How your vote is protected

Ballot-choice records do not contain your name, member ID or a ballot timestamp. Participation is recorded separately so the organisation can see that you voted, not your choices. Ordinary election-administrator views provide totals rather than raw ballot rows. As with any online service, people with privileged infrastructure access may have broader technical access; access to that infrastructure must be restricted. Small electorates and detailed turnout can also create a risk of inference.

You log in with your member ID and a private PIN given to you by your organisation. Login attempts are throttled to make guessing harder. PIN verification data is stored separately as a hash and cannot be read back through ordinary administrator views. Keep your PIN private and contact your organisation if you think it has been exposed.

No. When your ballot is saved, the system also marks your ID as voted in the same step. If anything fails, neither is saved. A second attempt is always refused.

Every ballot is stored as its own record. At the end time the system closes voting, counts the saved ballots from the source records, stores a result snapshot and declares the winners. If two people tie, the result is flagged for the election officer. It is never settled quietly.

Election settings are guarded by application rules once voting opens. Changes such as pausing or extending an election require a reason. Important administrative and system actions are recorded in an audit log; the log is not a record of every click or an independent audit.

AscendVote separates ballot choices from voter identity and participation records, but it does not offer end-to-end cryptographic proof or make anonymity mathematically impossible to compromise. It is an online voting service; protect your PIN and use a device and network you trust.