Last Updated: August 24, 2026
Ballotly is a multi-tenant SaaS application. We enforce strict PostgreSQL database constraints and Row Level Security (RLS) policies to keep every organization's data completely isolated from others.
We decouple voter participation logs (needed to enforce one-vote rules and prevent duplicate submissions) from the actual candidate votes (the selections made on the ballot). Organizers can audit who has voted and when, but can never view a breakdown linking an individual voter to their chosen candidates.
Voter registries, candidate names, audit logs, and transaction details are retained only to support the lifecycle of your elections and to satisfy billing verification purposes. You may delete draft or closed elections from your workspace at any time.