How to run a board election online without losing your members' trust

Every year, associations and professional bodies run board elections the hard way: paper ballots at an AGM, a show of hands, or — increasingly — a link to a generic survey tool emailed to the membership list. The first two limit participation to whoever is in the room. The third is worse than it looks, because a survey tool answers a different question than an election does. A survey asks "what do people think?" An election asks "what did our eligible members decide, and can we prove it?"

That second half — can we prove it — is where online elections are won or lost. When the result is announced, the losing candidate's supporters will ask questions. Could someone vote twice? Could a non-member vote? Could whoever ran the system see individual ballots, or worse, edit them? If the honest answer to any of those is "we're not sure," the result is contestable, and a contestable election costs an organisation far more than the platform ever would.

The requirements that actually matter are straightforward to state: only verified, eligible members can vote; each member votes exactly once; nobody — including the administrator — can link a ballot to a person; and the tally must be auditable after the fact without breaking that secrecy. The tension between the last two is the heart of election-system design. Off-the-shelf survey tools resolve it by simply not offering one or the other: either responses are anonymous and you can't verify eligibility, or they're tracked and ballot secrecy is gone.

There are also the unglamorous details that decide whether voting day is calm or chaotic. Eligibility snapshots: membership changes daily, so the voter roll has to be frozen at a declared cutoff, not queried live. Voting windows: opening and closing times enforced by the system, not by someone remembering to close a form. Reminders that go only to members who haven't voted — without revealing to anyone who has voted for whom. And a results view that election observers or an oversight committee can check independently of whoever administered the vote.

Turnout is the quiet argument for doing this well. When the Institute of Internal Auditors Zambia and the ISACA Lusaka Chapter moved their board elections onto platforms we built, the eligible voter was no longer whoever could attend a meeting in person — it was every paid-up member with a phone. Participation stops being a function of geography. For professional bodies with members across the country or the region, that changes who the board actually answers to.

If you're evaluating a provider — us or anyone — the questions to ask are the ones above, plainly: how do you verify eligibility, how do you prevent double voting, can any person see an individual ballot, and what does the audit trail look like when a candidate disputes the result? A provider who has actually run elections will answer in specifics. A provider who plans to configure a survey tool will change the subject.

The honest scope note: a small club voting on a meeting venue doesn't need any of this — a show of hands is fine. But the moment an election carries governance weight, member fees, or a contested seat, the standard isn't "did we get a number at the end." It's "would this result survive a challenge from the person who lost." Build for that, and the technology part turns out to be the easy half.