Ballot Processing and Election Security

Ballot Processing and Election Security

Protecting Democracy, Together

The Boulder County Clerk & Recorder’s Office is proud to serve our community by conducting secure, accessible, and accurate elections. We know that trust in elections is the foundation of a healthy democracy, and we are committed to earning and keeping that trust every day.

Why Election Security Matters

In recent years, elections across the nation have been the target of cyber threats and misinformation designed to sow doubt. In response, election security has become a top priority at the local, state, and national level. Boulder County Elections has long prioritized security, and we continue to strengthen our defenses with advanced technology, staff training, and strong partnerships.

Our Approach

We believe election security is strongest when it is transparent. That’s why we share as much information as possible – to give you a clear picture of the threats we face, the protections we’ve put in place, and the role you can play in keeping elections secure.

The Three Pillars of Security

Our election security program is built around three interconnected pillars: the Colorado Election Model, our strong partnerships, and our dedicated cybersecurity program. Together, these pillars provide a comprehensive and resilient approach to protecting your vote and voter information.

The Colorado Election Model

Colorado is recognized nationally for its secure and accessible election system. The model is built on transparency, multiple layers of security, and giving voters options for how they cast their ballot.

Key Features

  • Mail ballot delivery – Every registered voter receives a paper ballot by mail.
  • Multiple return options – Voters can return ballots by mail, at 24-hour drop boxes, or in person at vote centers.
  • Paper ballots – Every vote is cast on paper, creating a verifiable record.
  • Pre- and post-election testing and audit – Before every election, Boulder County conducts a Logic and Accuracy Test (LAT) to confirm proper configuration of voting equipment. After every election, Colorado conducts a statistically sound Risk-Limiting Audit (RLA) that confirms results match the paper ballots.
  • Bipartisan oversight – Both major parties are represented in key election processes, ensuring checks and balances.

Take a Closer Look at the Colorado Election Model

Boulder County offers same-day voter registration, allowing voters to register and cast a ballot on Election Day. This not only makes voting more convenient for new residents or those who have moved, but it also serves as a backup in the unlikely event of a disruption to the voter registration system.

The county participates in Colorado’s statewide voter registration database, SCORE, which is managed by the Secretary of State in partnership with counties. SCORE streamlines voter registration and sets consistent security standards across the state. Access to the system is tightly controlled: all users must verify their identity with multi-factor authentication, use individual accounts, and access the system only from county-approved devices.

To keep voter information accurate, Boulder County regularly updates the registration list using multiple data sources, including motor vehicle records, death records, change-of-address notifications, law enforcement records, and naturalization databases. Additionally, all systems accessing SCORE comply with state virus protection and malware detection standards, ensuring that voter registration data remains secure and accurate.

Boulder County Elections oversees strict testing and quality control of the ballot printing process. Our protocols go far beyond what is required by Secretary of State rule or state statute.
Examples of Ballot Printing Quality Control
Quality control processes that are conducted by the print vendor with oversight by Boulder County Election team members include (but are not limited to):

  • Ballot print alignment: Making sure all ballot styles are correctly printed, using a see-through mylar overlay to inspect every portion of the ballot and make sure all the text and target boxes are where they should be.
  • Checking fold lines: Making sure ballot fold lines are where they should be.
  • Verifying ballot styles: Making sure the right ballot styles are printed and that no files were mixed up/combined, etc.
  • Ensuring accurate ballot insertion: 2D bar codes are used on ballots and ballot envelopes to ensure that the ballot style inserted is correct for each voter.

This quality control work is done at the printer, prior to further testing of the ballots at our office through the ballot processing and voting system equipment.

Before every election, Boulder County Elections conducts a pre-election Logic and Accuracy Test (LAT). During the LAT, each type of ballot, including mail, in-person, and audio ballots, is tested to ensure that equipment correctly scans each ballot and accurately counts ballots of all types.

Every county in Colorado conducts a pre-election LAT, however, we are one of the only counties that uses live ballots during our LAT. This means we test vote on ballots pulled from the actual print run of ballots that will be mailed to voters, versus having the printer print a separate set of ballots to be used just for testing. We then run the ballots through our scanners and use our voting system software to ensure everything is calibrated correctly and tabulating properly.

The LAT is open to the public and conducted by a team of Elections staff and representatives from both major political parties.

“All-Options” Voting
Voters are sent a ballot in the mail, which they can return by mail, in-person at a Vote Center or election office, or to a 24-hour drop box (the mandatory minimum number of drop boxes is mandated in state election statute). If voters choose to vote in-person or need a replacement ballot for any reason, they may visit a Vote Center to vote up to and through Election Day.

