Minnesotav0

EIIElection Integrity Index

How well does the legal framework defend against vote-altering attacks?

Integrity38.7%21/53 · 29 datapoints · 7 dimensionsCompare across jurisdictions →

Dimensions

Citizen Verifiability31.3%
3/8 · 4 datapoints
Custody Hardware56.3%
5/8 · 4 datapoints
Post Election Audit27.8%
3/9 · 5 datapoints
Software Verifiability16.7%
2/9 · 5 datapoints
Transparency Observation50.0%
4/8 · 4 datapoints
Vendor Independence50.0%
2/4 · 4 datapoints
Voter Access50.0%
4/7 · 3 datapoints

Citizen Verifiability

31.3% · 3/8
DatapointScoreRationale & evidenceSource
4.1Public verification artifactDoes law mandate a downloadable public package containing certificates, device records, and result signatures?0.5/150.0%

§ 206.80 codifies electronic-voting-system requirements including the permanent-paper-ballot mandate. § 206.88 codifies SoS verification recounts reported to the canvassing board. § 204B.275 codifies the central election reporting system (publicly accessible unofficial results). § 201.022 codifies the statewide registration system. Building blocks of public verification codified, though not a single signed downloadable package.

§ view source
2026-05-20
4.2End-to-end verifiability permittedDoes law permit (or require) per-voter cryptographic receipts that prove inclusion without revealing the vote?0/50.0%

No section in the FTS-surfaced candidates satisfies this criterion. Best signal: § 204C.10 codifies the polling-place roster + voter signature certificate — voter identity verification, not cryptographic per-voter receipts. Minnesota does not codify end-to-end cryptographic verifiability.

§ view source
2026-05-20
4.3Voter-verifiable paper trailIs voter-verifiable paper record (VVPAT or hand-marked paper) legally required?1/1100.0%

§ 206.80(7) codifies that an electronic voting system may not be employed unless it 'provides every voter an opportunity to verify votes recorded on the permanent paper ballot… produces an individual, discrete, permanent, paper ballot cast by the voter, and preserves the paper ballot.' § 206.61 codifies paper-ballot provision. § 206.86 codifies counting of paper ballot cards. Comprehensive voter-verifiable paper-trail mandate codified.

provides every voter an opportunity to verify votes recorded on the permanent paper ballot, either visually or using assistive voting technology, and to change votes or correct any error before the voter's ballot is cast and counted, produces an individual, discrete, permanent, paper ballot cast by the voter, and preserves the paper ba
§ view source
2026-05-20
4.4Citizen re-tally rightCan any citizen — not just parties — legally re-tally from published precinct data?1/1100.0%

§ 204C.28 codifies that county auditors 'permit public inspection of the summary statements' on election night. § 204B.275 codifies the central election reporting system (public unofficial results). § 205.16 / § 205A.07 codify published notice. § 202A.20 codifies caucus-result public information. Citizen access to precinct-level result data codified.

§ view source
2026-05-20

Custody Hardware

56.3% · 5/8
DatapointScoreRationale & evidenceSource
2.1Hardware tamper standardAre tamper-evident or tamper-responsive hardware standards mandated?2/540.0%

§ 204C.25 codifies that after the count, ballots are 'placed' and sealed in the presence of all election judges. § 204C.28 codifies county-auditor custody of returns. § 204B.40 codifies 22-month retention of election materials. § 203B.21 codifies absentee-ballot envelope form. § 203B.08 codifies absentee-ballot marking/return. Tamper-evident handling codified; reinforced by § 206.845 (system security).

§ view source
2026-05-20
2.2Network isolation mandateIs internet/Wi-Fi/cellular connectivity legally prohibited on vote-casting equipment?1/1100.0%

§ 206.845 codifies a comprehensive explicit air-gap mandate: ballot recording/tabulating systems 'must not be connected to or operated on, directly or indirectly, any electronic network… Wireless communications may not be used in any way… Wireless, device-to-device capability is not permitted. No connection by modem is permitted.' Transfer only by physical media. Among the strongest network-isolation provisions in the corpus.

Except for wired connections within the polling place, ballot recording and tabulating systems must not be connected to or operated on, directly or indirectly, any electronic network, including a local area network, a wide-area network, the Internet, or the World Wide Web.
§ view source
2026-05-20
2.3Custody documentationIs full chain-of-custody documentation required and publicly available?1/1100.0%

§ 204B.182 codifies that 'the county auditor must develop a county elections chain of custody plan' accounting for 'both the physical and cyber security of elections-related materials,' filed with the Secretary of State, with sample documentation. § 209.05 codifies candidate visual guard over ballots. § 206.845 codifies system-security custody. Comprehensive chain-of-custody framework codified.

The county auditor must develop a county elections chain of custody plan to be used in all state, county, municipal, school district, and special district elections held in that county.
§ view source
2026-05-20
2.4Tamper criminal penaltyAre there explicit criminal penalties for unauthorized device access?0.5/150.0%

§ 206.845 codifies prohibited connections and unauthorized-access prohibitions for ballot recording/tabulating systems (and bars creating/disclosing electronic images of the system). § 203B.03 (PROHIBITIONS; PENALTIES, not in FTS top-5 for this datapoint) codifies criminal penalties for ballot fraud. § 204C.16 codifies ballot-mismarking offenses. Minnesota's broader election-crime penalties live in Minn. Stat. ch. 609 (Criminal Code). Tamper-prohibition + criminal-penalty framework codified.

