Security and privacy
Anonymity and integrity are built into how CharterVote works, not added on top
Secure by design
A vote is only worth holding if people can trust it. CharterVote is built so that no member is ever linked to their ballot, no result can be quietly altered, and anyone can confirm the outcome for themselves. These are not settings you switch on; they are the way the platform is made.
The principle underneath everything is simple: separate who voted from how they voted, and make the final record provable to all.
How we protect every election
The safeguards that sit behind each ballot, from registration to sealed result.
Token-based anonymity
Each accredited voter casts their ballot with a single-use token. The ballot records the choice, never the person, so a vote can never be traced back to who made it.
A sealed voter roll
When voting opens, the roll of eligible voters is sealed. The list everyone votes against is fixed for the election, so it cannot be quietly edited part way through.
A verifiable record
Every completed election is sealed into a certificate of record carrying a code that anyone can scan or enter to confirm the result independently.
Bot and abuse protection
Public and account forms are shielded by a challenge that turns away automated abuse, and sensitive actions are rate limited to keep elections clean.
Hardened transport
Everything is served over HTTPS with strict security headers, including a content security policy, so what reaches your members is the page we sent and nothing else.
Data kept to a minimum
We collect only what an election needs. Analytics load only after you allow them, and account holders can export or erase their data whenever they choose.
Geheim beim Abstimmen. Für alle nachweisbar.
Identity is separated from the ballot the moment a vote is cast, so no vote can be traced back to a voter. When the election closes, the count is sealed into a tamper-evident record that any member can verify. Integrity here is not a promise; it is something you can check.
So verifizieren Sie eine Wahl
Während der Abstimmung kann jede wählende Person bestätigen, dass ihr anonymer Stimmzettelbeleg auf der öffentlichen Bekanntmachungstafel erscheint. Der Beleg weist die Aufnahme nach, ohne die Person oder ihre Auswahl offenzulegen.
Wenn ein autorisiertes Ergebnis veröffentlicht wird, erstellt CharterVote ein einziges unveränderliches Integritätsmanifest. Der öffentliche Bericht berechnet das Siegel des Wählerverzeichnisses, das Konfigurationssiegel, die veröffentlichte Auszählung, das anonyme Stimmzettelregister und bei Gremiumswahlen die versiegelte Wahlurne anhand des aufbewahrten Datensatzes neu.
Ein bestandener Bericht zeigt, dass die aufbewahrten Nachweise mit der bei der Veröffentlichung ausgestellten Erklärung übereinstimmen. Er belegt weder die Identität oder Absicht der wählenden Person noch die Gerätesicherheit oder Ereignisse außerhalb von CharterVote.
Your data and your rights
Privacy is treated as a right, not a feature. Voter identity is never joined to vote content, analytics are loaded only with your consent, and account holders can export or delete their information from the privacy centre at any time.
For the full detail of what we collect and how we handle it, read our Datenschutzerklärung. Questions about security are always welcome, so please get in touch.
Run a vote your members can trust
Create your team and hold a secure, anonymous, verifiable election in minutes.
Going further than a sealed record
For an election that will be questioned, a nominating board splits the key to the ballot box between your own trustees, so the count cannot be opened by any one person, including us, until enough of them agree.