection: behaviour rules, anomaly detection and dynamic risk scoring. See insider threat detection software.
• Data loss prevention: content-aware rules, sensitive data classification, redaction and blocking on the DLP plan. See Teramind DLP.
• Screen evidence: live view and recorded sessions, with an option to record only when a rule is broken. See screen monitoring software for employees.
• AI usage oversight: which AI tools people use and what they share with them. See employee AI usage monitoring.

Teramind's knowledge base says it does not support mobile phones or tablets, so it is a tool for desktops, laptops and servers.

How Teramind works: agent, server and dashboard

Teramind's own architecture guide describes three components:

1. The agent is a standalone application installed on each monitored computer or session host. It captures activity through a network filtering driver, a file system filter driver and other operating system interfaces, turns it into events and streams them to the server. It also enforces your behaviour rules locally, so a block or warning happens on the computer itself. See the Teramind agent.
2. The server receives the activity data, runs the analytics engine, generates insights and hosts the dashboard. It can be Teramind Cloud, a private cloud in your own AWS or Azure account, or an on-premises virtual machine. See Teramind deployment options.
3. The dashboard is the web console where authorised people see reports, behaviour analytics and session recordings, build policies and rules, and set role-based access control.

The agent streams its events to the server and receives its settings, policies and rules back from it. If a computer loses its connection, the agents keep enforcing rules, and the Standard and Stealth agents on Windows and macOS can also keep recording locally and upload once the connection returns. Offline recording is off by default and is something we decide with you during set-up.

The four Teramind plans

Teramind sells three standard plans and a tailored Enterprise offering. Each includes everything in the plan below it.

Licensing is per monitored user with a five-seat minimum. We do not publish prices: the Teramind pricing and plans page has the full feature comparison, and you can ask us for a quote.

Teramind NextGen

Teramind has rebuilt its interface. Teramind NextGen replaces what Teramind now calls the Legacy interface with a unified workspace, and its migration guide lists what is new:

• AI Widget Generator: describe the chart you want in plain English and NextGen builds the dashboard widget.
• Preset dashboards: Overview, Live View, Productivity, Employee Monitoring, Insider Threat Detection and a Use Case Catalog of ready-made reporting templates.
• AI Usage Control dashboard: tabs for AI application usage, AI chats, AI risk alerts and agentic AI running on employee computers.
• Reconstructed Video for macOS: session playback rebuilt from app metadata and interface elements, which avoids some of the screen recording permission prompts on Macs.
• Microsoft Entra ID and Outlook calendar sync: directory structure from Entra ID, and meeting time from Microsoft 365 calendars so time away from the keyboard is explained.
• Redesigned rule editor and productivity profiles: a staging area for unclassified apps and websites, and a rule summary that highlights missing settings.

NextGen is still being developed, and Teramind notes that some Legacy features have not moved across yet. At the time of writing, Teramind's plan comparison says the SIEM, project management and Microsoft Purview Information Protection integrations are available through the Legacy interface only, and its migration guide says NextGen dashboards refresh on a synchronisation cycle rather than in near real time. We check the current position against your requirements during scoping.

OMNI insights and responsible use

Teramind also offers OMNI, an AI-driven insights feed (in NextGen it sits under Insights). Teramind lists insider risk scoring, persona baseline drift (changes from a person's usual behaviour), relationship mapping, a worker text toxicity score and a worker authenticity model that learns typing and mouse patterns to spot someone else using an account.

These are powerful features and they are also profiling. Teramind's own "Responsible Use" notice says its insights, alerts and scores are for decision support only, should not be the sole or determinative basis for any employment decision such as discipline, dismissal or pay, and must not be used for solely automated decisions with legal or similarly significant effects. The ICO's guidance on monitoring workers gives processing workers' biometric data and keystroke monitoring as examples of high-risk processing that needs a DPIA.

Our approach is to leave profiling features off unless you decide they are justified. We explain what each one does so it can go into your employee monitoring DPIA, and you make the call with your advisers.

Privacy controls Teramind gives you

How Teramind is configured matters more than which plan you buy. Teramind's own guide to privacy-friendly monitoring documents a set of controls, and we use them to help you build a set-up you can defend:

• Monitoring profiles by role: different channels for different departments, applied from Active Directory or Entra ID groups.
• Channel switches: turn off whole channels, such as keystrokes, that your purpose does not need.
• Schedules: monitor during working hours only.
• Exclusions: leave out named websites and applications, and stop keystroke capture in password fields. Excluded apps and sites are blacked out in recordings and live view.
• Record on rule violation: capture video only when a rule is triggered rather than all day.
• Retention and deletion: Teramind Cloud follows Teramind's standard retention policy; on-premises and private cloud you set your own retention periods and can auto-delete screen recordings.
• Role-based access and an audit trail: decide who can see which people's data, and keep a log of what administrators and privileged users do in the platform.
• Transparency for staff: the Revealed agent lets workers see when monitoring is running, and you can let employees view their own data.

These controls support the ICO's expectations on necessity, proportionality and transparency, but they do not make any set-up lawful on their own. Our employee monitoring law UK guide explains the framework. It is general information; take legal advice for your situation.

How Forever Systems helps

We supply Teramind licences, set the platform up and support it after go-live. A typical engagement looks like this:

1. Scope: we agree what you are trying to achieve, which people and computers are in scope and which channels that purpose needs, and give you the technical inputs for your DPIA.
2. Choose plan and hosting: we match the plan to your aims and help you decide between Teramind Cloud, private cloud and on-premises.
3. Pilot: we can arrange a trial or a small pilot group so you see real data before committing.
4. Roll out the agent: using your existing tools, such as Group Policy, Configuration Manager, Microsoft Intune or Jamf.
5. Configure: monitoring profiles, schedules, exclusions, masking, access control, rules and dashboards.
6. Support and renew: we can help with changes, agent updates, new rules and plan reviews at renewal.

If you want to see whether Teramind fits your organisation, contact us and we can talk it through.