The chain of custody in elections is the documented paper trail that follows every ballot from the moment a voter releases it until results are certified and archived. Each transfer, each opened container, and each person who touches a ballot is recorded on official logs with timestamps, seal numbers, and signatures. When that trail holds together, officials can prove no unauthorized additions, removals, or alterations occurred. When it breaks, containers get quarantined, ballots get set aside, and custodians can face federal criminal charges carrying up to five years in prison.
The Documents and Tools That Make Custody Work
The system rests on three physical components working together: tamper-evident seals, secure containers, and the chain of custody log.
Tamper-evident seals carry unique serial numbers and attach to ballot transport containers so any attempt to open one breaks the seal in a visible, irreversible way. The containers themselves are typically heavy-duty lockable boxes, and officials verify each is empty and undamaged before ballots go in.
The chain of custody log is the traveling record. Issued by the local election authority, it stays with each batch of ballots and captures the seal number, the container ID, the timestamp, the location of origin, and the names and signatures of everyone involved. Every entry functions as a sworn record that the materials were secured at that moment. If a seal is found broken, or a serial number does not match what the log says, the entire container is set aside and flagged for investigation. No ballots from that container get counted until the discrepancy is resolved.
The completed forms are stored in a separate secure pouch attached to the container so they travel with the ballots at all times. Some jurisdictions print these documents on specialized paper to prevent duplication or alteration. Long after election night, these logs let officials trace the full life of each ballot batch during canvassing and any recount.
Who Handles Ballots and Under What Rules
The most important procedural safeguard is dual custody. At least two people, typically from different political parties, must be present whenever ballots are moved or accessed. This bipartisan pairing means no single individual ever has unsupervised access. The teams keep visual contact with ballot containers throughout handling, and the same rule applies to programming voting equipment and transporting electronic media.1U.S. Election Assistance Commission. Voting System Security Measures
Personnel requirements vary by state but commonly include background screening and a formal oath of office before workers begin their duties. Violating that oath can lead to dismissal and criminal prosecution. Each person on a bipartisan team is effectively watching the other.
Poll watchers and legal observers add an external layer. They cannot touch ballots, but most states let them stand close enough to see seal numbers and watch officials fill in the custody log. Observers typically must be registered voters who have completed training on their rights and limitations.
How Ballots Move From Voter to Counting Facility
The journey looks different depending on where the ballot enters the system.
Drop Box Collection
Drop boxes have their own custody rules because they sit unattended for extended periods. The Election Assistance Commission recommends that only designated collection teams or election officials hold the keys or combinations. Bipartisan teams of at least two workers drive established routes on a regular schedule to retrieve ballots.2U.S. Election Assistance Commission. Ballot Drop Box
Each collection requires a fresh log entry. Team members sign the log and record the date, time, the seal number they found when they arrived, and the new seal number they apply after locking the box back up. All collection bags and boxes are numbered so supervisors can confirm every one was returned at the end of a shift.2U.S. Election Assistance Commission. Ballot Drop Box
On election night, bipartisan teams must be stationed at every drop-off location precisely when polls close. They identify any voter still in line, ensure those voters can deposit their ballots, lock the drop slots on 24-hour boxes, transfer remaining ballots to secure transport containers, and return everything to the counting facility with completed custody forms.2U.S. Election Assistance Commission. Ballot Drop Box
Transport and Storage
Once ballots are sealed and documented, transport teams move them to a central counting facility. Containers stay sealed throughout the journey, and many jurisdictions track the vehicle by GPS or radio communication to maintain a timeline for official records.
At the receiving facility, a separate team takes custody and immediately checks every seal against the log from the point of origin. If a seal number does not match, or a seal shows signs of tampering, the discrepancy gets documented and reported to the chief election official before anything else happens. Once seals are verified, the receiving officials sign off, completing that leg of the chain.
Inside the facility, ballots go into restricted storage, often steel-mesh cages or climate-controlled vaults. Access is limited to authorized personnel and monitored by around-the-clock surveillance cameras. Entry logs record who goes in, when, and for how long. These protections stay in place through the final canvass and the full retention period.
Mail Ballots and Reconciliation
Mail and absentee ballots spend time in the postal system outside the direct control of election officials, which creates a distinct custody challenge. The chain begins when the office sends a ballot to a voter and picks up again when the completed ballot comes back.
The EAC recommends that election offices reconcile the number of ballots mailed against the number of requests received and keep a daily count of ballots returned in person, from a drop box, or through the mail. That running tally establishes how many ballots are in the office’s possession at any given moment.3U.S. Election Assistance Commission. Chain of Custody Best Practices
Once mail ballots arrive, officials check sealed envelopes and verify signatures where required. Spoiled, defective, or incomplete ballots are separated and documented, and voters are contacted for corrections when state law allows. Ballots that pass screening are sorted into secured containers sealed with tamper-evident seals. Any time those containers are opened, a log entry must record the date, time, the reason for access, and the signatures of at least two people.3U.S. Election Assistance Commission. Chain of Custody Best Practices That dual-signature requirement is where most mail ballot custody failures surface during audits.
Ballot Reconciliation
Reconciliation is the math check that ties the whole chain together. Does the number of ballots cast match the number of voters who checked in? If those numbers do not align, something went wrong, and the custody records become the tool for figuring out where.
