EIIElection Integrity Index
How well does the legal framework defend against vote-altering attacks?
Dimensions
Citizen Verifiability
12.5% · 1/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 4.1Public verification artifactDoes law mandate a downloadable public package containing certificates, device records, and result signatures? | 0/10.0% | The section mandates distribution of signed protocol copies with result signatures to authorized parties and requires scanning/transmission of protocols and technical device records to the Central Election Commission, but does not explicitly mandate a downloadable public package containing all these materials as an integrated, publicly accessible digital artifact. | § view source 2026-05-11 |
| 4.2End-to-end verifiability permittedDoes law permit (or require) per-voter cryptographic receipts that prove inclusion without revealing the vote? | 0/50.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 213б addresses transparency and security measures for machine voting systems, including source code access, cryptographic key management, and pre-election verification procedures. However, it does not mention or address per-voter cryptographic receipts, voter-verified paper trails, or any mechanism for individual voters to obtain cryptographic proof of vote inclusion. The section focuses on system-level security and party observer access rather than end-to-end verifiability mechanisms available to individual voters. | § view source 2026-05-11 |
| 4.3Voter-verifiable paper trailIs voter-verifiable paper record (VVPAT or hand-marked paper) legally required? | 1/1100.0% | The section mandates that voting is conducted with general paper ballots ('хартиени бюлетини'), which are further described as white ballots made of solid opaque paper with sequential numbers and security features. This establishes a legal requirement for paper ballots as the voting method, thereby creating a voter-verifiable paper trail. “Гласуването се извършва с общи хартиени бюлетини” | § view source 2026-05-11 |
| 4.4Citizen re-tally rightCan any citizen — not just parties — legally re-tally from published precinct data? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 170 addresses campaign financing transparency and verification procedures conducted by the Court of Accounts (Сметната палата), including checks on donation sources and financial disclosures. It does not address precinct-level election result data, citizen audit rights, or any mechanism allowing citizens to re-tally voting results from published precinct data. The section concerns campaign finance compliance, not vote tabulation verification. | § view source 2026-05-11 |
Custody Hardware
25.0% · 2/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 2.1Hardware tamper standardAre tamper-evident or tamper-responsive hardware standards mandated? | 2/540.0% | The section mandates that ballot boxes be transparent and sealed with paper tape stamped with the precinct electoral commission's seal and signed by commission members present. This establishes a tamper-evident seal requirement through physical sealing and official markings, satisfying the baseline tamper-evident standard without logging or auto-quarantine provisions. | § view source 2026-05-11 |
| 2.2Network isolation mandateIs internet/Wi-Fi/cellular connectivity legally prohibited on vote-casting equipment? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 172 addresses campaign finance reporting requirements, including submission of financial reports to the Court of Audit by parties, coalitions, and initiative committees within 30 working days after election day. This section concerns post-election financial accountability and disclosure, not the technical specifications or network isolation of vote-casting equipment used during elections. | § view source 2026-05-11 |
| 2.3Custody documentationIs full chain-of-custody documentation required and publicly available? | 0/10.0% | The section requires the Central Electoral Commission to prepare and publish a security plan describing measures for storage and transport of technical devices for machine voting, but it does not explicitly require full chain-of-custody documentation or mandate that such documentation be publicly available. The statute addresses planning and transparency of security measures rather than establishing a requirement for detailed custody records. “съхранение и транспорт на техническите устройства за машинно гласуване” | § view source 2026-05-11 |
| 2.4Tamper criminal penaltyAre there explicit criminal penalties for unauthorized device access? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses qualifications and disqualifications for members of municipal election commissions, focusing on education requirements, language proficiency, and criminal history related to fitness for office. It does not address criminal penalties for unauthorized device access or tampering with election hardware. | § view source 2026-05-11 |
Post Election Audit
0.0% · 0/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 3.1Mandatory auditIs a post-election audit legally required for every election? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 114 addresses the rights of election observers to be present at various stages of the election process, including data entry and result verification. It does not establish or mandate a post-election audit requirement for every election. The section concerns observer access, not mandatory audit procedures. | § view source 2026-05-11 |
