EIIElection Integrity Index
How well does the legal framework defend against vote-altering attacks?
Dimensions
Citizen Verifiability
12.5% · 1/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 4.1Public verification artifactDoes law mandate a downloadable public package containing certificates, device records, and result signatures? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section regulates paid political advertisements in newspapers and periodicals, requiring disclosure of advertisement sponsors and retention of identity proof. It does not address election auditing, device records, result signatures, or any downloadable public verification packages related to election integrity or vote counting. | § view source 2026-06-15 |
| 4.2End-to-end verifiability permittedDoes law permit (or require) per-voter cryptographic receipts that prove inclusion without revealing the vote? | 0/50.0% | No matching sections in corpus. | no FTS match 2026-06-15 |
| 4.3Voter-verifiable paper trailIs voter-verifiable paper record (VVPAT or hand-marked paper) legally required? | 1/1100.0% | This section mandates the use of paper ballots that voters handle directly and mark, creating a voter-verifiable paper trail. The statute requires voters to fold paper ballots with candidate names and hand them to election officers for deposit, establishing a physical paper record that voters can verify before submission. “The qualified voter shall fold each paper ballot with the names of the candidates and questions on the inside and hand the folded ballot to the appropriate officer of election. The officer shall place the ballot in the ballot container without any inspection except to assure himself that only a single ballot has been tendered and that the ballot is a genuine ballot.” | § view source 2026-06-15 |
| 4.4Citizen re-tally rightCan any citizen — not just parties — legally re-tally from published precinct data? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses the costs and procedures for recounts petitioned by candidates or referendum petitioners, but does not establish or recognize a right for any citizen to independently re-tally votes from published precinct data. The statute focuses on who bears the expense of official recounts conducted by courts, not on citizen access to raw data for independent verification. | § view source 2026-06-15 |
Custody Hardware
50.0% · 4/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 2.1Hardware tamper standardAre tamper-evident or tamper-responsive hardware standards mandated? | 2/540.0% | The section requires that voting machines be sealed with numbered seals or locked with a key, which constitutes a tamper-evident mechanism. However, it does not require logged records of seal status or any tamper-responsive automated systems—only that representatives certify the seal/counter numbers. This satisfies the basic tamper-evident requirement but falls short of more robust standards. “it shall be sealed with a numbered seal in their presence, or if the machine cannot be sealed with a numbered seal, it shall be locked with a key” | § view source 2026-06-15 |
| 2.2Network isolation mandateIs internet/Wi-Fi/cellular connectivity legally prohibited on vote-casting equipment? | 1/1100.0% | This section directly prohibits wireless communications on voting machines during polling hours, which mandates network isolation from internet, Wi-Fi, and cellular connectivity on vote-casting equipment. The prohibition is explicit and applies to all machines purchased after July 1, 2007. “There shall be no wireless communications on election day, while the polls are open, between or among voting machines within the polling place or between any voting machine within the polling place and any equipment outside the polling place.” | § view source 2026-06-15 |
| 2.3Custody documentationIs full chain-of-custody documentation required and publicly available? | 0/10.0% | The statute requires that inoperative machines be placed in custody of authorized personnel but does not mandate full chain-of-custody documentation or public availability of such documentation. While custody transfer is specified, the section lacks explicit requirements for documentation of the chain of custody or its public disclosure. “Any machine so removed shall be placed in the custody of an authorized custodian, technician, general registrar, or electoral board representative.” | § view source 2026-06-15 |
| 2.4Tamper criminal penaltyAre there explicit criminal penalties for unauthorized device access? | 1/1100.0% | The statute explicitly establishes criminal penalties (Class 5 felony) for tampering with voting and registration equipment, electronic devices, and software used in the election process. This directly addresses unauthorized access to election hardware and related devices. | § view source 2026-06-15 |
Post Election Audit
55.6% · 5/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 3.1Mandatory auditIs a post-election audit legally required for every election? | 0/10.0% | The statute mandates risk-limiting audits but only for specific elections (federal House, General Assembly, local offices in non-statewide years) and only for randomly selected contested races, not every election or every race. It does not require audits for every election overall, failing to meet the criterion's requirement for mandatory audits of all elections. “In the year of a general election for members of the United States House of Representatives, a risk-limiting audit of at least one randomly selected contested race for such office” | § view source 2026-06-15 |