§ view source
2026-05-20

Post Election Audit

27.8% · 3/9
DatapointScoreRationale & evidenceSource
3.1Mandatory auditIs a post-election audit legally required for every election?0/10.0%

§ 206.88 codifies that 'the secretary of state may conduct a recount to verify the accuracy of vote counting and recording in one or more precincts.' § 204C.36 / § 204C.35 codify margin-triggered recounts. Minnesota does codify a post-election review (the statutory post-election review under § 206.89, not in FTS top-5) but the FTS-surfaced sections cover discretionary + margin-triggered recounts. Verification framework codified; partial because the FTS-surfaced provisions are discretionary/triggered rather than universal.

§ view source
2026-05-20
3.2Audit methodWhat audit method is mandated?1/520.0%

§ 204C.36 codifies publicly-funded recounts for county/municipal/school offices at margins <0.25% (single-seat). § 204C.35 codifies federal/state/judicial recounts at <0.25-0.5% margins. § 206.88 codifies SoS partial recounts to verify accuracy. § 204C.361 codifies uniform recount rules adopted by SoS. Ordinal level 1: manual recount triggered by margin (not risk-limiting; the separate § 206.89 post-election review is a fixed-precinct audit).

§ view source
2026-05-20
3.3Audit triggers beyond mandatoryDoes law trigger additional audits on close margins or sworn challenges?0/10.0%

No candidate sections returned by FTS.

no FTS match
2026-05-20
3.4Public observation of auditAre parties, media, and citizens granted observer access to the audit?0.5/150.0%

§ 201.195 codifies public challenge petitions — 'any voter registered within a county may challenge the eligibility or residence of any other voter.' § 204C.28 (not in FTS top-5 for this datapoint) codifies public inspection of summary statements on election night; § 206.83 codifies that pre-election testing must be 'open to representatives of the political parties, candidates, the press, and the public.' Public-observation framework codified.

§ view source
2026-05-20
3.5Binding forceAre audit results legally binding on the final certified result?1/1100.0%

§ 204C.33 codifies that the county canvassing board 'must meet… following the state general election' and certify results. § 204C.28 codifies election-night returns processing. § 206.88 codifies that recount results 'must be reported to the appropriate canvassing board' and certified. § 204D.07 codifies ballot placement. Canvass + recount results binding on certification codified.

§ view source
2026-05-20

Software Verifiability

16.7% · 2/9
DatapointScoreRationale & evidenceSource
1.1Source code disclosureIs voting system source code legally accessible?1/520.0%

§ 206.805 codifies that state voting-system contracts 'must give the state a perpetual license to use and modify the software' and 'must include provisions to escrow the software source code.' This grants the STATE access + modification rights and escrow custody — but not public disclosure. Partial accessibility codified (escrow, not open publication).

§ view source
2026-05-20
1.2Reproducible builds requirementMust the binary that runs in production be reproducibly buildable from public source?0/10.0%

No candidate sections returned by FTS.

no FTS match
2026-05-20
1.3Pre-election binary commitmentIs the running binary cryptographically committed (hash published) before polls open?0/10.0%

No candidate sections returned by FTS.

no FTS match
2026-05-20
1.4Election definition publicationAre ballot contests, layouts, and tabulation rules signed and published before polls open?0.5/150.0%

§ 206.82 codifies preparation of electronic voting system programs (the program for each election). § 206.83 codifies pre-election testing. § 204B.275 codifies the central election reporting system. § 203B.082 codifies absentee drop-box security. Public commitment of election programs codified through the certified-program + public-test framework, though without cryptographic signing.

§ view source
2026-05-20
1.5Post-election integrity checkDoes law grant a right to verify the actual running binary matches the committed one?0/10.0%

§ 203B.05 (municipal-clerk absentee administration) is the FTS-top candidate — limited relevance. The integrity-check function in Minnesota operates through § 206.83 (pre-election testing), § 206.88 (SoS partial recounts to verify accuracy), and the post-election review framework rather than a binary-attestation regime.

§ view source
2026-05-20

Transparency Observation

50.0% · 4/8
DatapointScoreRationale & evidenceSource
6.1Domestic observer rightsAre party and civil-society observers given full procedural access?1/1100.0%

§ 204C.07 codifies that each major political party may appoint challengers at each polling place. § 204C.12 codifies the challenge procedure. § 209.05 codifies candidate visual guard over ballots. § 206.83 codifies bipartisan + public observation of testing. § 200.57 codifies a broad right of action. Comprehensive domestic-observer framework codified.

the chair of an authorized committee of each major political party may appoint by written certificate voters from that political party to act as challengers of voters at the polling place for each precinct.
§ view source
2026-05-20
6.2International observer accessAre OSCE/EU/IFES international observers admitted by default?0/10.0%

No candidate sections returned by FTS.

no FTS match
2026-05-20
6.3Precinct-level results publication speedAre precinct-level results legally required to be published within 24h of poll close?3/560.0%

§ 204B.275 codifies the Election Reporting System — 'the computerized central statewide database… [that] facilitates the collection, aggregation, reporting, and secure sharing of unofficial election results to the public.' § 206.85 codifies counting-center duties. § 204C.28 codifies election-night public inspection of returns. § 204C.33 codifies the county canvass within 3-8 days. Ordinal level 3: precinct-level unofficial results posted on election night via the statewide reporting system.

