Voter.Care Verification Badges
An embeddable badge voters and poll owners can click to independently verify the accuracy, privacy, and integrity of a specific poll — backed by real cryptographic evidence, not marketing copy.
Like an SSL padlock — but for the integrity of your poll
When you see the padlock icon in your browser, you know the connection is encrypted — and you can click it to see the certificate that proves it. A Voter.Care verification badge does the same job for a poll: it signals that this specific poll was conducted with independently verifiable cryptographic integrity, and it links directly to the evidence so anyone can check.
Generic web trust seals have been criticised for linking to vague reassurance copy rather than actual evidence. A Voter.Care badge can link to real proof precisely because the underlying system generates that proof as a natural by-product of the voting process itself — something most competitors in this space cannot offer because they don't have the cryptographic infrastructure to back it up.
Poll owners embed the badge on their voting platform or results page. Voters who click it see that specific poll's own verification record — generated from the votes actually cast, not assembled after the fact.
Two products, two distinct badges
Each badge is specific to the product and poll. The guarantees are different because the cryptographic techniques applied are different — and the badge makes that difference visible.
Confirms that this poll used zero-knowledge eligibility proofs, nullifier-based double-vote prevention, and Benaloh-challenge vote verification — and does not assert in-person identity proofing.
If anonymous polling is selected then nobody can identify which option you chose — not even the platform operator. Your eligibility was proved without storing your name or any personal data. You can independently verify that your vote was recorded exactly as you cast it, at any time during or after the poll.
Your results come with a cryptographic proof anyone can check — not just your word. The count is tamper-evident: any manipulation of the tally would be detectable by independent audit. You have a credible, verifiable answer to any challenge to the integrity of the outcome.
Confirms in-person identity proofing, maker-checker credential issuance, threshold trustee decryption, and a published cryptographic tally proof — the full gold-standard stack.
Your identity was verified to the highest standard, but the voting system holds no record linking you to your vote. You can re-cast privately to override any coerced ballot. No single person — trustee, operator, or administrator — can read how you voted or change the result. The outcome is independently verifiable by anyone who downloads the published proof.
The published cryptographic proof satisfies the UK Code of Practice's “responsible person” security assessment requirement directly — with documented, verifiable evidence rather than assertions. Independent auditors can verify every aspect of the election without accessing any voter's personal data. No single trustee or operator can manipulate the result, making the outcome defensible to regulators, courts, or any challenger.
How the badge evidence is generated
The verification data the badge links to is not assembled after the fact. It is produced automatically and continuously as votes are cast — as a direct output of the cryptographic process.
Each vote generates a ZK proof and a nullifier
When a voter casts a ballot, their device produces two things: a zero-knowledge proof that they hold a valid credential, and a nullifier — a unique token derived from their secret that proves they voted without revealing who they are. Both are published to a public record immediately.
Encrypted ballots accumulate in the public tally
Each vote arrives as an encrypted ballot. Using homomorphic arithmetic, the system adds it to a running encrypted total — without decrypting it or any previous vote. The accumulating encrypted tally is public throughout the election window.
At close: nullifier deduplication and proof verification
When the voting window ends, the complete nullifier set is checked for duplicates (detecting any double-vote attempts), and every ZK proof is verified (confirming every counted vote was validly cast). These checks are run against the public record — independently verifiable by anyone.
Trustees jointly decrypt with a published proof (Votercare Elect)
For Votercare Elect, the encrypted tally is only decryptable by a quorum of independent trustees acting together. Each trustee produces a partial decryption and a cryptographic proof that their partial decryption is correct. These proofs are combined and published — mathematically demonstrating the tally is accurate without any single trustee being able to alter it.
The proof bundle is published and linked from the badge
The final output — nullifier set, ZK proofs, encrypted tally, and (for Votercare Elect) trustee decryption proofs — is published as a downloadable audit bundle. The badge links to this bundle. Any voter, auditor, or journalist can download it and run the verification independently, without trusting Voter.Care or the poll organiser.
What makes it a real trust signal
Three design requirements that distinguish this badge from the decorative trust seals that have attracted criticism elsewhere.
Poll-specific, not company-wide
Each badge carries a unique identifier for that specific poll. Clicking it shows the actual cryptographic evidence for that poll — not a generic company page. The evidence is different for every poll because it is generated by the votes cast in that poll.
Live-fetched, not a static asset
The badge is served dynamically from Voter.Care's backend, tied to a verified poll ID. It visibly breaks or shows "Unverified" if detached from a genuine, live poll record — so no one can screenshot it and paste it onto an unverified ballot.
Plain-language explanation included
The linked verification page explains in plain English what the badge does and does not guarantee for that specific poll — consistent with the principle of meeting the intent of transparency, not just asserting it.
The badge cannot be detached from a genuine poll
The badge is a live-fetched widget, not a static image file. It is cryptographically tied to a verified poll ID in Voter.Care's backend. If anyone attempts to copy the badge image and paste it onto a poll not running through Voter.Care, it will display as “Unverified” — because the verification record it references either does not exist or does not match. Screenshots and static copies cannot carry the trust signal forward.
Badges ship with both products
Verification badges are included in both Votercare Poll and Votercare Elect from launch. If you'd like to be notified when they're ready, or discuss your specific use case, get in touch.