| 3.2Audit methodWhat audit method is mandated? | 4/580.0% | Virginia Code § 24.2-671.2 explicitly mandates risk-limiting audits (RLA) as the audit method. The statute defines RLA in detail, prescribes procedures for conducting them, and requires the State Board to conduct RLAs in specific election years and cycles. This directly satisfies the criterion for a risk-limiting audit audit method. | § view source 2026-06-15 |
| 3.3Audit triggers beyond mandatoryDoes law trigger additional audits on close margins or sworn challenges? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-15 |
| 3.4Public observation of auditAre parties, media, and citizens granted observer access to the audit? | 1/1100.0% | The statute explicitly requires procedures ensuring transparency and direct observation rights for members of the public, candidates' representatives, and political party representatives. Additionally, the statute mandates that all risk-limiting audits 'shall be conducted in a place and manner that is open to the public,' directly satisfying the criterion for observer access. “Procedures for ensuring transparency and understanding of the process by participants and the public, including guidelines for direct observation by members of the public, representatives of the candidates involved in the risk-limiting audit, and representatives of the political parties.” | § view source 2026-06-15 |
| 3.5Binding forceAre audit results legally binding on the final certified result? | 0/10.0% | The statute describes the mechanics of risk-limiting audits and what happens if a full hand count is triggered (it 'determines the outcome'), but it does not explicitly state that audit results are legally binding on the final certified election result or that they override the initial reported outcome. The section prescribes the audit process and mentions that a full hand count 'determines' the outcome, but stops short of establishing a clear legal mandate that binds the certification to the audit result. | § view source 2026-06-15 |
Software Verifiability
0.0% · 0/9| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 1.1Source code disclosureIs voting system source code legally accessible? | 0/50.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses disclosure requirements for political committee television advertisements under campaign finance law. It is entirely unrelated to voting system source code accessibility, which concerns the technical specifications and transparency of election machinery. The section does not address voting systems, source code, certification, or related technical transparency matters. | § view source 2026-06-15 |
| 1.2Reproducible builds requirementMust the binary that runs in production be reproducibly buildable from public source? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses the criminal prohibition on counterfeiting ballots and ballot-related materials. It is entirely unrelated to software reproducibility, reproducible builds, or the verifiability of binary code in election systems. The criterion concerns technical software engineering practices; this statute concerns ballot fraud penalties. | § view source 2026-06-15 |
| 1.3Pre-election binary commitmentIs the running binary cryptographically committed (hash published) before polls open? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses electronic voter registration application procedures, including verification of applicant identity, signature handling, and transmission timelines. It does not address software binaries, cryptographic commitments, hashing, or pre-election commitments of any running code. The criterion concerns election system software integrity; this section concerns only registration data collection and verification. | § view source 2026-06-15 |
| 1.4Election definition publicationAre ballot contests, layouts, and tabulation rules signed and published before polls open? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section concerns the election day page program for high school students, addressing their training, supervision, and permitted activities at polling places. It does not address ballot contests, layouts, tabulation rules, or the requirement that such materials be signed and published before polls open. | § view source 2026-06-15 |
| 1.5Post-election integrity checkDoes law grant a right to verify the actual running binary matches the committed one? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-15 |
Transparency Observation
0.0% · 0/8| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 6.1Domestic observer rightsAre party and civil-society observers given full procedural access? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 24.2-305 addresses the geographic composition and boundary definitions of election districts and precincts. It contains no provisions regarding observer rights, procedural access for party observers, or civil-society monitoring. The section is entirely concerned with cartographic and boundary requirements, not election observation policies. | § view source 2026-06-15 |
| 6.2International observer accessAre OSCE/EU/IFES international observers admitted by default? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-15 |
