Security Built Into Every Election

ElectionChamp encrypts election data with AES-256, gives every voter a single-use key and keeps every ballot secret.

Five Layers of Protection on Every Election

AES-256 Encryption

AES-256 encryption at rest on all election data, on hosting that holds a SOC 2 Type II report

Unique Voter Keys

Every voter gets a unique 16-character key. One person, one vote, guaranteed

Anonymous Ballots

Votes can never be traced back to individual voters. Privacy by design

SSL Connections

256-bit SSL protects every data transfer between voter and server

Full Audit Trail

A timestamped log of each ballot submitted, reminder, resend and observer view

AES-256 Encryption at Rest

Every piece of election data, including ballots, voter information and results, is stored encrypted with AES-256, on hosting that holds a SOC 2 Type II report.

Every connection uses TLS 1.2 or newer, so nothing can be read in transit, and stored data, backups and logs can't be read from the disks without the encryption keys. Your election data is locked down from the moment it's created to the moment it's archived.

All ballot data encrypted at rest and in transit
Backups and logs encrypted too
Hosted on secure, encrypted cloud infrastructure

AES-256 Encryption

2256 possible key combinations

Encrypted at rest and in transit

Unique 16-Character Voter Keys

When you launch, the system makes a unique 16-character key for each voter. This key is their identity in the election: it authenticates them and makes sure they can vote only once.

Once a voter key has been used to cast a ballot, it's permanently locked. No one can use it again, change the vote it was used for, or transfer it to someone else.

System-generated, unique per voter
One key = one vote. Permanently locked after use
No voter accounts or passwords needed
Sent by email or text message, or handed out by you

Unique 16-Character Key

One person. One key. One vote.

Cannot be reused or transferred

Anonymous Ballots by Design

Privacy isn't an afterthought. It's built into the architecture. When a voter casts their ballot, the system records that they voted (for participation tracking), but permanently separates their identity from their actual vote.

This separation is structural, not just a policy. No one (not election administrators, not our team, not anyone) can trace a specific vote back to a specific voter. Ever.

Voter identity permanently separated from ballot
Administrators cannot see who voted for whom
Participation tracked separately for audit purposes
No voter ID, timestamp or submission order stored with a ballot
A cast ballot can't be changed or removed

Anonymous Ballots

Identity and vote are permanently separated

Privacy is architectural, not policy

Complete Audit Trail for Every Election

Your election's audit trail records when voting opened and closed, every ballot submitted (never by whom), every reminder and resend, observer access, and views of the results and voter list. The Voters tab shows which voters have voted.

If a member challenges the results or asks how the vote was run, you have a timestamped record to show them, not just your word.

Admin activity log (result and voter list views, reminders, resends, early close)
Who has voted, shown on the Voters tab
When invitations went out, shown on the dashboard
Audit trail downloads as CSV for your records

Full Audit Trail

A timestamped record from launch to close.

Organizers can't edit it

Security at Every Stage of Your Election

From the moment you create your election to the moment results are delivered, security is active at every step.

Stage 1: Setup

Election Setup

SSL-encrypted admin dashboard
Voter list encrypted on upload
Unique voter keys made at launch
The setup locks at launch, so every voter gets the same ballot
Stage 2: Voting

Live Voting Period

Voter authenticated via unique key
AES-256 encrypted ballot submission
Vote separated from voter identity
Key locked after single use
Stage 3: Results

Results & Reporting

Results calculated from encrypted data
Complete audit trail available
Anonymous results, no voter attribution
Data retained on secure encrypted storage

Security for Every Kind of Organization

The same protections on every election, whoever runs it. Confirm what your rules require with your governing documents and counsel.

HOAs & Condo Boards

Secret ballots, one key per voter and a timestamped audit trail. If an owner challenges a result, you have a record of how the vote ran.

Unions & Labor Groups

Secret ballots, one vote per member and a full record of how the election ran. Weighted ballots stay off unless you turn them on.

Nonprofits & Associations

Show your board and members how the vote ran, with secret ballots and an audit trail you can download as CSV.

What that means in practice

Secret ballot: each ballot is stored with no voter ID, timestamp or submission order
One member, one vote: single-use voter keys; weighted voting only when you turn it on
Final ballots: once cast, a ballot can't be changed or removed
Who voted, never how: a participation record plus a timestamped audit trail from launch to close
Results on your terms: keep results hidden until voting closes; the per-ballot results file opens only after voting ends
Encrypted at rest (AES-256) and in transit (TLS 1.2+), on hosting that holds a SOC 2 Type II report

Online Voting vs. Paper Ballots: Security

Security Feature ElectionChamp Paper Ballots
Data encryption ✓ AES-256 ✗ Not applicable
Voter authentication ✓ Unique 16-character key Signature check (manual)
Duplicate vote prevention ✓ Automatic, system-enforced Manual tracking, error-prone
Anonymous balloting ✓ Structural separation Depends on process
Audit trail ✓ Complete, timestamped ✗ Limited or none
Ballot tampering risk ✓ Encrypted, locked after submission ✗ Physical access risk
Counting errors ✓ Zero: automatic calculation ✗ Human error common
Results available Instant Hours to days

Security Questions Answered

Stored election data, including ballots and voter information, is encrypted with AES-256. Every connection uses TLS 1.2 or newer.

No. Each voter receives a unique 16-character key that can only be used once. After a ballot is submitted with that key, it's permanently locked in the system. There is no way to vote again, change your vote, or transfer your key to another person.

No. When a voter casts their ballot, the system permanently separates their identity from their vote at a structural level. Administrators can see who has participated (for turnout tracking), but they cannot see any individual's actual ballot choices. This is a fundamental architectural feature, not just a policy.

Yes. Every security feature (AES-256 encryption, unique voter keys, anonymous ballots, SSL connections, audit trail, encrypted storage) is included on every plan, including the free tier. We never gate security behind paid plans.

The audit trail records what happens once the election launches: when voting started, every ballot submitted (never by whom), reminders and resends, extra keys added, observer links added, revoked and viewed, views of the results and voter list, and how the election closed. Each entry is timestamped, organizers can't edit it, and it downloads as CSV.

All election data is stored on secure, encrypted cloud infrastructure. Data is encrypted both in transit and at rest. Access to server infrastructure is tightly controlled with multi-factor authentication and restricted to authorized personnel only.

ElectionChamp gives you secret ballots, one vote per key and a full record of how the vote ran. Rules differ by organization and place, so confirm your requirements with your governing documents and counsel, and contact us with specific questions.

Run a Secure Election in Minutes

AES-256 encryption. Secret ballots. Full audit trail. Every feature included, even on the free plan.

Questions about security? Email us at support@electionchamp.com