Employee monitoring notice — template

For MSP admins: a starting-point notice your client can adapt for staff before deployment, with a pre-rollout checklist.

SnitchOS records input counts, not keys or typed content. It runs as a visible Windows service, SnitchOSAgent, that a local admin can remove with msiexec /x. It is installed as a system component, so it does not appear in Settings → Apps.

Notice of Workplace Activity Monitoring

To support productivity, security, and the protection of company resources, [COMPANY] uses workforce-analytics software (SnitchOS) on company-owned devices. Effective [DATE], the following work activity may be recorded during working hours on managed devices:

  • Applications used and the active window title, sampled every [SAMPLE INTERVAL — 10 seconds by default]
  • Websites visited, recorded as the site address and page path only — the query string and page fragment are removed before anything leaves the device
  • Active vs. idle time and aggregate input volume (counts of keystrokes and mouse activity, never the actual keys typed)
  • Screenshots of the work desktop, about one every [SCREENSHOT INTERVAL — 60 seconds by default] while the device is in active use (skipped while idle, and an image identical to the one before it is discarded)

What is not intentionally extracted as separate fields: keys pressed or typed content, clipboard or file contents, message bodies, audio, webcam data, saved passwords, URL query strings, or URL fragments. Screenshots, window titles, and URL paths may still display sensitive information.

Data is accessed only by authorized administrators for legitimate business purposes and is handled per [COMPANY]'s data-protection policy. Screenshots are held for 30 days in primary storage, then in archive storage until they are 365 days old, and are then deleted. Records of application and website activity are kept indefinitely by default. Questions: contact [HR / IT CONTACT].

By continuing to use company devices on or after [DATE] you acknowledge this notice.

Deployment checklist for the MSP

  • Have qualified counsel confirm the notice, acknowledgement, consent, and worker-rights requirements in every applicable jurisdiction.
  • Distribute the approved notice and record any required acknowledgement or consent before monitoring starts.
  • Replace the two bracketed sampling intervals with the values configured for this client: activity from 5 to 300 seconds, screenshot from 30 to 3600 seconds. Both are defaults, not fixed, so check the tenant's settings first.
  • Check the retention figures above against the current published defaults; they're platform-wide, not set per client.
  • List anyone whose monitoring is paused; pause is the only way to exclude someone.
  • Keep the signed notice on file with the engagement record.

See also: Deploy with your RMM · Security & disclosure posture