Two-factor login
TOTP available on every account — Authenticator-app QR enrollment, recovery codes, and a self-serve disable path for lost factors. Passwords alone aren't enough for project access.
Campaign data stays where it belongs
Security is wired into every page, action, and export. The full commitments are in the Privacy Policy and DPA; this page is the plain-language summary.
- 2FA
- Two-factor on every account
- 100%
- Privileged actions logged
- 5
- Data-protection regimes honoured
Mission
VoteEdge is a non-partisan election operations and field-research platform for authorised organisations.
We do not endorse candidates or parties, do not publish official election results, and do not provide voting instructions. See the full mission on /about.
Core security controls
Three controls that run on every request
Authentication, authorization, audit. The first two protect access; the third proves what happened after the fact.
Strict access scoping
Interviewers see only their assigned LGA / sub-county / district / voting district. Projects are isolated from one another by design — a research firm with concurrent contracts can keep one client's data separated from the next.
Every action recorded
Logins, approvals, exports, role changes, deletes — each logged with the actor, the timestamp, and the originating IP. The application provides no path to modify or delete audit rows, and the underlying database is operated under strict access controls.
Data integrity
A verifiable trail from interview to certificate
From the field interview to the press-kit certificate, the platform records a verifiable trail. Each step carries its own integrity control.
Raw vs cleared vs official
Datasets are kept separate by design — the platform does not silently mix them. Raw live data, QC-cleared data, and official reporting data each carry visible tier badges on exports so a downstream analyst sees the validation tier of any number they read.
Tier badges on every export
Tamper-evident result log
Each result transmission is hash-chained — every report carries the previous report's hash, and the chain is recorded on the press-kit certificate at the time of publication. A change after publication is detectable by re-computing the chain.
Re-computable hash chain
Two-supervisor amendments
Amendments to a transmitted result that exceed a configured threshold require a second supervisor's approval (a quorum gate) plus a brief embargo before the change becomes visible to public aggregates. The application does not provide a single-supervisor path for those amendments.
Quorum gate + embargo
Regulatory compliance
Per-country data protection, every market
Each active market carries its own data-protection regime. Specific deployment regions and any cross-border transfer instruments are recorded in the Data Processing Agreement (DPA) supplied with your Order Form. Default retention honours each country’s statutory minimum windows as set out in the Privacy Policy.
| Market | Data-protection regime | Status |
|---|---|---|
| Nigeria | NDPA 2023 (Nigeria Data Protection Act) | Active |
| Ghana | Data Protection Act, 2012 (Act 843) | Active |
| Kenya | Data Protection Act, 2019 | Active |
| South Africa | POPIA (Protection of Personal Information Act) | Active |
| Rwanda | Law N°058/2021 on the Protection of Personal Data and Privacy | Active |
- NigeriaActiveNDPA 2023 (Nigeria Data Protection Act)
- GhanaActiveData Protection Act, 2012 (Act 843)
- KenyaActiveData Protection Act, 2019
- South AfricaActivePOPIA (Protection of Personal Information Act)
- RwandaActiveLaw N°058/2021 on the Protection of Personal Data and Privacy
Evaluate the platform
Ready to evaluate the platform?
We can walk through the security posture in detail with your legal + IT team. No commitment required.