Right next to how it was read.
Open any ballot and see the marks on the paper beside what the machine recorded, plus fingerprints of exactly what read it.
- Option A
- Option B
- Option C
Every ballot’s picture is public. If a reading and its picture ever disagree, anyone can see it.
What counted it›
- Scanner hardwareUnit PCT-0412 · TPM 2.0 attested✓
- Firmwaresha256 4be1…09fa✓
- Operating systemsha256 c77d…e2b1✓
- Election softwaresha256 91a0…5c3e✓
- Ballot layoutsha256 0f6b…a874✓
Every fingerprint matches the public, open-source build, so you know exactly what read this ballot.
Spot a misread.
Here, the bubble for Option A is filled, but the machine recorded Option B. Anyone looking can see it.
A second, independent scanner also rereads every ballot, so mistakes get caught even if nobody looks.
- Option A
- Option B
- Option C
Report it with the key.
The key is printed on the paper ballot, so officials pull that exact ballot and compare it in public. Results are posted within 48 hours. Nobody learns who you are.
- 1Anyone reports the ballot’s key
- 2Officials pull that exact paper ballot
- 3Paper compared to the list, in public
- 4Result posted within 48 hours
Why only the bubbles?
If whole ballots were shown, someone could tell a voter to write a secret word in the margin and then go looking for it. So only the bubbles are shown. Write-ins and margins are covered.
- Option A
- Option B
- Option C