What happens to the screenshots? Frequency, blurring and who can see them

Screenshots are the first question your team will ask

Of everything monitoring software does, the screenshots are what your team will ask about first.

The worry underneath the question is reasonable. A screenshot is a picture of someone’s screen, taken while they work, and it shows whatever was there — a message to a friend, a bank page at lunch, a customer’s invoice. Handled well, screenshots are plain evidence of hours worked. Handled badly, they feel like someone reading over a shoulder all day.

The difference is not the software. It is whether you decided three things before install day and said them out loud: how often pictures are taken, what they show, and who can open them. Those are the three questions this post answers.

How often screenshots are taken

Most tools in this category take screenshots at a fixed interval while a tracked session runs. Workfolio’s screenshot monitoring page describes it as “screenshots of your employees minute by minute in realtime”. At that pace a workday unfolds in enough frames to follow, and Workfolio stitches the captures into short timelapse videos of an employee’s screen, so you can watch how the work went rather than page through individual pictures.

Whatever interval your tool uses, your job is to know it and to say it. An interval you would rather not say aloud is the wrong interval.

The same honesty goes for time away from the desk. People eat, collect parcels, sit in a waiting room. Workfolio’s reports split worked hours into productive, unproductive, neutral, idle and break time, so a gap in the day shows up as a gap in the numbers. Nobody has to reconstruct a lunch break from a picture of somebody’s lunch.

Blurring

Blurring is the compromise managers look for when screens hold things a manager should not read in full: personal messages, pay details, a patient’s chart. Tools differ in what they offer. Some blur everything but the active window, some let a worker hide the screen before a capture, some take the picture exactly as it is.

Treat this as a question to put to a vendor before you choose, not after. Ask what exactly gets captured and whether anything can be hidden inside the picture. Then ask for a demonstration on a screen you bring — one with a private email open and a spreadsheet with salaries in it. Ten minutes of that tells you more than a feature table.

Who can see them

A screenshot that only you can open is a record. The same picture in a folder twelve people can browse is a leak waiting for a bad week. Decide who on your side can view captures, keep the list short, and put it in the note your team gets about monitoring.

In Workfolio, screenshots sit with the rest of the work in a central dashboard for monitoring multiple teams and unlimited employees. Who sees what inside it is your decision to make deliberately, not a default to discover later.

There is a second audience to ask about too: the vendor’s own staff. Workfolio’s HIPAA page states that access to customer information and systems is restricted to authorized personnel based on business need. Put the same question to any vendor you evaluate, and expect an answer that specific.

What a 21-million-screenshot leak teaches about storage

In February 2025, researchers at Cybernews reported that WorkComposer, an employee monitoring app used by more than 200,000 people, had left over 21 million employee screenshots exposed in an unsecured Amazon S3 bucket, open to the web. The captures held emails, internal chats and business documents, and in some cases login pages and credentials. Because the bucket synced in real time, anyone who found it could follow a company’s work as it happened. Cybernews contacted the company, and access was secured; the exposure was found in February and closed by April.

Nothing about that leak was clever. The screenshots were simply stored without a lock. That is the part of “what happens to the screenshots” that no demo shows you: every picture your tool takes is only as safe as where it is kept and how long it is kept.

Four questions to ask before you buy:

• Where are screenshots stored?
• Who can reach them?
• How long are they kept?
• What exactly happens when one is deleted?

Workfolio’s answers, from its HIPAA page: captured screenshots are automatically deleted after 90 days, in line with its screenshot retention policy. Customers can delete screenshots at any time, and a deleted screenshot is removed immediately from Workfolio’s active systems. After a customer deletes a screenshot, Workfolio does not maintain a backup copy of it.

If your screens can show patient data

A screenshot cannot tell a patient’s chart from a recipe; it captures whatever is on the screen. Workfolio’s HIPAA page says so plainly: screenshots may potentially contain sensitive information, including protected health information (PHI), depending on what is displayed on an employee’s screen.

If you run a covered practice, let that sentence set your setup. Assume any capture can hold PHI. Keep retention short — the 90-day automatic deletion and the delete-at-any-time control above are built for exactly this. And put the relationship on paper: Workfolio supports Business Associate Agreements for eligible customers, and Pro and Premium customers can request a BAA by contacting the team. A vendor that cannot sign a BAA is not ready for your screenshots.

Screenshots are evidence, not output

One concession to close on: a screenshot proves what was on a screen. It does not prove the work got done, and it is no substitute for the work getting done. Use captures for what they are good at — verifying working hours for payroll, settling a disagreement about what happened, spotting someone quietly stuck before a deadline slips — and judge your team on what it ships.

Then tell them what you now know. That screenshots are taken minute by minute while work is tracked. That they are deleted after 90 days, or the moment you delete one yourself. That only the people you named can open them. A team that can answer “what happens to the screenshots” without guessing is a team that has stopped worrying about them.