The trust file your governing body expects.
HR directors, property managers, association boards, council secretariats: you are the one who will be held to account. Every election here produces its own evidence: ballot secrecy guaranteed by cryptography, tracked participation, a result anyone can recount, challengers included.
Minimized by design
No voter account, no tracking, no advertising cookie, so no banner. The public register is pseudonymous by default: no name, no email, no vote timestamp.
Infrastructure under control
100% hosted in France (OVH), on a single domain, everything served first-party, with no third-party dependency in the browser. The code is open source.
Recountable results
A public register published as a signed blockchain, the tally method and version recorded with every result, elections soft-deleted, never permanently erased.
The day the result is challenged.
A close election, a losing side that contests, a governing body that demands guarantees: that is when compliance stops being a formality. You have to prove that the ballot box was honest, that everyone voted only once and that the count is correct, without being able to show named ballots, since the vote is secret.
That is exactly what the public register solves. Every ballot is signed electronically in the voter’s browser, then published in a tamper-evident register, together with the participation register and the tally method: everything can be recounted, by the challenger themselves. You are not asking to be believed; you are handing over the means to verify.
Every guarantee comes with its proof.
A guarantee that cannot be verified is just a promise. Here is what the platform guarantees and, for each point, the piece of evidence that demonstrates it, accessible to everyone.
Ballot secrecy, by construction
The public register lets no one link a ballot to a voter: the ring signature guarantees it, not an internal policy. One caveat: in a near-empty signing group, the organizer could guess a choice.
The proof · The complete protocol is published in the white paper.
An exact, replayable count
The list of electronically signed ballots is frozen and public, and the tally method is published with every result.
The proof · Anyone can redo the computation and reach the same result.
Participation and quorum, documented
At closing, the participation register is published, pseudonymous by default, nominative as an option.
The proof · It can be attached directly to the minutes.
Weighted voting, share by share
Each voter’s weight is published in the register and sealed inside their signed ballot.
The proof · Anyone can recount the weighted result, weight by weight.
One voter, one vote
Each ballot carries a unique cryptographic fingerprint tied to the election: double voting is detectable without identifying anyone.
The proof · Detection runs on the public register, by anyone.
An individually provable vote
After closing, each voter can (on their own initiative only) prove to a third party that a published ballot is theirs, for example in the context of a mandate or a proxy.
The proof · The public “Vote proof” tool runs entirely in the browser, off-platform.
A tamper-evident register
Ballots are published in a blockchain: signed blocks (OpenPGP v6, Ed25519) linked by hashes. Any rewrite is detectable.
The proof · Our verification keys are published; every signature can be checked off-platform.
Provable prior existence
Each block of the register is timestamped in the Bitcoin blockchain via OpenTimestamps: its existence at a given date can be proven without trusting the platform.
The proof · Each block’s .ots proof can be verified with standard OpenTimestamps tools.
Guarantees held by cryptography, not by internal rules.
The best compliance: not collecting.
The GDPR asks for minimization; we made it an architecture. Less data entrusted to us means fewer obligations for you and less risk for your voters.
No voter account
Your members vote through a personal VoteLink, with no sign-up and nothing to install. The data you entrust to us is limited to the email address (name and voting weights optional).
A pseudonymous register
Nothing nominative is published by default: random identifiers, no vote timestamps, no voter data exposed.
Explicit nominative options
Non-anonymous voting and nominative participation register: disabled by default, frozen at launch, and always announced to the voter before they vote.
Zero trackers
No analytics, no advertising cookies, no banner to click: only the strictly necessary state (session, language, theme).
Hosted in France
100% hosted in France (OVH), everything served from our own domain: no third-party service loads in your voters’ browsers.
Controlled erasure
The organizer account can be deleted at any time (GDPR erasure). Elections are soft-deleted: your evidence stays intact.
Your governing body’s requirements, covered.
Every setting has its sensitive point. The details (arguments, step-by-step process, evidence produced) are on the page dedicated to your situation.
Unions & political parties
A primary or a congress where the party machine is above suspicion: the ballot box is held by a neutral third party, verifiable by every faction.
Learn more →Employee representatives
Ballot secrecy guaranteed to employees, and demonstrable to the employer and the unions alike.
Learn more →Nonprofits & clubs
Decisions that comply with the bylaws, even with scattered members: tracked participation, documented resolutions.
Learn more →Condos & HOAs
Ownership shares, quorum, participation register: the annex to the minutes that discourages appeals.
Learn more →School councils
Representatives elected without the school being both judge and interested party.
Learn more →General assemblies & committees
Councils, juries, committees: verifiable proof for each decision, without weighing down the meeting.
Learn more →What we do not claim.
Trust is demonstrated, not decreed. So let us also tell you what is not in the file.
Certification in progress
Certification processes are underway; every attestation obtained will be published on this page. Until then, our guarantees are properties anyone can verify, not promises.
A platform in alpha
Condorcet.Vote is in alpha: free and unlimited, but with no data-retention commitment at this stage. Retention policies will be formalized before release.
An independent review to come
An external audit of the protocol and its implementation is planned; the report will be published as soon as it is available, on the Security page.
Build your file on a real election.
Create an election, have people vote, and judge on the evidence: the public register is the demonstration. Free during the alpha.