| 3.2Audit methodWhat audit method is mandated? | 0/50.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 385 addresses the allocation of European Parliament mandates to parties and coalitions using the Hare-Niemeyer method. It contains no provisions regarding post-election audit procedures or audit methods of any kind. This section is entirely about mandate distribution and does not address election auditing. | § view source 2026-05-11 |
| 3.3Audit triggers beyond mandatoryDoes law trigger additional audits on close margins or sworn challenges? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section concerns the complaint procedure for sectional election commissions abroad, allowing challenges to be submitted to the Central Election Commission with expedited resolution. It does not address audit triggers, close margins, or sworn challenges as contemplated by criterion 3.3 on post-election audits. | § view source 2026-05-11 |
| 3.4Public observation of auditAre parties, media, and citizens granted observer access to the audit? | 0/10.0% | The section mandates real-time streaming of district electoral commission meetings and publication of protocols, decisions, and election results online, which provides transparency and indirect public access to proceedings. However, it does not explicitly grant in-person observer access to parties, media, and citizens during audits or verification processes—only remote viewing via internet. The criterion specifically asks about 'observer access,' which typically implies direct physical presence. | § view source 2026-05-11 |
| 3.5Binding forceAre audit results legally binding on the final certified result? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 161 of the Bulgarian Election Code addresses candidate leave entitlements during campaign periods. It is entirely unrelated to post-election audits or the binding force of audit results on certified election outcomes. The section does not address audit procedures, audit binding authority, or certification of election results. | § view source 2026-05-11 |
Software Verifiability
33.3% · 3/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 1.1Source code disclosureIs voting system source code legally accessible? | 3/560.0% | The statute mandates access to source code and software documentation for the machine voting system to designated representatives of parties/coalitions that received over 4% of votes in recent parliamentary elections—a restricted but non-vendor group. This exceeds vendor-only secrecy but falls short of full public disclosure, placing it between academic NDA access and public availability. | § view source 2026-05-11 |
| 1.2Reproducible builds requirementMust the binary that runs in production be reproducibly buildable from public source? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-05-11 |
| 1.3Pre-election binary commitmentIs the running binary cryptographically committed (hash published) before polls open? | 0/10.0% | The section requires publication of cryptographic identifiers derived from the software build process, including source code and built software components, before election day. However, the statute does not explicitly require a cryptographic hash/commitment of the running binary itself to be published before polls open, only identifiers from the build process and public cryptographic keys. | § view source 2026-05-11 |
| 1.4Election definition publicationAre ballot contests, layouts, and tabulation rules signed and published before polls open? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 333 describes the procedural sorting and handling of ballots after the polls close and ballot boxes are opened—specifically how ballots are categorized into piles based on their validity, marking characteristics, and official seals. It addresses post-election ballot processing, not pre-election publication of ballot contests, layouts, or tabulation rules. The criterion requires advance publication of election definition materials before polls open, which is not addressed in this section. | § view source 2026-05-11 |
| 1.5Post-election integrity checkDoes law grant a right to verify the actual running binary matches the committed one? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 435 addresses the physical removal of items from the voting table before opening the ballot box and access controls for ballot handling by commission members. It does not address software verification, binary code matching, or post-election integrity checks related to software systems. This section concerns ballot box procedures, not cryptographic or software verification mechanisms. | § view source 2026-05-11 |
Transparency Observation
12.5% · 1/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 6.1Domestic observer rightsAre party and civil-society observers given full procedural access? | 1/1100.0% | The section explicitly grants party representatives and observers the right to be present during the opening of ballot boxes and determination of voting results in the polling station. It further provides for observers' presence subject to registration requirements, and ensures direct visibility including video recording or real-time broadcast, which collectively constitutes procedural access to observe the critical counting process. | § view source 2026-05-11 |
