Election infrastructure built beyond reasonable doubt.
The platform for high-stakes institutional votes. Your team runs election day on your own premises with physical ID check-ins and tamper-evident cryptographic verification.
Voter Check-in & Code Issuance
Verify physical ID card, mark present, and issue 4-digit code.
Single-use · Hand slip to voter
General Secretary
Two screens. That's the whole platform.
You subscribe, we hand you the software, your own team runs it end to end, wherever your members actually gather, on your own devices. We're not on site, we don't touch a ballot, and we don't run your election for you.
Admin panel
Create the election, import the voter roll, set up positions and candidates, check people in at the door, watch turnout and results come in live, publish the outcome when it closes.
Voter kiosk
The screen voters actually use: installed on any laptop you point it at, no login, no admin access. They type their ID/roll number and the code your staff gave them, vote, and it resets for the next person.
Every organization's election fails the same three ways.
Manual counting is slow and disputable: one miscounted ballot and the whole result is in question. Fully remote voting solves the counting problem but creates a new one: a link that can be forwarded, a password that can be shared, a vote nobody can prove was cast by the person it claims to be. Either way, the meeting after the election is worse than the election itself.
Governments have noticed the same pattern closely enough to write it down: India's own Lyngdoh Committee, convened specifically over student election integrity, called for transparent conduct and an independent grievance process back in 2006, safeguards most organizations, of every kind, still handle informally at best.
Manual counting.
Human tallying is slow, error-prone, and every disputed ballot becomes a grievance the organizers have to personally defend.
Remote voting's trust gap.
A link and a password prove someone had the credentials, never that the right person actually cast the vote.
No independent record.
Without a tamper-evident audit trail, a result is only as credible as how much people already trusted the people running it.
Five steps. No step anyone can do remotely, unsupervised, or twice.
Booth Officer Desk: Physical ID Check
Your staff looks at the physical ID card, marks the member present on the roll, and generates a one-time code.
Single-use token · Valid for this voting session
The Physical-to-Digital Handshake
Passwords can be stolen, links can be forwarded, and OTPs can be intercepted. AnchorBallot anchors voter identity offline through physical ID inspection by your own staff, then severs the link before the voter touches the kiosk.
- Physical ID inspection at entrance
- Single-use code dies on cast
- Air-gapped kiosk voting surface
- Sequential cryptographic audit log
Configure.
Set up positions, candidates, and import the voter/member roll: an ID or roll number is the only thing required.
voter_idVerify in person.
On election day, your own staff check each voter's physical ID and mark them present. This is the one step AnchorBallot deliberately keeps offline: presence has to be a person looking at a face and a card, not a password.
Issue a one-time code.
Staff hand over a 4-digit code, pre-generated in batches for high-turnout days with several kiosks running side by side, or issued on the spot.
4-digit numericVote at a kiosk, not a phone.
The voter walks to a dedicated device, types their own ID and that code, ranks or selects their choices, and confirms. Nothing else is on screen: no address bar, no way back to any login page.
Watch it happen, verify it after.
Staff see live turnout, a voting-activity chart, and a full audit trail while polls are open, and a hash-chained, blockchain-anchored evidence log once they close.
Three ways to vote. The engine always picks the right algorithm.
A voter can rank candidates in order of preference, reject all candidates for a position outright, or abstain. Each is a distinct, recorded choice, not lumped into "did not vote." The counting engine then applies whichever algorithm the race actually calls for, automatically, before a single ballot is counted.
Rank in order
A voter orders candidates by preference. If their top choice is eliminated, their vote moves to the next ranked candidate still in the running.
Reject all candidates
A deliberate, recorded "none of the above" for a position, distinct from an abstention and counted as its own outcome.
Abstain
No preference cast for that position. It never lowers the majority threshold the way an exhausted ranked ballot legitimately can.
Nobody picks an algorithm from a dropdown. The race decides which one applies, so a two-way contest and a five-candidate field for the same election are both counted correctly without anyone needing to know the difference.
A control room for election day, not a spreadsheet.
Turnout percentage. Votes cast in the last five minutes. Every check-in, every ballot accepted, every state change, timestamped, in order, without ever showing which candidate anyone chose. If a kiosk goes down or a queue backs up, you see it the moment it happens, not the moment someone complains.