Throughout election day, poll workers compare voter check-in totals against ballots cast. After polls close, they document the total number of ballots on each voting machine using opening and closing tapes, then account for every ballot by category: voted, unvoted, provisional, spoiled, and emergency. Mail ballots surrendered or returned at the polling place are counted separately.4U.S. Election Assistance Commission. Ballot Reconciliation – Election Day
The pre-election count matters too. Before polls open, officials verify that the number of blank ballots shipped to each polling place matches the documentation from the elections office. After the election, the total of all ballot categories should equal that original shipment number. Discrepancies get flagged and investigated using the chain of custody logs to trace where ballots may have been miscounted, mislabeled, or lost.
Electronic Media and Software Integrity
Physical ballots are only half the custody picture. Removable electronic media like memory cards and USB drives carry vote totals from precinct scanners to the central election management system, and they need their own chain.
Bipartisan teams of two program voting equipment using storage devices dedicated solely to data transfer. After programming, officials affix tamper-evident seals to the equipment and document every seal number. When polls close, workers verify that memory cards have been properly secured, then place them in sealed containers alongside the paper ballots for transport back to the elections office.1U.S. Election Assistance Commission. Voting System Security Measures At the receiving end, officials verify the equipment was safeguarded during transit, return it to secured storage, and complete the log.
A key cybersecurity practice: never insert rewritable media that has been connected to a public network into a voting system. When transferring results to an internet-connected computer for reporting, officials should use write-once media like a properly formatted CD-ROM or a single-use USB drive.3U.S. Election Assistance Commission. Chain of Custody Best Practices
Hash Validation
Before voting machine software is installed, officials can verify its integrity through hash validation. A hash value is a digital fingerprint, a unique string of characters generated by running a mathematical function on a computer file. If even a single byte of the file changes, the hash value changes with it. Officials calculate the hash of the software they received and compare it against the value provided by the developer or an independent testing lab. A match confirms the file has not been altered; a mismatch means the software should not be installed.5U.S. Election Assistance Commission. What Is Hash Validation and Why Should Election Officials Care
One limitation: a hash check confirms a file is unchanged, but it does not verify where the file came from. The comparison value must come from a trusted source. Hash validation and physical tamper-evident seals work in parallel, one protecting the digital layer and the other protecting the physical.
What Happens When the Chain Breaks
The immediate operational consequence is quarantine. A broken seal, a mismatched serial number, or a missing signature causes officials to isolate the affected container and open an investigation before any ballots inside are counted.
In court, ballot custody challenges face a high bar. Courts typically require evidence of systemic failure or actual fraud before invalidating ballots, largely because throwing out votes directly disenfranchises the people who cast them. A missing signature on a log, standing alone, generally is not enough.
Federal criminal law is where the sharpest consequences live. Knowingly depriving voters of a fair election process through fraudulent ballots or registration applications carries up to five years in prison.6Office of the Law Revision Counsel. 52 USC 20511 – Criminal Penalties Under the general federal sentencing framework, felony-level fines can reach $250,000 for individuals.7Office of the Law Revision Counsel. 18 USC 3571 – Sentence of Fine Destroying or concealing election records carries up to three years, and a custodian convicted of that offense forfeits their position and is disqualified from future federal office.8Office of the Law Revision Counsel. 18 USC 2071 – Concealment, Removal, or Mutilation Generally Even failing to preserve election records for the required retention period is a separate crime punishable by up to one year in prison and a $1,000 fine.9Office of the Law Revision Counsel. 52 USC 20701 – Retention and Preservation of Records and Papers by Officers of Elections
The specific mechanics you encounter at your polling place or drop box are set by your state legislature, built on top of that federal baseline.10Legal Information Institute. States and the Elections Clause
Audits, Certification, and the 22-Month Record
The custody chain does not end when votes are counted. A post-election tabulation audit involves hand-counting a sample of paper ballots and comparing the results to the originally reported totals. Before a single ballot in the sample is touched, auditors verify the chain of custody documentation: seal numbers, the total number of ballots expected, confirmation that authorized personnel retrieved the sample, and that all tabulation records are intact.3U.S. Election Assistance Commission. Chain of Custody Best Practices After the count, any discrepancies between the hand tally and the machine count are documented, and all ballots are returned to their secured containers, resealed and witnessed by authorized personnel.
Risk-limiting audits, which a growing number of states now require, depend especially on strong custody records. The statistical method rests on the assumption that the collection of ballots being sampled is complete and unaltered. If custody records cannot support that assumption, the audit’s conclusions are meaningless.
The canvass is where officials aggregate and confirm every valid ballot cast across mail, early voting, election day, and provisional channels. They reconcile ballot totals one final time using the same documentation that has been building since before the election. The EAC describes documented chain of custody, alongside data verification procedures and certified tabulation technology, as core protocols for data reliability throughout this process.11U.S. Election Assistance Commission. Election Results, Canvass, and Certification
Certification is the final step. Officials issue a written statement attesting the results are a true and accurate accounting of all votes cast. At that point, the chain of custody shifts from an active operational tool to an archival record.
Federal law requires every election officer to preserve all records related to a federal election for twenty-two months after election day. That covers ballots, chain of custody logs, registration records, and any other documentation connected to voting. If a state designates a separate custodian to store these records, the preservation duty transfers to that custodian.9Office of the Law Revision Counsel. 52 USC 20701 – Retention and Preservation of Records and Papers by Officers of Elections The twenty-two-month window is what keeps records available for any legal challenge, recount, or federal investigation that arises after the results are official.