EIIElection Integrity Index
How well does the legal framework defend against vote-altering attacks?
Dimensions
Citizen Verifiability
12.5% · 1/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 4.1Public verification artifactDoes law mandate a downloadable public package containing certificates, device records, and result signatures? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section governs periodic updating of the statewide voter registration database through change-of-address verification procedures. It contains no requirement, mandate, or reference to downloadable public packages, certificates, device records, or result signatures—all elements central to the criterion of public verification artifacts for election integrity. | § view source 2026-06-09 |
| 4.2End-to-end verifiability permittedDoes law permit (or require) per-voter cryptographic receipts that prove inclusion without revealing the vote? | 0/50.0% | No matching sections in corpus. | no FTS match 2026-06-09 |
| 4.3Voter-verifiable paper trailIs voter-verifiable paper record (VVPAT or hand-marked paper) legally required? | 1/1100.0% | Alabama Code § 17-2-4(b)(2)a explicitly mandates that voting systems produce a permanent paper record with manual audit capacity. This permanent paper record is available as an official record for recounts, satisfying the requirement for a voter-verifiable paper trail. “The voting system shall produce a permanent paper record with a manual audit capacity for such system.” | § view source 2026-06-09 |
| 4.4Citizen re-tally rightCan any citizen — not just parties — legally re-tally from published precinct data? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section requires posting of election results for public inspection at the courthouse, but it does not grant citizens any legal right to conduct a re-tally or audit of those results. The statute mandates transparency in result posting but does not establish a mechanism or authority for citizens to independently verify or re-count from the posted data. | § view source 2026-06-09 |
Custody Hardware
50.0% · 4/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 2.1Hardware tamper standardAre tamper-evident or tamper-responsive hardware standards mandated? | 2/540.0% | The statute mandates tamper-evident seals (envelopes with signatures across the seal) for election records, which satisfies the basic tamper-evident requirement. However, it does not mandate tamper-responsive systems or logging mechanisms beyond the signature protocol, falling short of the higher ordinal levels. “the inspectors and any poll watchers present shall sign across the seal” | § view source 2026-06-09 |
| 2.2Network isolation mandateIs internet/Wi-Fi/cellular connectivity legally prohibited on vote-casting equipment? | 1/1100.0% | The statute explicitly requires that electronic vote counting systems shall not be capable of connecting to the Internet, cell phone networks, or possessing modem technology. This directly mandates network isolation on vote-casting equipment, fully satisfying the criterion. “Is not capable of connecting to the Internet or cell phone networks and does not possess modem technology.” | § view source 2026-06-09 |
| 2.3Custody documentationIs full chain-of-custody documentation required and publicly available? | 0/10.0% | The statute requires election officials to certify records and sign containers, establishing some chain-of-custody documentation for voted ballot containers. However, the section does not explicitly mandate that such documentation be publicly available, nor does it specify comprehensive chain-of-custody procedures beyond sealing and signing requirements. The criterion requires both 'full' documentation and public availability, neither of which is clearly established here. “Each election official shall certify to the accuracy of the record and shall sign the envelope or container across the seal.” | § view source 2026-06-09 |
| 2.4Tamper criminal penaltyAre there explicit criminal penalties for unauthorized device access? | 1/1100.0% | The statute explicitly establishes criminal penalties (Class A misdemeanor) for unauthorized access to voting machines, including tampering, injury, misuse, and unauthorized possession of machine keys. This directly addresses the criterion's requirement for explicit criminal penalties for unauthorized device access. “Any election officer or other person, who shall tamper with, injure, or attempt to injure any electronic voting machine to be used or being used in an election, or who shall willfully misuse any such machine, or who shall prevent or attempt to prevent the correct operation of such machine, or any unauthorized person who shall make or have in his or her possession a key to a voting machine to be used or being used in an election, shall be guilty, upon conviction, of a Class A misdemeanor.” | § view source 2026-06-09 |
Post Election Audit
22.2% · 2/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 3.1Mandatory auditIs a post-election audit legally required for every election? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section permits the Secretary of State to conduct an audit at discretion (using 'may') for only a single, specific election (November 8, 2022). It does not establish a mandatory audit requirement for every election; rather, it grants optional authority limited to one past election. | § view source 2026-06-09 |
| 3.2Audit methodWhat audit method is mandated? | 2/540.0% | Alabama Code § 17-16-20 mandates a recount when margins are 0.5% or less, involving machine counting with hand recount of discrepancies. This constitutes a fixed-percentage hand recount triggered by a narrow margin threshold, not a risk-limiting audit or comparison audit approach. The statute applies only to close elections, not as a statewide post-election audit method. “The recount shall consist of reading the ballots through the counter. Any ballot that was counted in the original election, but is rejected by the counter in the recount, shall be counted by hand.” | § view source 2026-06-09 |
| 3.3Audit triggers beyond mandatoryDoes law trigger additional audits on close margins or sworn challenges? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-09 |
| 3.4Public observation of auditAre parties, media, and citizens granted observer access to the audit? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section prescribes the alphabetical ordering of candidates on ballots and the sequence of offices—it addresses ballot layout and presentation, not election audits or observer access to audit procedures. It contains no provisions regarding audits, observation rights, or public access to audit processes. | § view source 2026-06-09 |
| 3.5Binding forceAre audit results legally binding on the final certified result? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses the filling of vacancies on boards of registrars by appointment authority. It contains no language regarding post-election audits, audit results, or the binding force of any audit findings on certified election results. The section is entirely procedural regarding registrar board composition and is unrelated to the criterion. | § view source 2026-06-09 |
Software Verifiability