"Election reporting system" means the computerized central statewide database for offices, candidates, ballot questions, and unofficial results developed and maintained by the secretary of state. The system facilitates the collection, aggregation, reporting, and secure sharing of unofficial election results to the public.
§ view source
2026-05-20
6.4Public election event logIs a public, signed, append-only election event log legally required?0/10.0%

No candidate sections returned by FTS.

no FTS match
2026-05-20

Vendor Independence

50.0% · 2/4
DatapointScoreRationale & evidenceSource
5.1Multi-vendor capabilityDoes law permit multiple certified vendors to operate in the same election?1/1100.0%

§ 206.57 codifies that 'a vendor of an electronic voting system may apply to the secretary of state to examine the system' — open vendor-certification process. § 206.805 codifies state voting-system contracts soliciting bids 'from each vendor selling or leasing voting systems that have been certified.' Multiple-vendor framework codified.

A vendor of an electronic voting system may apply to the secretary of state to examine the system and to report as to its compliance with the requirements of law
§ view source
2026-05-20
5.2Open protocol standardsAre vote-format / device-protocol standards open and publicly documented?0/10.0%

No section in the FTS-surfaced candidates satisfies this criterion. Best signal: § 200.04 (HAVA complaints) and similar FTS candidates do not codify open vote-data-exchange protocols. Minnesota does not codify open-protocol standards; the certification is by SoS examination under § 206.57.

§ view source
2026-05-20
5.3Contract duration capAre vendor contracts capped in duration, preventing perpetual lock-in?0/10.0%

No section in the FTS-surfaced candidates satisfies this criterion. Best signal: § 204B.295 (translated voting instructions) is the FTS-top candidate — unrelated to contract duration. § 206.805 codifies that voting-system contracts 'must be renewed from time to time' with a perpetual state software license, but no explicit maximum-duration cap is codified.

§ view source
2026-05-20
5.4Source-code escrowIs source-code escrow with the state required as a condition of certification?1/1100.0%

§ 206.805 codifies an EXPLICIT source-code escrow mandate: 'The contracts must give the state a perpetual license to use and modify the software. The contracts must include provisions to escrow the software source code.' Among the clearest source-code-escrow provisions in the corpus.

The contracts must give the state a perpetual license to use and modify the software. The contracts must include provisions to escrow the software source code.
§ view source
2026-05-20

Voter Access

50.0% · 4/7
DatapointScoreRationale & evidenceSource
7.1Ballot secrecy guaranteeIs voter–ballot unlinkability legally guaranteed and enforceable?1/1100.0%

§ 204C.17 codifies voting secrecy: 'a voter shall not reveal to anyone in the polling place the name of any candidate for whom the voter intends to vote or has' voted. § 204C.18 codifies that election judges 'shall make no entry or notation… showing the political party to which a voter belongs or for which political party the voter voted.' § 206.80(1) codifies that electronic voting systems must permit every voter to vote in secret. Comprehensive ballot-secrecy mandate codified.

Except as authorized by section 204C.15, a voter shall not reveal to anyone in the polling place the name of any candidate for whom the voter intends to vote or has
§ view source
2026-05-20
7.2Accessibility mandateAre accessibility standards (vision, motor, language) legally required at every polling place?2/540.0%

§ 204B.18 codifies polling-place accessibility: each polling place must have 'at least one accessible voting booth or other accessible voting station' plus a HAVA-conforming voting system. § 202A.155 codifies interpreter services for deaf/deafblind/hard-of-hearing voters at caucuses. § 206.80(7) codifies assistive voting technology for ballot verification. § 204B.295 codifies translated voting instructions + sample ballots. Ordinal level 2: comprehensive accessibility framework codified (physical + assistive + language).

Each polling place must have at least one accessible voting booth or other accessible voting station and beginning with federal and state elections held after December 31, 2005, and county, municipal, and school district elections held after December 31, 2007, one voting system that conforms to section 301(a)(3)(B) of the Help America Vote Act
§ view source
2026-05-20
7.3Polling-place density floorIs there a legal floor on polling places per N voters or per geographic area?0.5/150.0%

§ 204B.22 codifies a minimum-election-judge floor (4 per precinct in a state general election, 3 for precincts under 500 registered voters). § 204B.18 codifies that 'each polling place must contain a number of voting booths or voting stations IN PROPORTION TO the number of individuals eligible to vote in the precinct.' § 204B.16 codifies polling-place designation. A proportional-density requirement is codified, though without a strict numeric voters-per-place ratio.

§ view source
2026-05-20

Other methodologies for Minnesota