| 6.2International observer accessAre OSCE/EU/IFES international observers admitted by default? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses incompatibilities for European Parliament candidacy (conflicts of interest and dual positions), not international observer access to elections. It is entirely unrelated to whether OSCE/EU/IFES observers are admitted to observe elections. | § view source 2026-05-11 |
| 6.3Precinct-level results publication speedAre precinct-level results legally required to be published within 24h of poll close? | 0/50.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 344 addresses the publication of final results by the Central Electoral Commission at the national level (within 3 days for announcement and 7 days for official gazette publication), but contains no requirement for precinct-level results to be published within any specified timeframe, let alone within 24 hours of poll closure. | § view source 2026-05-11 |
| 6.4Public election event logIs a public, signed, append-only election event log legally required? | 0/10.0% | The section requires regional election commissions to announce decisions publicly and maintain a public register of complaints and signals (point 21), but does not establish a legally required, signed, append-only election event log specifically. The disclosure requirements are present but do not meet the full technical and legal specification of an immutable, chronologically ordered, append-only log with mandatory signatures. | § view source 2026-05-11 |
Vendor Independence
0.0% · 0/4| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 5.1Multi-vendor capabilityDoes law permit multiple certified vendors to operate in the same election? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 66 addresses incompatibilities and conflicts of interest for members of district election commissions. It contains no provisions regarding certified vendors, multi-vendor systems, or vendor operations in elections. The section is entirely about personnel eligibility rules and has no relevance to the criterion concerning multiple certified vendors. | § view source 2026-05-11 |
| 5.2Open protocol standardsAre vote-format / device-protocol standards open and publicly documented? | 0/10.0% | The section requires that parties, coalitions, NGOs, and the Bulgarian Academy of Sciences receive access to devices, documentation, and source code during the certification process. However, this provides access only to registered observers and specific stakeholders during certification, not public documentation of open protocol standards. The criterion asks whether standards are open and publicly documented generally, which this section does not explicitly establish. | § view source 2026-05-11 |
| 5.3Contract duration capAre vendor contracts capped in duration, preventing perpetual lock-in? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses penalties for individuals who act as proxies with annulled credentials in elections. It is entirely unrelated to vendor contracts, contract duration, or vendor independence issues. The criterion concerns vendor lock-in prevention through contract duration caps, which is not addressed anywhere in this section. | § view source 2026-05-11 |
| 5.4Source-code escrowIs source-code escrow with the state required as a condition of certification? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 129 concerns campaign deposit requirements for political parties, coalitions, and initiative committees participating in elections. It addresses financial deposits, not source-code escrow or vendor certification requirements. This section is entirely unrelated to the criterion regarding source-code escrow as a condition of certification. | § view source 2026-05-11 |
Voter Access
57.1% · 4/7| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 7.1Ballot secrecy guaranteeIs voter–ballot unlinkability legally guaranteed and enforceable? | 1/1100.0% | The section explicitly guarantees secret ballot voting (тайно гласуване) as a fundamental principle governing all elections. This legal requirement directly ensures voter-ballot unlinkability by mandating that voting must be conducted in secret, making it impossible to link individual voters to their specific ballots. “с тайно гласуване” | § view source 2026-05-11 |
| 7.2Accessibility mandateAre accessibility standards (vision, motor, language) legally required at every polling place? | 2/540.0% | The section addresses accessibility for voters with permanent disabilities by providing an alternative voting mechanism (mobile ballot box) rather than requiring accessibility standards at every polling place itself. This is a conditional accommodation rather than a comprehensive accessibility mandate applicable to all polling locations. | § view source 2026-05-11 |
| 7.3Polling-place density floorIs there a legal floor on polling places per N voters or per geographic area? | 1/1100.0% | The section establishes a legal floor on polling-place density by limiting the maximum number of voters per polling section to 1,000. This ensures a minimum density of polling places—specifically, at least one polling place per 1,000 voters—which directly satisfies the criterion of a legal floor on polling places per number of voters. “В една избирателна секция се включват до 1000 избиратели” | § view source 2026-05-11 |