When it's already happened
Can your employer see what you do on your work laptop?
A straight answer to the question most people are too embarrassed to ask out loud: what your employer can typically see on a work laptop, what almost never happens, and how to check your own machine instead of worrying about it.
Keep personal things on personal devices, not because you are being watched, but because it keeps your life simple.
Last reviewed 2026-08-18 by Grayson Dodson. Free, plain-English guidance for everyday work technology.
What you'll be able to do
after this you will be able to say what your employer can and cannot realistically see on your work laptop, check your own device in about two minutes, and stop guessing
device management enrollment (intune, jamf, kandji)ediscovery and email retentioncompany network and vpn traffic logssign-in and activity historymonitoring software versus routine loggingthe acceptable use policy and employee handbooknotice requirements that vary by country and statepersonal use of work devices
The short answer, and why nobody gives it to you straight
Yes, your employer can almost certainly see a great deal of what happens on a work laptop. No, that does not mean a person is watching you right now. Both things are true at once, and most articles on this question tell you only one of them, because most of them are written by companies selling monitoring software or by lawyers writing for the employer. Here is the plain version. A work laptop is company property, usually enrolled in a management system like Microsoft Intune or Jamf, signed into a company account, and connected to company services. That setup produces records: sign-in times, files opened in OneDrive or Google Drive, email in Outlook or Gmail, chat in Microsoft Teams or Slack, websites requested through the company network or VPN. Those records exist whether or not anyone reads them, and in most workplaces nobody ever does. The uneasy feeling you have is usually not really about surveillance. It is about not knowing where the line sits. This lesson draws that line honestly, and then shows you how to check your own machine rather than wonder.
What is genuinely visible on a work laptop
Start with what is visible almost everywhere. Your work email is company data. An administrator with the right role can search it using Microsoft Purview eDiscovery in Microsoft 365, or Google Vault in Google Workspace, and that includes messages you deleted, because deleting usually moves an item rather than destroying it. The same applies to files in OneDrive, SharePoint or Google Drive, and to chat in Microsoft Teams and Slack, including direct messages, which administrators can export on many paid plans. Your sign-in history is logged: which device, which city, which time. Microsoft Entra ID keeps this, and so does the Google Admin console. Software you install can be inventoried, and a managed laptop reports its name, serial number, operating system version and installed apps back to Intune, Jamf, Kandji or Workspace ONE. Web traffic on the company network or through the company VPN is typically visible at the domain level, so the fact that indeed.com was opened at two in the afternoon is knowable even when the page contents themselves are encrypted. Some employers add filtering services such as Zscaler or Netskope, which see more detail than that.
What is usually not happening
Now the other half, which almost nobody says out loud. A live video feed of your screen is technically possible. Products like ActivTrak, Teramind and Hubstaff exist, and some of them take periodic screenshots. But that requires software somebody deliberately chose, bought and installed, it is far more common in call centre and hourly-tracked roles than in ordinary office jobs, and in many places employees must be told it is running. It is not the default state of a normal work laptop. Your personal phone on cellular data is not visible to your employer at all, unless you joined the company Wi-Fi or installed a company app or management profile on it. Your personal Gmail on your own laptop at home is not visible either. Honesty cuts both ways, though, so here is the uncomfortable part: because a work laptop can carry monitoring software, anything typed into it, including a personal password, could in principle be recorded. Not because anyone is out to get you, but because the machine is not yours. That is the real reason for the advice at the end of this lesson.
Logs existing is not the same as someone watching
This is the distinction that settles most of the anxiety. Companies hold logs because systems produce logs, not because someone volunteered to read them. A mid-sized company generates an enormous volume of events every week, and there is no human capacity to review it. What actually causes a person to open your records is a trigger: a security alert, such as your account signing in from another country; a data-loss-prevention rule firing when a spreadsheet of customer records is attached to a personal email address; a formal complaint or HR investigation; a legal hold, where a lawsuit obliges the company to preserve and search relevant email; a software license audit; or a support ticket you raised yourself, where a technician needs access to fix something. The capability exists for those moments, plus ordinary reasons like recovering a deleted file, catching phishing and meeting rules in regulated industries such as finance and healthcare. A better mental model than a guard staring at a monitor is a building with security cameras, where footage is normally overwritten and only pulled if something happens. It also explains why reporting a mistake early works so well: if you clicked a bad link, saying so within the hour turns a possible incident into a five-minute fix.