22.2% · 2/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 1.1Source code disclosureIs voting system source code legally accessible? | 2/540.0% | The statute mandates that the voting system must have 'capability for auditing' the source code, which suggests some level of access for review purposes. However, the text does not specify who may conduct such audits, what access mechanism is provided, or whether the code is publicly available or restricted to certifying authorities. This indicates a requirement for auditability without clarifying the scope of accessibility, placing it between vendor-only and full public disclosure. “The capability for auditing the secure remote voting application source code, and the capability for this application to be executed on a clean computer which, at a minimum, has a baseline operating system on its hard disk and no other software or driver installed.” | § view source 2026-06-09 |
| 1.2Reproducible builds requirementMust the binary that runs in production be reproducibly buildable from public source? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-09 |
| 1.3Pre-election binary commitmentIs the running binary cryptographically committed (hash published) before polls open? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-09 |
| 1.4Election definition publicationAre ballot contests, layouts, and tabulation rules signed and published before polls open? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section provides definitions of voting equipment and systems terminology but contains no provisions requiring or addressing the publication or signing of ballot contests, layouts, and tabulation rules before polls open. It is a definitional statute unrelated to pre-election publication requirements. | § view source 2026-06-09 |
| 1.5Post-election integrity checkDoes law grant a right to verify the actual running binary matches the committed one? | 0/10.0% | The section requires capability for auditing source code and executing the application on a clean baseline system, but does not explicitly grant a right to verify that the running binary matches a committed one. The statute addresses source code auditability and clean execution environment, which are related to but distinct from post-election binary verification. “The capability for auditing the secure remote voting application source code, and the capability for this application to be executed on a clean computer which, at a minimum, has a baseline operating system on its hard disk and no other software or driver installed.” | § view source 2026-06-09 |
Transparency Observation
75.0% · 6/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 6.1Domestic observer rightsAre party and civil-society observers given full procedural access? | 1/1100.0% | The statute provides political party and organization watchers with comprehensive procedural access, including rights to observe election conduct, monitor poll opening, remain throughout the election, observe ballot counting, and access all relevant election records. These provisions clearly establish full procedural access for authorized observers. | § view source 2026-06-09 |
| 6.2International observer accessAre OSCE/EU/IFES international observers admitted by default? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section contains legislative findings and declarations regarding congressional redistricting principles and communities of interest. It addresses traditional redistricting principles, population deviation, contiguity, compactness, and community preservation. The section does not address international observer access, OSCE/EU/IFES observer admissions, or transparency through international observation mechanisms. | § view source 2026-06-09 |
| 6.3Precinct-level results publication speedAre precinct-level results legally required to be published within 24h of poll close? | 5/5100.0% | The statute explicitly requires precinct-level (voting place) election results to be posted for public inspection no later than two hours after polls close, which far exceeds the 24-hour requirement specified in the criterion. “No later than two hours after the polls are closed, the voting place election results as tabulated by the inspectors shall be posted by the inspectors for public inspection at a place in the county courthouse designated by the judge of probate.” | § view source 2026-06-09 |
| 6.4Public election event logIs a public, signed, append-only election event log legally required? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-09 |
Vendor Independence
25.0% · 1/4| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 5.1Multi-vendor capabilityDoes law permit multiple certified vendors to operate in the same election? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses the timeline for examination and certification of voting systems (90 days), but contains no language regarding whether multiple certified vendors may operate concurrently in the same election. It is procedural and does not address multi-vendor capability. | § view source 2026-06-09 |
| 5.2Open protocol standardsAre vote-format / device-protocol standards open and publicly documented? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses publication of voter registration lists in newspapers and does not concern vote-format or device-protocol standards. It is about voter list management and public notice, not about technical standards for voting devices or open protocols. | § view source 2026-06-09 |
| 5.3Contract duration capAre vendor contracts capped in duration, preventing perpetual lock-in? | 1/1100.0% | The statute explicitly caps the duration of vendor contracts at a maximum of eight years, preventing perpetual lock-in to a single electronic voting system vendor. This temporal limit is a clear contractual safeguard. “lease purchase agreement or contract of not more than eight years in length” | § view source 2026-06-09 |
| 5.4Source-code escrowIs source-code escrow with the state required as a condition of certification? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-09 |
Voter Access
71.4% · 5/7| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 7.1Ballot secrecy guaranteeIs voter–ballot unlinkability legally guaranteed and enforceable? | 1/1100.0% | The section explicitly guarantees that every voter has a right to vote a secret ballot and mandates that the ballot 'shall be kept secret and inviolate,' which directly addresses the legal guarantee of voter-ballot unlinkability. The statutory language is mandatory ('shall') and establishes an enforceable right. “Every voter in Alabama shall have the right to vote a secret ballot, and that ballot shall be kept secret and inviolate.” | § view source 2026-06-09 |
| 7.2Accessibility mandateAre accessibility standards (vision, motor, language) legally required at every polling place? | 3/560.0% | The statute mandates accessibility for individuals with disabilities (vision, motor) and requires at least one accessible voting system at each polling place. It also requires alternative language accessibility per the Voting Rights Act. However, the requirement is limited to "at least one" accessible system per polling place rather than comprehensive accessibility across all machines, and motor accessibility is not explicitly detailed (though DRE systems may provide it). | § view source 2026-06-09 |
| 7.3Polling-place density floorIs there a legal floor on polling places per N voters or per geographic area? | 1/1100.0% | The statute explicitly establishes a legal floor for polling-place density by requiring at least one voting place for every 2,400 voters when precinct boundaries are changed. This directly satisfies the criterion's requirement for a legal floor on polling places per number of voters. “the county governing body shall forthwith designate and establish at least one voting place for every 2,400 voters in each election precinct so created” | § view source 2026-06-09 |