.svg){kind=logo}
Insightful
Insightful is a work intelligence platform that pairs a desktop agent with a web dashboard to measure productivity, track time and flag insider risk. Paid plans start at 8 USD per seat per month, billed annually.
What is Insightful?
Insightful is a work intelligence platform published by Insightful.io Inc., a privately held American company that traded as Workpuls until a rebrand in 2022. Its domain was first archived in June 2015, and the company runs a New York headquarters, a San Francisco legal address and an operations office in Belgrade.
The product pairs a desktop agent installed on employee computers with a web dashboard. The agent records which applications and websites are in use, active versus idle time, screenshots, and time booked against projects and tasks. It stops deliberately short of keylogging: Insightful captures whether the keyboard is active and how fast someone types, but never the keys pressed or the text produced.
Four product lines sit on that foundation. Workforce Analytics covers time tracking, screen monitoring, activity logs and location insights. Workflow Optimization, currently in beta, maps and measures business processes to expose bottlenecks. Workspace Security adds insider threat detection, IT forensics and shadow AI discovery. Work Intelligence, the newest line and still in alpha, aims to connect that data to return on investment, auditing where AI genuinely helps and where unsanctioned tools create exposure. An InsightsAI layer raises alerts on burnout, insider risk and productivity patterns, while Automatic Time Mapping distributes activity across projects without manual entry.
Insightful connects to 79 named third-party tools across HRIS, payroll, project management, DevOps, identity management and data warehouses, and exposes a public REST API. A read-only MCP server lets Claude, ChatGPT, Cursor or Windsurf query six domains of workforce data in plain language, scoped to the permissions the user already holds and switched off until an administrator enables it.
Deployment runs three ways: managed cloud on Google Cloud infrastructure, private cloud, or fully self-hosted on-premise. Data platforms are offered in the United States, the European Union and Saudi Arabia. The vendor claims SOC 2, ISO 27001, HIPAA and CSA alignment, and reports more than 200,000 users across 5,800 organisations in over 50 countries.
What it does
- Measure productive, active and idle time by person, team, project and location
- Capture timesheets, clock-ins and attendance automatically from computer activity
- Take screenshots and classify the applications and websites actually in use
- Map and measure business processes to expose bottlenecks and rework
- Detect insider risk through threat detection, keyword alerts and shadow AI discovery
- Measure real adoption of AI tools and the return they produce
- Query workforce data in plain language through a read-only MCP server
When to use Insightful / When not to
A quick filter to help you decide if Insightful is the right fit.
When to use Insightful
- COOs and CFOs in margin-sensitive operations who need to quantify where working hours actually go
- BPO, call centre and support leaders running large distributed or contractor workforces
- Agencies and professional services firms that bill by the hour and need defensible proof of work
- IT and security teams accountable for insider risk, audit trails and shadow AI exposure
- HR and people analytics teams planning capacity, rebalancing workload and spotting burnout early
When not to use Insightful
- Teams whose work happens on phones or tablets, since there is no mobile application of any kind
- Field, shop floor or manual roles where little of the work passes through a computer
- Solo freelancers and very small teams, given per-seat billing and no permanent free plan
- Buyers looking for keystroke capture or message content, which the vendor deliberately does not collect
- Organisations wanting an on-premise install below 250 licences, the stated minimum
How to use Insightful
A typical end-to-end flow, from setup to results.