| 6.3Precinct-level results publication speedAre precinct-level results legally required to be published within 24h of poll close? | 0/50.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section establishes procedures for risk-limiting audits conducted after elections and prior to certification of results. It does not address precinct-level results publication timelines or speed of publishing election results after poll closure. | § view source 2026-06-15 |
| 6.4Public election event logIs a public, signed, append-only election event log legally required? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: Section 24.2-629 describes the State Board's approval process for electronic voting systems and the criteria for evaluating their technical and operational capabilities. It does not address public election event logs, append-only data structures, digital signatures, or any transparency requirements for recording election events during actual voting or tallying. The section focuses on equipment certification and testing rather than operational logging requirements. | § view source 2026-06-15 |
Vendor Independence
25.0% · 1/4| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 5.1Multi-vendor capabilityDoes law permit multiple certified vendors to operate in the same election? | 1/1100.0% | The statute explicitly permits different kinds (vendors) of electronic voting systems to be used within the same county or city, including within the same precinct, subject to State Board approval. This directly enables multi-vendor capability in a single election. “Systems of different kinds may be adopted for use and be used in different precincts of the same county or city, or within a precinct or precincts in a county or city, subject to the approval of the State Board.” | § view source 2026-06-15 |
| 5.2Open protocol standardsAre vote-format / device-protocol standards open and publicly documented? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses covered practices in elections (changes to election methods, district boundaries, polling places, and language access) and requires public notice and comment procedures or Attorney General certification. It does not address vote-format or device-protocol standards, open protocols, or vendor independence in voting systems. The statute is about procedural requirements for certain electoral changes, not technical standards for voting devices or formats. | § view source 2026-06-15 |
| 5.3Contract duration capAre vendor contracts capped in duration, preventing perpetual lock-in? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses disclosure requirements for campaign telephone calls and caller identification, including vendor identification. It does not address contract duration, vendor lock-in, or any temporal limits on vendor agreements. The statute is focused on transparency in caller identification, not on contract management or duration restrictions. | § view source 2026-06-15 |
| 5.4Source-code escrowIs source-code escrow with the state required as a condition of certification? | 0/10.0% | No matching sections in corpus. | no FTS match 2026-06-15 |
Voter Access
85.7% · 6/7| Datapoint | Score | Rationale & evidence | Source |
|---|---|---|---|
| 7.1Ballot secrecy guaranteeIs voter–ballot unlinkability legally guaranteed and enforceable? | 1/1100.0% | The statute explicitly makes it unlawful to hinder, intimidate, or interfere with a voter in casting a secret ballot, and provides enforcement mechanisms through arrest and jail commitment. This directly guarantees the legal protection of ballot secrecy and voter–ballot unlinkability by establishing criminal penalties for violations. “It shall be unlawful for any person to hinder, intimidate, or interfere with any qualified voter so as to prevent the voter from casting a secret ballot.” | § view source 2026-06-15 |
| 7.2Accessibility mandateAre accessibility standards (vision, motor, language) legally required at every polling place? | 5/5100.0% | The statute mandates that every polling place must have at least one voting system equipped for individuals with disabilities, explicitly requiring nonvisual accessibility for the blind and visually impaired, and alternative language accessibility. This covers vision, motor accessibility (through the equipped voting system), and language accessibility comprehensively across all polling places. “Provide for at least one voting system equipped for individuals with disabilities at each polling place, including nonvisual accessibility for the blind and visually impaired, in a manner that provides the same opportunity for access and participation (including privacy and independence) as for other voters; and Provide alternative language accessibility when required by § 203 of the Voting Rights Act of 1965” | § view source 2026-06-15 |
| 7.3Polling-place density floorIs there a legal floor on polling places per N voters or per geographic area? | 0/10.0% | No section in the FTS-surfaced candidates satisfies this criterion. Best signal: This section addresses precinct establishment and polling-place flexibility (allowing polling places within one mile of precinct boundaries when unavailable within the precinct), but it does not establish a legal floor or minimum requirement for polling-place density per number of voters or per geographic area. It permits exceptions to normal requirements but does not mandate minimum ratios. | § view source 2026-06-15 |