As an ongoing process, BallotPoint utilizes an independent auditing firm – Aerstone – to verify our system is hack-proof.
Aerstone, experts in the field of cyber-security, attempted to compromise the BallotPoint system. After completing their most recent audit their Executive Summary stated:
"To summarize, the security posture of the BallotPoint Election System is effective in protecting the integrity, confidentiality, and availability of on line elections. The processes, configurations, and security controls of the election system were successful in preventing the assessment team from gaining unauthorized access to election data, election systems, gain the ability to illegally cast votes, or disrupt the voting process while simulating standard [and unauthorized] voting members."
Furthermore, Aerstone verifies that even persons with administrative privileges cannot alter any election data that could change or interrupt the voting process, cannot compromise the secret ballot process, or obtain election results prior to a ballot being closed and officiated.
To ensure privacy, connections to the BallotPoint website always require secure sockets, or https – the same protocol used by banks and other services where confidential data is encrypted and transmitted across the Internet.
The address to the BallotPoint voting website always starts with https://www.ballotpoint.com/ or https://ballotpoint.com/. Note the s in the https portion of the address – this is required to ensure you are using a secure login session.
We make it easier to verify you are communicating with the BallotPoint voting website – our https connection uses an Extended Verification certificate.
This means you should always see green in your browser address bar.
The images below show examples of what you will see using the various browsers supported by BallotPoint. If you do not see green in the browser address bar, stop immediately without entering your login credentials and contact your election administrator.
Clicking on CCComplete, Inc. [US] (or Trusted if using the Opera browser, or CCComplete, Inc. if using the Safari browser) to view the certificate that verifies you are connected to the actual BallotPoint voting website. Note: CCComplete, Inc. is the company that created, owns and runs the BallotPoint system. Always make sure the certificate references CCComplete, Inc. of Portland, OR USA and that the certificate is verified by DigiCert, Inc.
DigiCert is the organization that verifies the security (SSL) certificate for the BallotPoint website.
Every BallotPoint voting system welcome page displays this badge as proof that you are indeed communicating with the BallotPoint website. Click on the badge to display a new page, hosted by DigiCert (make sure you see https://seal.digicert.com/... in your browser address bar) that certifies you are accessing the BallotPoint website, developed and hosted by CCComplete, Inc. of Portland, Oregon.
Coding standards are very important to ensure web pages look and function the same on all compliant browsers. All BallotPoint web pages have been verified against the W3C standard to ensure proper operation regardless of the compliant web browser used.
W3C is an acronym for the "World Wide Web Consortium." This is the organization responsible for designing the standards used for web-based programming. The idea is that if one codes their web-pages to this standard, that those pages will work with all HTML5-compliant browsers (e.g., Internet Explorer, Edge, Firefox, Safari, Chrome, Opera, etc.).
BallotPoint shows both the "XHTML 1.1" and "CSS" icons to signify all our pages and style-sheets pass the verification tools to ensure they are compliant.
BallotPoint routinely verifies all web-pages and style-sheets against the W3C standard. Furthermore, we routinely test all our pages using the major browsers, iPad and Android tablets and smart-phones. In fact, our pages are specifically designed to display in an easily readable format on all compliant tablets and smart-phones.
The welcome page of every BallotPoint voting system displays this badge as an indication that we have verified our web pages against the standards set down by the World Wide Web Consortium. All our web pages should look and operate the same on every compliant web browser.
Unfortunately, many web browsers by default turn off notifications to the user when a scripting error is detected. This can be a cause for concern, since scripts stop running once an error is detected by the browser. Many web authors rely, or just don't care, that web browsers don't report scripting errors to their users.
At BallotPoint, we always verify there are NO scripting errors in our pages. Any scripting error could cause the loss of security or the rendering of information on the screen that should be left confidential.
The BallotPoint system DOES NOT track your movement on the web or store anything, including cookies or web-pages in your Temporary Internet Files directory that may be used to identify you or how you voted.
While BallotPoint security is unparalleled, as a voter you have a responsibility to help ensure the integrity of the process. No service provider, including BallotPoint, can assume 100% of the responsibility when it comes to security.
As detailed above, we go to great lengths to ensure voting system security. Below are actions a voter can take in doing their part to assure their voting system is of the highest integrity.
Keeping your BallotPoint account information safe and secure is what ensures you that no one is able to access your account to vote on your behalf or detect how you voted.
No one will ever need to know your account information, including your election officials or BallotPoint staff. Should you have trouble, there are ways for BallotPoint to troubleshoot issues without having to know your specific information.
Accessing the BallotPoint voting system is ALWAYS done using secure sockets, or https – the same protocol used by banks and other services where confidential data needs to be encrypted before being transmitted across the Internet.
