Security
Security and ballot secrecy
A plain description of design intent. CommunityVote is pre-production and has not been independently audited.
Controls
How the product is built to protect election data
Tenant separation
Each organization's data is scoped to that organization and checked on the server for every request.
Role-based access
Permissions are enforced by the backend, not only hidden in the interface.
Audit logging
Administrative actions are recorded. Audit entries are designed not to contain individual ballot choices.
Cryptography
We use established cryptography libraries rather than custom algorithms. Any experimental ballot protection is labelled as requiring independent cryptographic review.
Ballot secrecy
How ballot secrecy works and what we do not guarantee
What the design intends
- Voter identity records and ballot records are designed so that they do not share a join key.
- No staff role is given access to individual ballot choices, and participation is shown as counts and as who has voted, never how.
- Logs, notifications and exports are designed not to include ballot choices.
What we do not guarantee
- Anonymity. We do not claim that a vote can never be linked to a voter.
- That the system cannot be breached, or that operators, databases and backups cannot be misused.
- Protection against a voter being observed or coerced while voting, or against a shared device, email account or link being used by someone else.
- Independent certification. The product has not been independently audited or certified.
- Legal compliance of any election. That depends on your governing documents, your process and your counsel.
Some associations and some laws require specific secrecy or custody rules. Confirm with counsel that electronic voting is permitted for you before you enable it.
DRAFT, pending counsel review. Subject to your governing documents and counsel review. Contact us to ask about independent review status.
See also privacy, documentation and online voting for HOAs.
Questions about security?
Ask us directly, or try the sample ballot to see what a voter sees.