Security & Certifications in Electronic Voting

At EVoting we guarantee the highest security standards in electronic voting and digital participation processes. Our platform combines international certifications, advanced cryptography, external audits and regulatory compliance to ensure the integrity, privacy and legal validity of every process.

Comprehensive security in electronic voting – EVoting

Our origin: cryptography and academia

EVoting was founded in 2013 as a spin-off of Inria Chile —the local branch of the French National Institute for Research in Digital Science and Technology—, created by computer science and cryptography researchers from the University of Chile.

Its founding team brings together PhDs in computing from the University of Nice-Sophia Antipolis, the École Polytechnique and the École Normale Supérieure in Paris. That scientific foundation is what underpins the cryptographic design of every vote.

International Certification ISO/IEC 27001:2022

We hold ISO/IEC 27001:2022 certification, the most demanding global standard for Information Security Management Systems (ISMS).

This certification validates our controls in:

  • Confidentiality of information
  • Integrity of electoral data
  • Platform availability throughout the entire process

We ensure rigorous risk management and data protection under international standards.

Learn more
ISO/IEC 27001:2022 Certification – EVoting
Advanced cryptography and vote secrecy in EVoting

Advanced Cryptography and Vote Secrecy

Each vote is encrypted on the voter's device, and the tally is performed over the encrypted votes (homomorphic encryption): only the consolidated result is decrypted, through a key ceremony held in custody by the court or auditor of the process. An individual vote is never decrypted.

  • Homomorphic encryption: votes are counted without the need to decrypt them one by one.
  • Key ceremony: opening the tally requires the concurrence of keys distributed in the custody of third parties (court or auditor), so that neither EVoting nor the organiser can open the votes on their own.
  • Ballot secrecy by design: the cryptographic architecture separates the voter's identity from their choice.
Learn more

Privacy and Data Protection Policy

We apply a strict Personal Data Protection Policy based on the principle of privacy by design.

  • Limited use of information: Voter roll data is used exclusively to authenticate and validate voting rights.
  • Secure data deletion: Once results have been ratified, certified deletion protocols are executed for sensitive data, safeguarding confidentiality after the process concludes.
Read the full policy Learn more
Privacy and data protection policy in EVoting
Ethical hacking and external audits in EVoting

Ethical Hacking and External Audits

The platform is periodically subjected to penetration tests (pentesting) carried out by independent experts.

These audits enable us to:

  • Identify and mitigate vulnerabilities
  • Validate the system's robustness against real-world threats
  • Continuously strengthen our technological infrastructure

In addition, the system incorporates verifiable logs that allow external auditing without compromising voter anonymity.

Learn more

Authorisations and Legal Validity

  • Chilean Labour Directorate: EVoting was the first company to receive a favourable ruling from the Chilean Labour Directorate to carry out electronic voting in trade union organisations and State employee associations (Ruling ORD. No. 3362/053, 2014). Our code was physically reviewed by the authority, a level of validation that sets us apart from any other provider.
  • Compensation Funds: we hold a ruling from the Chilean Labour Directorate for affiliation and de-affiliation processes to Family Allowance Compensation Funds (Cajas de Compensación de Asignación Familiar) (Ruling ORD. No. 4969/0079, 2016).
  • Electoral backing: we are a technology provider for the Electoral Service of Chile (SERVEL) and received the Tech for Democracy 2023 recognition.
Learn more
Authorisations and legal validity in electronic voting

Frequently asked questions

Find answers to the most common questions about our services.

Yes. Our electronic voting system uses advanced cryptography that makes it impossible to determine individual preferences, guaranteeing total anonymity and ensuring that no one — neither the company nor the organizers — can know how each person voted.

Yes. The platform is governed by the data protection regulations applicable in each country and by our Information Security Management System certified to ISO/IEC 27001:2022, ensuring that your personal information is used exclusively to verify your identity at the time of voting.

Data is stored on AWS (Amazon Web Services), a world-class infrastructure with the highest levels of security, redundancy, and protection against external attacks.

Participants can vote from any device with an internet connection and a web browser. This includes mobile phones, tablets, computers, and even Smart TVs.

No. Once you confirm and submit your preference, the vote goes directly into the electronic ballot box and cannot be modified or deleted under any circumstances, guaranteeing the immutability and integrity of the election.

Immediately. Once the official close of the vote is declared, the system automatically tallies the results and delivers the final count within seconds.

Yes. A dedicated support desk is available specifically to assist voters or participants who have questions about accessing the system or who experience any technical difficulties throughout the process.

Yes. The system calculates quorum in real time based on accredited attendees and the rules defined for the meeting or assembly.

Yes. The platform features a highly intuitive and accessible interface, designed under accessibility standards so that anyone can use it. Additionally, "assisted voting stations" can be set up — physical spaces where support staff can help participants cast and complete their vote using kiosks or tablets.