Security of the OmniBallot Electronic Remote Balloting System
The OmniBallot Accessible Balloting Portal is the most independently reviewed and tested technology in U.S. elections. In 2024 alone, OmniBallot has been independently tested by over 800 individual cybersecurity researchers across 1,600 hours of testing. The system is independently monitored 24/7, 365 days a year and has received both State and federal security certifications.
The system has been designed specifically for voters that cannot vote a conventional paper ballot, or at a polling place. intent of the technology is to ensure all voters have equal access to a private and independent ballot, regardless of geography or disabilities.
Since 2008 in over 5,000 elections, serving over 20 million voters, OmniBallot has never had a compromise. Over the last 15 years, OmniBallot has been tested, reviewed and implemented in more U.S. elections than all other similar technologies combined.
Partnering with Amazon (AWS), OmniBallot is securely hosted in the same cloud environment that has been approved for use by the CIA, FBI. Homeland Security and the National Security Agency.
To ensure the integrity of the system and its various components, OmniBallot has undergone multiple independent security reviews. These include, but are not limited to:
Persistent, ongoing independent testing from a pool of 1,500 cybersecurity researchers
• 24/7 independent monitoring and alerting of all activity within OmniBallot
• Full SOC 2 Type II Certification
• Full ISO 27001 Certification
• Approved by a Federally-approved, Independent Test Lab (SLI) to meet Best Practices for Elections Technologies
• Certified by every State that requires certification for electronic ballot transmission.
The OmniBallot application is continuously tested and validated through our penetration testing service. This is a continuous 24 x 7 x 365 service in which independent, vetted researchers persistently test the application against all types of known and newly discovered vulnerabilities. We believe OmniBallot is the only technology in the U.S. elections space that undergoes this level of constant, daily independent testing and 24/7 independent monitoring.
In 2024, OmniBallot has been tested by the University of Washington and Colorado-based BlindIT to meet WCAG 2.2 accessibility standards.