Central Operations Dashboard
0x3b89…71f2Real-time turnout and vote-count tiles, refreshed while polls are open.
A voting-activity chart built from actual ballot timestamps, not a mockup.
System health for authentication, voting, database, audit, and blockchain anchoring, each checked independently.
A chronological event timeline: check-ins, ballots accepted, state changes, tie resolutions, all permanently recorded.
Nobody, including us, can tell you how anyone voted.
Cryptographic ballot secrecy and physical ID verification operate on separate, structurally disconnected layers. There is no query, API endpoint, or database admin key that can link a voter ID to a cast ballot.
- Zero Link Matrix: Identity is structurally severed before ballot storage.
- Single-Use Tokens: 4-digit code burns the instant a vote is cast.
- Sequential Chain: Each record embeds the SHA-256 parent block hash.
- Public Anchor: Root evidence anchored outside our own database.
The Zero-Trust Verification Chain
Staff visually verify a government or university photo ID. No password or email OTP can spoof physical presence.
Identity verified before the vote, not after.
A person, not a password, confirms who is standing in front of the kiosk.
Ballot secrecy is architectural, not a policy.
Cast ballots are structurally absent of any link back to voter identity.
Every action is on a tamper-evident chain.
Each event is hashed together with the previous one. Altering one record breaks the entire chain.
The count is anchored outside our database.
Once polls close, the root evidence is anchored to a public ledger for independent auditing.
AnchorBallot was engineered around one principle: an election result should be able to withstand scrutiny from anyone, at any time, forever. Every voter is verified in person before casting a ballot, closing the door on the remote impersonation and credential-sharing that plagues online voting systems. Counting runs on instant-runoff, the internationally recognized standard for producing outcomes that reflect broad consensus rather than narrow plurality. Where the count genuinely ties, a named administrator makes the call, on the record, timestamped, never a coin flip hidden inside code. And the entire sequence, from first vote to final tally, is cryptographically fingerprinted and anchored to a public blockchain, making tampering not just difficult but mathematically detectable after the fact.
The platform has been load-tested at scale far beyond any single election's real turnout, and every core calculation has its own automated proof of correctness that runs before results are ever trusted. This is what election infrastructure looks like when it's built to be defended, not just deployed.
If your members show up in person, AnchorBallot fits.
Housing societies and RWAs running an AGM. Universities and colleges electing student representatives. Co-operative societies, professional bodies, and trade associations holding annual elections. Corporate boards and internal polls where a physical meeting already happens. Unions and clubs where "we'll just do a show of hands" stopped being good enough years ago. If people already gather in one place to vote, AnchorBallot replaces the ballot box and the dispute that usually follows it, not the gathering itself.
Calculate your Election Day requirements
AnchorBallot runs on standard hardware your institution already owns. Adjust your voter roll size to estimate hardware needs and turnaround times.
Standard browser devices
Ranked ballot selection
For 80%+ peak turnout
vs. ~5.0 hrs manual count
Eliminates election disputes, proxy voting, and overnight manual paper ballot counting.
The unglamorous parts of running an election, handled.
Setup, results, and reporting shouldn't take longer than election day itself.
Your own kiosk, not ours
A platform admin can put an institution's own voting kiosk under its own identity, with no AnchorBallot branding visible to voters at all.
One-click official results
A letterhead-style results document, per-position breakdown, winners, and vote counts, generated instantly instead of assembled by hand.
Bulk candidate photos
Drop in a batch of photo files and match them to the candidate list on one screen, instead of uploading one candidate at a time.
Frequently Asked Questions
Everything election committees and IT administrators need to know about Election Day deployment.
Institutional Evaluation Kit
Need to present AnchorBallot to your Dean, Governing Board, or Legal Counsel? Request our comprehensive institutional review package:
- Cryptographic Threat Model & Architecture (PDF)
- Election Day Staff 1-Page Checklist
- Sample Lyngdoh Committee Compliance Sheet
Delivered directly to official institutional email addresses.
Run an election nobody has to take your word for.
Talk to us about your next election, AGM, or general body vote.