- Create an account from the trial page; no credit card is required
- Answer the short set of setup questions about your organisation
- Install the desktop agent on each team computer running Windows or macOS
- Wait roughly fifteen minutes for the first activity data to reach the dashboard
- Organise people into departments, teams and groups, then apply group or individual tracking settings
- Assign roles (admin, manager, employee, client) so each person sees only their own scope
- Connect HRIS, payroll or project tools from Settings, Integrations, then Configure integration
- Turn on single sign-on and two-factor authentication, and set the screenshot and privacy controls you need
- Enable the MCP server in Connected Apps, then paste the endpoint into Claude or ChatGPT and authorise it
- Use the seven-day trial to evaluate everything except Automatic Time Mapping, which needs longer use
Pros & Cons
Pros
- Low entry price for the category at 8 USD per seat per month on annual billing
- Full-scope seven-day trial with no credit card and no cap on the number of employees
- Stacked security credentials: SOC 2, ISO 27001, HIPAA and Cloud Security Alliance practices
- Three deployment modes, with on-premise carrying the same feature set as the cloud version
- Data residency choice between United States, European Union and Saudi Arabia platforms
- Deliberate refusal to log keystrokes or typed content, which is unusual in this category
- Fast time to first value: activity data visible around fifteen minutes after installation
Cons
- No permanent free plan; the only free access is a seven-day trial
- No mobile application at all, a limitation the vendor states itself
- Every workspace security feature is a paid add-on, including on the Enterprise plan
- Workflow Optimization is still in beta and Work Intelligence in alpha, both gated by request
- On-premise deployment requires at least 250 licences plus extra service fees
- The subprocessor list is never published, only sent on request
- No Article 27 EU representative and no named data protection officer, despite handling European employee data
Pricing & Plans
There is no permanent free plan. Access begins with a seven-day free trial that requires no credit card, after which the lowest paid entry point is 8.00 USD per seat per month on annual billing, for the Workforce Analytics plan. Displayed prices are estimated in US dollars for United States customers, and other currencies must be requested. Month-to-month billing exists on selected plans but its rate is not published.
- real-time overview
- capacity analysis
- app and website usage
- screenshots
- online support
- workflow mapping
- tracking and measurement
- project management integrations
- customised onboarding
- work location insights
- customer service integrations
- payroll
- dedicated account manager
- phone support
- team-based utilisation
- internet connectivity reporting
- insider threat detection
- audit logs
- SSO
- special plan for large-scale
- variable workforces
- with pricing disclosed once eligibility is confirmed
- Workspace Security 4 USD
- On-Demand Screenshots 4 USD
- Screen Recording 4 USD
- Increased Frequency Screenshots 3 USD
- Data Warehouse Integrations 0.50 USD
Data, GDPR & hosting
A consolidated view of how Insightful handles your data.
GDPR overview
Implementation is concrete rather than declaratory. The privacy policy and terms, both dated 05.06.2026, enumerate GDPR rights article by article: access (15), rectification (16), erasure (17), restriction (18), portability (20), withdrawal of consent (7) and complaint (77). Lawful bases are spelled out and Standard Contractual Clauses cover transfers out of the EEA. The security page states plainly that Insightful is classified as a data processor, and a Data Processing Addendum is published. Rights are exercised by writing to privacy@insightful.io with full name, email address and the purpose of the request. Two gaps deserve naming: no Article 27 EU representative is designated anywhere on the site, and no data protection officer is named, even though the vendor is established in the United States and handles European employees' data.
Who owns the data?
Insightful positions itself as a data processor rather than a data controller: the customer organisation owns the workforce data and decides what is collected, while Insightful processes it under a published Data Processing Addendum incorporated into the terms. Practical consequences follow. An employee who wants their account deleted must go through their own company administrator, not Insightful. Screenshots travel over TLS straight to Google rather than through Insightful's own servers, which puts a third party in the chain. Customers on private cloud or on-premise keep everything inside their own network. The terms place the burden of obtaining consents and legal bases squarely on the customer.
Reuse rights
The desktop agent records screenshots, active applications, visited URLs, active and idle time, operating system, mouse movement, project and task names, browser version and whether the keyboard is in use. Insightful states that it does not capture individual keystrokes or the content of what is typed. Activity and worked totals are uploaded every ten minutes over TLS, and customers can blur portions of collected screenshots. Anonymised technical data is used to improve the service, and demographic data shared with business partners is aggregated and de-personalised. Subprocessors are engaged, with the named list and their countries of location supplied only on request. Nothing in the privacy policy, the terms or the addendum authorises training AI models on customer data, and the MCP server returns aggregated metrics only, never raw captures.