How to find out for real, instead of guessing
You can replace guesswork with facts in about ten minutes. Start with paperwork: the acceptable use policy, the employee handbook, and the IT documents you signed during onboarding. Search those for the words monitor, monitoring and privacy. Companies that monitor usually say so in writing, because in many places they are required to. Then check the laptop itself. On Windows, open Settings, then Accounts, then Access work or school; if your work account is listed there, the device is enrolled in management. On a Mac, open System Settings, then General, then VPN and Device Management, where any configuration profiles your employer installed appear by name. In Chrome, type chrome://management into the address bar and press Enter; it states plainly whether the browser is managed and by whom. Microsoft Edge uses edge://management. Finally, just ask. A perfectly reasonable message to IT is: Quick question, is anything on my laptop monitored, and what gets logged? Asking that is not suspicious. It is what someone sounds like when they want to use the tools correctly, and IT teams field it regularly.
The law, and using a work laptop like a human being
The high-level legal picture, and this is not legal advice: in most of the United States an employer may monitor equipment it owns and networks it runs, and several states, including Connecticut, Delaware and New York, require written notice of electronic monitoring. In the United Kingdom and the European Union, data protection rules require monitoring to be lawful, proportionate and disclosed, and in some countries employee representatives must be consulted before it is introduced. This varies enough by country, state and industry that the only honest instruction is to read your own handbook, and if it matters to you, ask HR what the policy actually says. Now the kind part. Nobody sensible thinks checking a bus timetable or your bank balance at lunch is a scandal, and most policies allow reasonable personal use. Keep the personal parts of your life on your own phone and your own laptop anyway, not because you are being watched, but because it keeps your life simple. Work laptops get returned, reimaged and wiped when jobs end, sometimes at short notice, and whatever lived on that machine goes with it.
Common questions
Can my employer see my browsing history on my work laptop?
Usually yes, at least in part. Browsing done on the company network or through the company VPN is typically logged at the domain level, so the sites you visited can be known even though the page contents are encrypted. If the browser is managed, which chrome://management will tell you, history and extensions can be reported too. In practice nobody reads any of it unless something prompts a look. Clearing your history does not remove records held on the network side, so the honest assumption is also the useful one.
Can my boss see my screen right now?
Almost certainly not live. Real-time screen viewing needs monitoring software such as ActivTrak or Teramind, or a remote support tool like TeamViewer or Windows Quick Assist, and those either have to be deliberately installed or ask your permission before connecting. In most office jobs neither is running. Where continuous screen capture does exist, it is most common in call centre and hourly-tracked roles, and many places require employees to be told about it. If you want certainty rather than reassurance, read your acceptable use policy and ask IT directly.
Can my company see what I do on my personal phone?
Not on cellular data with your own accounts, no. Your employer has no window into a personal phone that is not enrolled in their systems. Three things change that: joining the company Wi-Fi, which makes your traffic visible on their network at the domain level; installing the company Outlook or Teams app, which often brings a management profile with it; or enrolling the phone in Intune or something similar. Check on an iPhone under Settings, General, VPN and Device Management, and on Android by looking for a separate work profile.
Is it bad if I check personal email on my work laptop?
It is not a crime, and most acceptable use policies permit reasonable personal use. Nobody is going to fire you for checking your bank balance at lunch. The practical reason to keep it light is tidiness rather than fear: a work laptop can be wiped, reimaged or reclaimed when you leave, sometimes with very little notice, and anything stored on it goes too. Keep your password manager, your photos and your personal accounts on your own device, and this question stops being something you have to think about.
How do I know if my work laptop is being monitored?
Check three places. First the paperwork: your acceptable use policy and employee handbook, searching for the word monitoring, since companies that monitor usually have to disclose it. Second the device: on Windows go to Settings, Accounts, Access work or school, and on a Mac go to System Settings, General, VPN and Device Management to see any profiles your employer installed. Third, ask IT plainly what is logged and how long it is kept. That question is completely normal and they answer it often.