The address to the BallotPoint voting website always starts with https://www.ballotpoint.com/ or https://ballotpoint.com/. Note the s in the https portion of the address – this is required to ensure you are using a secure session.
Using HTTPS ensures your confidential information remains confidential from your computer or device all the way to the BallotPoint voting system.
Knowing your device is free of harmful malware and viruses will help ensure your private information is secure and your vote with BallotPoint is registered exactly as you intended.
Before accessing the BallotPoint website, you are strongly encouraged to download the current revision of your browser software, ensure your device is up-to-date with all the latest security patches, and you are running up-to-date antivirus-protection software. If you cannot assure all software is current, then you should use a different computer or the telephone to cast your vote.
For security purposes, you are always encouraged to upgrade your browser to the latest revision available for your computer, tablet, or smart-phone.
The BallotPoint system supports the latest versions, plus one back, for the five major browsers (Edge/Internet Explorer, Firefox, Safari, Chrome, and Opera) on PCs and Macs (less Edge and IE on the Mac). We have also formatted our voting website specifically to support Android-based smart-phones and tablets, as well as the iPhone and iPad.
You are strongly encouraged to NOT use a publicly-accessible computer. A computer not under your direct control may have undetected malware that could compromise your ballot or account information. Always ask yourself, "Would I use this computer for my on-line banking or other confidential transactions?" If your answer is NO, then use a different computer or the telephone to cast your vote.
Also, for security, it is recommended that you access the BallotPoint website from a top-level browser window. Running your session from within the framework of a portal or other web-page, such as your organization's website, is strongly discouraged and is not guaranteed to work.
THE INFORMATION ON THIS SITE IS INTENDED TO PROVIDE GENERAL INFORMATION AND DOES NOT CONSTITUTE LEGAL ADVICE. READERS SHOULD NOT USE THIS INFORMATION AS THE BASIS FOR ACTION WITHOUT CONSULTING INFORMED LEGAL COUNSEL REGARDING THEIR SPECIFIC SITUATION.
The material included on the BallotPoint® website is for informational purposes only. The terms "BallotPoint Election Services," "BallotPoint Advisory Services," and "BallotPoint" as used throughout this website are CCComplete, Inc. business entities and are intended to represent CCComplete, Inc., its subsidiaries and affiliates. CCComplete, Inc. and its related entities, including their respective principals, employees, agents, and representatives, make no representations or warranties about accuracy, timeliness, suitability, or any other aspect of this site or any content on or accessed through this site or for any purpose. In no event shall CCComplete, Inc., its related entities, affiliates, partners, principals, employees, agents, or representatives be liable for any direct, indirect, incidental, special, exemplary, consequential, or other damages whatsoever, without regard to the form of any action, including but not limited to contract, negligence, or other tortuous actions, arising out of or in connection with this site, any content on or accessed through this site, or any copying, display, or other use thereof.
CCComplete, Inc. operates this website to inform users of the services we provide and other general information about our Company. The content of this website is provided for informational purposes only and is not intended as a substitute for qualified legal advice and under no circumstances shall be deemed to constitute such services. The services and or operational guides described on this website are provided by CCComplete, Inc. Any use or reuse of any information provided on this website will be at the user's own sole risk and without liability or legal exposure to CCComplete, Inc.
Any and all information contained herein is provided without warranties of any kind, whether express or implied. CCComplete, Inc. hereby expressly disclaims all warranties and obligations with regard to CCComplete, Inc. or any content on or accessed through this website, including but not limited to all implied warranties and obligations of merchantability, fitness for a particular purpose, title and non-infringement. To the fullest extent permitted by applicable law, CCComplete, Inc. further disclaims any liability for damages of any kind arising out of or relating to use or inability to use this website, its content, or links, including but not limited to special, incidental, or consequential damages. Website users should also note that Internet software, including but not limited to browsers or even transmission problems can produce inaccurate or incomplete copies of documents when downloaded and displayed on a user's computer.
CCComplete, Inc. has a copyright on the content of this website. The trademarks, logos, images, and service marks of CCComplete, Inc. that are used on this website are and shall remain the exclusive property of CCComplete, Inc. and may not be used without prior written permission. All content on this website is and shall remain the sole and exclusive property of CCComplete, Inc., except where a different owner has been indicated on the website. Users of this website may not alter, modify, reproduce, display, publish, post, transmit, or distribute any of the contents found on this website without the express written permission of CCComplete, Inc.
As consideration for any use of this website, including merely accessing the website, you agree to be bound by the laws of the United States of America and the State of Oregon, without regard to any conflicts of law principles. You further agree to be subject to the jurisdiction of any use of the courts, of the State of Oregon, for any dispute relating in any way to your use of this website.
Copyright © 2012-2017 CCComplete, Inc. All rights reserved.