Paper Ballots
Voters cast their vote either with a paper ballot (same as a mail ballot) or with a ballot marking device. Ballot marking devices are compliant with the accessibility requirements of the Help America Vote Act (HAVA) and the Federal Voluntary Voting Systems Guidelines (VVSG), and also can allow voters to vote a Spanish language ballot.

Importantly, these devices assist the voter with marking their choice but do not electronically record the votes. Each device has its own printer that prints the ballot once the voter has verified their ballot choices onscreen. This paper ballot is deposited by the voter into a secure ballot box before leaving the Vote Center. Only physical, paper ballots are used and counted in Boulder County.

Signature Verification
After a ballot is received in our Ballot Processing Center, the signature on the ballot envelope is reviewed and compared to the signature(s) on file in the voter’s registration record. If an initial reviewer can’t match the signatures, the ballot/envelope is sent to a bi-partisan team for review. If this team can’t confirm the signatures match, the voter is notified and has a window of time to “cure” (or fix) the issue in order to have their ballot counted. If a voter does not respond, the ballot is not counted, and the case is turned over to the District Attorney for investigation.

Ballots cast in a Vote Center do not go through the signature verification process. Instead, voters must show identification first, in order to vote in person.

Counting Your Vote
Once your signature has been verified, your mail ballot goes on to be removed from its envelope by a team that ensures your confidentiality is maintained. Mail ballots and ballots cast in person then go on to be scanned by our voting machines and counted.

Vote Center Security
Each location hosting a Vote Center provides access to secure rooms for voting equipment. All critical equipment is secured with chain-of-custody seals and systematically tracked. After hours, the rooms are securely locked and voting equipment is sealed and stored to ensure election integrity.

Ballot Drop Box Security
Each 24-hour ballot drop box is under 24-hour video surveillance from the time the box opens for voter ballot return until it is closed at the end of an election. All boxes remain locked throughout the election period, accessed only by bipartisan teams for ballot collection which occurs on a regular schedule during an election. Additionally, all ballot processing areas of our office are under surveillance 24-hours a day.

Bipartisan Teams
By state law, Vote Centers are run by bipartisan election judges. Bipartisan election judges also handle ballot collection from ballot boxes and 24-hour drop boxes. They also handle all ballot adjudication, working together to understand a voter’s intent when a ballot is poorly marked or contains corrections.

Chain-of-Custody
To make sure no tampering occurs, chain-of-custody is carefully documented and maintained for equipment used at Vote Centers, including laptops (used to access the Secretary of State’s voter database, assign vote credit, and print ballots), ballot marking devices, and printers.

Additionally, chain-of-custody is also documented and maintained for ballot boxes used at Vote Centers and containers used to collect ballots from 24-hour drop boxes.

Our voting system is the equipment and software used to create ballots, capture votes, and tabulate results. The voting system we use is­­ called Dominion, one of the Colorado Voting Systems selected by the state after a rigorous public input process. The use of uniform voting systems across the state improves sustainability, service, collaboration, and support for counties and voters.

The voting system is not connected to the internet and there are no updates to the voting system once the trusted build is applied. The trusted build is the vendor software that is tested and certified by the Secretary of State’s office for election use.

Boulder County protects its voting systems with strict physical, technical, and procedural safeguards. All equipment is housed in secure, badge-controlled facilities with 24/7 video monitoring, and only staff with a defined need are granted individual user credentials that meet state standards for password security. Voting system files are regularly backed up and stored securely, with redundant hardware in place to prevent data loss. In addition, annual criminal background checks are required for all staff who access the voting system or voter data, ensuring the highest level of integrity and accountability.

To ensure voting system tabulation accuracy, a statewide risk-limiting audit is conducted after each election. This process compares a sample of hand marked paper ballots to the digital record of the voting system’s reading of those ballots.

How it Works

The tabulation system creates a Cast Vote Record (CVR) – a digital record of each recorded vote on each ballot at the time the voting system reads the ballot. After ballot processing is initially finished, we submit our CVR to the Secretary of State’s office. They use a random seed (generated by rolling 20 ten-sided dice during a public meeting) to generate a list of unique individual ballots for each county to use in the audit. These ballots are retrieved by county staff, a process overseen by a bipartisan audit board. The audit board then enters the votes from these ballots into the Secretary of State’s open-source RLA tool to be compared with the CVR. If any differences are found, additional audits are conducted until the results meet the required confidence level. This process ensures, with a high degree of certainty, that the final election outcomes are correct.

