Electronic voting software for member organizations

Ballots are encrypted at submission through a centralized cryptographic architecture built on the same principle as a blockchain. A cast ballot cannot be read or altered afterwards, including by Orgo engineers with direct access to the database.

Each voter receives an integrity hash when they cast their ballot. They use it afterwards to confirm their vote is recorded and valid. Any tampering with the underlying database invalidates the check, so verification tests the record rather than restating a promise.

Administrators see which eligible voters have already voted, so they can chase turnout before the window closes. They never see how anyone voted. The voter list itself can be hidden when even turnout should stay private.

The voting system has been externally audited. Orgo runs on AWS in Frankfurt and platform data does not leave the European Union.

Encrypted anonymous voting and non-anonymous polls are two distinct formats. A statutory election uses the encrypted format. A sentiment check, such as picking a date for the next assembly, uses the open one, where responses are attributable.

A vote is restricted to one of four audiences:

• The entire organization
• Any group: a chapter, a parent chapter, a board, or a committee
• A role-based group that populates itself, for example every chapter president
• A private, manually curated list of named voters

A role-based group fills itself from role data. When someone gains or loses a role, their place in that group changes with it. The electorate for a board vote is therefore correct on the day the vote opens, without anyone rebuilding it from a spreadsheet.

Membership status governs platform access. A lapsed member loses access and is routed to a payment screen, so they cannot reach an open ballot until the fee is settled. Member types, such as full member against associate or observer, define the groups a vote is scoped to.

Voting happens inside an authenticated member account, not through a link that can be forwarded. One account casts one ballot per vote.

A vote can be restricted to a named list built for the occasion, such as an eleven-person board or an election commission. Members outside that list never see the vote at all.

Votes are built in draft and stay invisible until published. Publishing notifies every eligible voter by email and mobile push notification. An open vote is flagged with a marker in the interface so it is not missed among other activity.

Each vote defines its own window:

• A start date and time, an end date and time, or both
• Multi-day windows for an electorate spread across countries
• Manual close by an administrator
• Automatic close once every eligible voter has voted

Eligible voters receive a reminder before a scheduled vote opens.

One vote can carry several questions, with one option chosen per question. A general assembly agenda with four resolutions runs as a single ballot instead of four separate votes.

Orgo counts by popular vote today. Single transferable vote arrives in September 2026.

Single transferable vote is on the roadmap for release in September 2026, for organizations whose statutes require a proportional method to fill several seats at once. Voters rank candidates in order of preference instead of picking one, and the count transfers surplus and eliminated preferences until every seat is filled.

Organizations whose statutes already mandate this method should confirm timing with us before committing to an election date.

Every member sets a time zone at first login. Voting windows, reminders, and closing times display in that time zone, so an international electorate reads the same deadline correctly and nobody misses a vote to a conversion error.

Members choose how they receive vote notifications, by push, by email, or both, alongside their preferences for discussions, events, and tasks. Organizations set the defaults.

The vote projects full screen for an in-room assembly. Participant names turn green as each person votes, so the chair reads live turnout from the front of the room. Results reveal when the vote closes.

A vote can run inside an event and surfaces in the event app during a congress or general assembly. Delegates vote from the same app they used to register and check in, and stay signed in throughout.

Results update in real time as ballots arrive. Administrators choose whether results display live or stay hidden until the vote closes, which is the difference between a working session and a contested election.

Members vote from the web platform or the Orgo mobile app on iOS and Android. There is no separate voting product to procure, no credentials to distribute, and no attendee list to re-import before the assembly opens.

Past votes and their results stay in a permanent archive. When a member asks how a decision was taken, or how a person came to hold a position, the answer is the vote record rather than a recollection.

Results download from the platform for the minutes, the annual report, or a file kept for a supervisory body.

The vote sits beside the member register that defined the electorate, the event that hosted the assembly, and the documents signed around it. Nothing has to be reconciled afterwards between a separate voting tool and the membership database.

Orgo logs profile changes, data exports, and report generation with the user, timestamp, and IP address. The member data that determined eligibility carries the same trail as the vote it fed.

Every label in Orgo is text your organization controls. If your statutes say ballot, resolution, or motion rather than vote, the interface says that instead, in your own language.

Admin roles exist at organization, parent-chapter, and local-chapter level, each isolated to that level's data. A regional board therefore runs its own vote without a national administrator setting it up on its behalf. Role names are yours to define and map onto documented permission levels.

Orgo counts popular votes today, with single transferable vote arriving in September 2026. Proxy and delegated voting are not available. Orgo does not certify the legal validity of a vote under any national association law. The platform produces the record, an anonymity guarantee, and a verification mechanism; your statutes govern what that record means.