Are the electoral roll and the ballot box kept separate?
Are the servers operated by POLYAS?
Are the servers operated in Germany?
Can the certification report or the certificate be viewed publicly?
Can you name the ISO27001 certificates of your service providers?
Do the POLYAS servers operate in a demilitarized zone (DMZ)?
Do you perform hacker tests or security audits, and do you close security vulnerabilities?
How are votes that have been cast encrypted in the database?
How does POLYAS ensure that online voting is secure?
How does POLYAS ensure that there are no votes in the ballot box when the election starts?
Is the system monitored to register and respond to targeted attacks?
Yes. The POLYAS voting system has a monitoring and alarm system.