However, implementing internet voting requires much more than a technology platform.
It requires planning, specific security standards, a clear operating model and the ability to build trust among all actors in the process.
This guide explains what internet voting is, in which contexts it is most effective, what requirements a serious implementation must meet and what steps to follow to carry it out successfully.
What is internet voting
Internet voting is a form of remote electronic voting in which the voter accesses a secure platform from their computer, tablet or phone, authenticates, selects their choice and casts their vote in encrypted form. The entire process takes place within a voting period defined by the electoral authority.
Unlike in-person electronic voting, where the citizen goes to a polling station and uses a physical terminal, internet voting eliminates the geographic barrier.
This makes it an especially valuable tool in contexts where in-person requirements limit participation.
In which contexts is internet voting used
Internet voting has found concrete applications in scenarios where in-person logistics are insufficient or disproportionate to the objective of the process.
Diaspora elections
Facilitating the participation of citizens residing abroad is one of the most relevant use cases. Postal voting has time and reliability limitations, and setting up polling stations in consulates does not always meet demand.
Internet voting offers a complementary channel that allows participation without depending on physical infrastructure abroad.
Internal processes of organizations
Political parties, unions, professional associations, universities and civil organizations hold internal elections frequently. Setting up complete in-person logistics for these processes is usually costly and results in low participation.
Internet voting allows members to vote from wherever they are, increasing the representativeness of the results.
Referendums and public consultations
When the goal is to learn citizens' opinion on a specific issue, internet voting can work as an additional channel to in-person voting, extending the reach of the consultation and facilitating the participation of geographically dispersed populations.
Accessibility
For voters with reduced mobility or who live in hard-to-reach areas, internet voting represents a way to exercise their right to vote on equal terms.
Security requirements for internet voting
Security is the factor that determines whether an internet voting implementation can be considered viable.
Any body or institution evaluating this modality must verify that the solution meets a set of non-negotiable requirements.
Robust voter authentication
Only eligible voters should be able to access the system and cast a vote. This involves identity verification mechanisms that go beyond a username and password: digital certificates, two-factor authentication or biometric systems, depending on the level of security the process demands.
End-to-end encryption
The content of the vote must remain secret from the moment it is cast until the count. End-to-end encryption guarantees that the vote is encrypted on the voter's device and only decrypted for the final count. No intermediary, including the system provider, should be able to learn the content of an individual vote.
Vote integrity
Once cast, the vote cannot be altered, modified or deleted. The digital signature of each ballot by the voter is a key mechanism to guarantee that the vote is counted exactly as expressed.
Uniqueness
Each voter can only vote once. The system must have mechanisms to detect and prevent duplicate votes or fraud attempts, without compromising ballot anonymity.
Non-traceability
It must be impossible to link the cast vote to the voter's identity. This property is fundamental to preserving ballot secrecy in an environment where, unlike in-person voting, there is no physical booth separating the voter from their ballot.
Verifiability
The system must offer individual verifiability, where the voter can confirm that their vote was correctly received, and universal verifiability, where any auditor can check that all votes were included in the final count without knowing the content of each one.
Comprehensive auditability
All relevant actions and events in the process must be recorded in cryptographically protected logs. These records enable complete technical audits before, during and after the election, without compromising voter privacy.
Resilience and contingency
The system must be designed to operate without interruptions, with the ability to respond to attacks, technical failures or demand spikes. A robust contingency plan is an integral part of any serious internet voting implementation.
Operating model: what organizations need beyond technology
A secure platform is a necessary but not sufficient condition. The success of an internet voting process depends largely on the operating model that accompanies it.
Definition of roles and responsibilities
It is essential to clearly establish who administers the system, who supervises the process, who has access to what information and who can audit each stage. The electoral authority, technical administrators, auditors and observers must have defined roles with precise boundaries.
Auditable public ceremonies
The key moments of the process, such as the generation of cryptographic keys, the loading of the electoral roll or the closing of voting, must be carried out as public ceremonies in the presence of overseers and observers. This brings to the digital environment the same logic of public control that exists in in-person elections.
Voter communication
Voters need to understand how the process works, how to access the system and what security measures they should take on their end. A clear communication campaign that includes warnings about phishing and credential protection is an integral part of the implementation.
Support during the process
Having a voter support channel and a technical incident response team ensures that problems are resolved in real time without affecting the continuity of the process.
Invote: COMITIA's internet voting platform
Invote is COMITIA's internet voting solution, designed to meet the security and transparency standards that formal electoral processes demand. Its architecture incorporates end-to-end encryption, where the vote is encrypted on the voter's device and remains encrypted until the final count. Each vote is validated with a digital signature to ensure its integrity and authenticity.
The system implements advanced authentication mechanisms to securely verify the voter's identity, and offers individual and universal verification features that allow both the voter and auditors to confirm the correct tallying of ballots.
All activity is recorded in cryptographically protected immutable logs, facilitating exhaustive audits by independent experts and observers.
Invote operates under the framework of COMITIA's ISO/IEC 27001 and ISO/IEC 27701 certifications, which back the security and privacy management of the process.
In 2025, Invote was used in the Argentine province of Tierra del Fuego for the jurisdiction's first internet election, combined with BUE for in-person voting in the same electoral process. Invote has also been deployed in electoral processes in other countries. In Spain, it was used in the elections of the Chambers of Commerce of Catalonia (with an electoral roll of roughly 790,000 voters), the Valencia Bar Association and the Spanish Multidisciplinary Melanoma Group. In Canada, it was deployed in the municipal elections of Greenstone. And in the United Arab Emirates, it was used in 2023 for the Federal National Council elections.
How to plan an internet voting implementation
For organizations and governments considering internet voting, experience shows that a gradual approach produces the best results.
The first step is context analysis: assessing the current legal framework, the electoral culture of the jurisdiction and the available technological capabilities. Not all regulations allow remote voting, and in some cases it is necessary to promote specific reforms or regulations before moving forward.
The second step is a controlled pilot. Starting with a smaller-scale process allows familiarity with the technology, adjustment of operating procedures and lessons learned before a large-scale implementation.
The third step is training. Technical teams, electoral authorities and voters must understand the system and its controls. Training is not an add-on: it is a central part of the process.
The fourth step is independent auditing. Hiring external experts to audit the system and processes before the election reinforces trust and helps identify improvements.
Internet voting, implemented with the right standards, can simplify electoral logistics while strengthening citizen participation. The key is for the technology to operate within a framework of security, governance and transparency that sustains the legitimacy of the process.