Data retention & training
Hosting summary
The managed service runs on Google Cloud infrastructure, inside Insightful's own virtual private cloud protected by network access control lists, with customer data logically segregated. Data platforms are available in the United States, the European Union and Saudi Arabia, so residency can be chosen. Data is encrypted at rest with AES256 and in transit over TLS 1.2, and keys are held in Google Cloud KMS. Screenshots are an exception to the normal path: they are uploaded over TLS directly to Google, bypassing Insightful's servers. The company itself operates from the United States, and states that information may be transferred to and processed there, with Standard Contractual Clauses in place for customers in the European Economic Area. Two alternatives exist for organisations that want tighter control: private cloud on the customer's own platform, or a full on-premise install where the data never leaves the customer network. Regular backups create restore points.
Things to keep in mind
Risks and trade-offs to weigh before adopting Insightful.
- Employee monitoring is regulated very differently across jurisdictions, and information or consent obligations often apply before any deployment
- The terms make the customer, not Insightful, responsible for obtaining consents and legal bases for the data collected
- Insightful acts only as a processor, so the compliance burden stays entirely with the buying organisation
- The subprocessor list is not published, so the processing chain cannot be assessed before signing
- No Article 27 EU representative is designated, although the vendor is established in the United States
- Screenshots pass through Google, adding a third party between the employee's screen and the customer
- Constant observation can erode trust and autonomy; the vendor's transparency framing has to be genuinely enacted internally, not simply assumed
Setup & Integrations
Technical difficulty
Moderate, and it depends on the deployment. The cloud route is light: create an account, install the desktop agent on each Windows or macOS machine, and data appears in about fifteen minutes with no heavy integration work. Integrations are configured from the dashboard in a few authenticated clicks, and the MCP server needs only an administrator toggle and a pasted endpoint. On-premise is a different order of effort, requiring a Linux server (Ubuntu Server recommended), verified system and network prerequisites, involvement from Insightful's engineering team, and a minimum of 250 licences.
Deployment
Integrations
Supported languages
Behind Insightful
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Insightful.
Frequently asked questions
Is there a free plan?
How much does Insightful cost?
Who counts as a billable user?
Is there a mobile app?
Does Insightful record keystrokes?
Where is the data hosted?
How long is data kept?
Is there an API?
Should you pick Insightful?
Insightful is a mature entry in a crowded category, on the market since 2015 under its former name Workpuls and rebranded in 2022. What separates it from the pack is less the monitoring itself than the framing around it: the agent captures screenshots and application usage but refuses keystrokes and typed content, and the vendor leans on that refusal as a selling point rather than apologising for the category it sits in.
The commercial proposition is easy to read. Eight US dollars per seat per month on annual billing is a low entry point, the seven-day trial opens nearly everything without a credit card, and first data lands about fifteen minutes after the agent is installed. Compliance is genuinely well provisioned for a company this size: SOC 2, ISO 27001, HIPAA, a published data processing addendum, and a choice of data residency across the United States, the European Union and Saudi Arabia, with on-premise available for organisations that want nothing to leave their network.
The reservations are real too. Every workspace security capability, the part most likely to justify the purchase for an IT buyer, is a paid add-on even at Enterprise level. The two newest product lines are still in beta and alpha. The subprocessor list is sent on request rather than published, no Article 27 EU representative is designated, and no data protection officer is named, which is a noticeable gap for a US vendor processing European employees' data.
The deeper caution is not technical. Workplace monitoring is regulated very differently from one country to the next, and Insightful's own terms place the duty of obtaining consents and legal bases on the customer. The tool is credible; whether deploying it is lawful and healthy in a given organisation is a question the software cannot answer.
- Choosing a selection results in a full page refresh.
- Opens in a new window.