Every county in Colorado participates in the RLA, except for small counties that count their ballots by hand.

To learn more about the Colorado Risk-Limiting Audit, visit the Secretary of State’s Audit Center, read this Politico story on the implementation of RLAs, or check out this Colorado Public Radio story.

Leveraging Partnerships

Boulder County Elections works closely with local, state, and national partners to share expertise, strengthen defenses, and stay ahead of emerging threats. From our own Information Technology Department to outside cybersecurity consultants, statewide associations, and national security networks, these partnerships help ensure our elections remain secure, accurate, and resilient.

Key Features

  • Local collaboration – Boulder County’s IT Department works with Elections staff and Rule4 to strengthen cybersecurity, monitor systems daily, and train employees to recognize threats.
  • Expert guidance – Rule4, a nationally recognized cybersecurity firm, has partnered with Boulder County since 2008, providing strategic advice, training, and on-call incident response support.
  • Statewide support – The Colorado Secretary of State provides annual security trainings and hosts preparedness exercises, while the Colorado County Clerks Association shares best practices through conferences with national experts.
  • National intelligence and support – Through membership in the Multi-State Information Sharing and Analysis Center (MS-ISAC), Boulder County receives 24/7 threat monitoring, incident response support, and access to a nationwide network of cybersecurity experts and resources tailored to state and local governments.
  • Shared defense – These partnerships ensure Boulder County benefits from the latest expertise, tools, and coordinated strategies to protect elections from evolving threats.

Cybersecurity Program

Building on the foundation of the Colorado Election Model and our strong partnerships, Boulder County has developed its own tailored cybersecurity program to address local needs. Launched after a comprehensive risk assessment and expert guidance from national, state, and local partners, this program is designed to strengthen our defenses against evolving cyber threats. By continually evaluating risks, adopting new technologies, and following a risk-mitigation approach, we work to ensure that our systems and voter information remain secure and resilient.

Key Features

  • Foundations for security – Boulder County’s cybersecurity program is anchored in Operational Guiding Principles (confidentiality, integrity, availability, resiliency, stewardship, and collaboration) and utilizes the NIST Cybersecurity Framework to structure risk mitigation across its systems and operations.
  • Identifying and addressing risks – The county has identified key risk areas (awareness/culture, equipment and data, external threats, incident response, and contingency and recovery) and implemented targeted mitigation strategies (e.g. policy development, training, intrusion detection, vulnerability testing, redundant systems).
  • Strong cybersecurity controls – Cybersecurity controls include continual phishing exercises, signed staff agreements, intrusion monitoring, application of patches and updates, limited data access, multi-factor authentication, and strict access privileges and review.
  • Prepared for the unexpected – A robust incident response and recovery posture is maintained with regularly tested response protocols, tabletop exercises with partners, and contingency plans so the elections operation remains resilient even if part of the system is disrupted.

The Voter’s Role in Election Security

As a voter, you play an important role in keeping Colorado’s elections secure. You can help protect the integrity of our elections by knowing your rights, getting involved in the process, and becoming a savvy voter.

Key Features

  • Keep your voter information current – Update your registration whenever you move so you get your ballot on time, and add your email for important election updates.
  • Track your ballot – Update your voter registration with an email address and we automatically enroll you in BallotTrax. Or Sign up separately for BallotTrax to get text, email, or phone alerts when your ballot is mailed, received, or if there’s a problem.
  • Make a voting plan – Know election dates, follow ballot instructions carefully, sign your envelope, and return your ballot securely at a drop box, Vote Center, or by mail.
  • Know your rights – We believe that every eligible voter has the right to vote, and we work to create a voting experience that is inclusive and welcoming. If you’re in line by 7:00 p.m. on Election Day, you can vote. Results aren’t final until polls close – so make sure your vote is counted.
  • Fight misinformation – Always check information you read on social media about elections against government websites, such as our website or the Colorado Secretary of State. Watch for copycat websites, question unverified claims, and contact our office if in doubt.

Elections Videos

Your Signature Makes Your Vote Count
(90 seconds)

Mail Ballot Security
(2 minutes)

Elections Tour – Short Version
(90 seconds)

Elections Tour – Extended
(5 minutes)

Services at a Vote Center
(1 minute 45 seconds)

Contact Us

Elections Division

7:30 a.m. - 5 p.m.
Monday - Thursday
Closed Fridays

Boulder County Elections Homepage
vote@bouldercounty.gov

Phone: 303-413-7740
Fax: 303-413-7728

Office Location and Mailing Address

1750 33rd St., Suite 200
Boulder, CO 80301

Boulder County Elections logo

Connect With Us