Election Ballot Chain of Custody: A Checklist for Admins

A ballot chain of custody is the documented record of who controlled election materials, when they controlled them, and what happened at every handoff. The most dependable programs pair written procedures with signed records, seal checks, reconciliation, and a clear way to resolve exceptions. This checklist shows election administrators how to build that record without pretending that one process fits every jurisdiction.

What a ballot chain of custody must show

Chain of custody is not a stack of signatures. The U.S. Election Assistance Commission describes it as a record of materials moving from one person or place to the next. Your record should answer: what moved, who released it, who received it, when and where, the condition, and the witness.

That standard covers more than voted paper ballots. Blank ballot stock, containers, memory media, scanners, seals, results reports, and electronic records all need controls suited to their role. Start with your state law, local procedures, contracts, and retention schedule. The EAC's chain-of-custody guidance is a planning resource, not a replacement for the rules that govern your election.

Write the procedure before you print the form

The form follows the process, not the other way around. Before the election, map every expected transfer from printer or warehouse to polling place, vote center, drop site, central count, audit room, archive, or vendor. Name the person who may release an item, the person who may receive it, and the person who reviews the record. Give them a short escalation path for a broken seal, a count mismatch, a missing signature, or an unexpected transfer.

The Election Chain of Custody Blueprint treats custody as a continuous cycle built on logging, multi-person execution, least-privilege access, verified signatures, and independent reconciliation. Use those ideas to scale controls to your office. A two-person transfer may fit ballot containers, while an approval log may be the better control for a digital results file.

Mail-ballot teams should also revisit their workflow. A Postal Service rule effective August 21, 2026 adds preparation, barcode, portal, and verification requirements for federal ballot mail. It does not override state law, but it reinforces the need for an owner, a record, and a review point at each external handoff.

The seven-stage ballot chain-of-custody checklist

1. Inventory materials at release. Record the election, item description, serial or seal number, quantity, storage location, and condition. For ballots, establish the starting count before a container leaves controlled storage.


2. Document each transfer. Capture the date, time, location, releasing and receiving custodians, and witnesses required by your procedure. Never pre-sign a handoff.


3. Verify seals and identifiers. Compare container seals, equipment serial numbers, and logs at pickup and delivery. A mismatch needs a documented response.


4. Control access while materials are stationary. Identify who can enter storage, who can access system media, and how access is logged. Keep custody records separate from voter choices so a security control never compromises ballot secrecy.


5. Reconcile after voting closes. Account for voted, spoiled, provisional, challenged, unused, and damaged ballots under your jurisdiction's rules. Compare ballot counts with voter or ballot-issuance records, then document the reviewer and any variance.


6. Secure the move to canvass and audit. Seal containers, record the route and custodians, and preserve results reports and media according to procedure. Do not treat a completed transfer log as proof that the underlying counts reconcile.


7. Close the record after certification. Assemble forms, incident reports, reconciliation sheets, audit materials, and retention instructions into one indexed file. Schedule an after-action review promptly.

Build a record that can close discrepancies

A usable custody log should make it easy for a supervisor or auditor to reconstruct an event without interviewing everyone involved. That is why vague entries such as “ballots delivered” are weak. The entry should identify the container, quantity, condition, source, destination, time, and accountable people. Attach or cross-reference the related seal log, inventory sheet, results report, or incident form.

Train staff to report a discrepancy promptly, not to repair the paperwork quietly. A complete incident record should state what was discovered, when it was discovered, the immediate safeguard, the people notified, the applicable procedure, the resolution, and the approving authority. An exception handled transparently is evidence that your controls worked.

Technology can strengthen the record, not replace it

Digital tools can reduce duplicate entry and make review faster, especially when an election has multiple locations or a long voting window. Time-stamped activity logs, role-based permissions, controlled exports, and read-only records can support a custody process for electronic files and administrator actions. They should be configured around your written procedure, with enough detail to show what changed, who authorized it, and how the change was reviewed.

A system log is not a substitute for the physical controls or statutory audit steps that apply to paper ballots. Keep that distinction clear in procurement and training. For a member, association, cooperative, or board election, Votem's election operations services can centralize the operational record. For an online election, confirm that any secure voting platform has access controls, audit exports, and retention options that fit the governing authority.

Frequently Asked Questions

What information belongs on a ballot chain-of-custody form?

At minimum, identify the election, material or container, quantity or serial number, condition, release and receipt times, locations, custodians, and witnesses required by your procedure. Include the seal number when applicable and cross-reference any incident report.

How many people should sign a ballot handoff?

Many offices use two-person or bipartisan controls for significant transfers, and the EAC identifies two signatures as a best practice. Your governing law and written procedure should decide the exact requirement, staffing approach, and any exception process.

What happens if a seal number or ballot count does not match?

Secure the material, stop the affected process if your procedure requires it, notify the designated supervisor, and document the facts before resolving the issue. The response should follow the jurisdiction's escalation and reconciliation rules, not an improvised fix.

Is a digital audit log enough for an online election?

A digital log can document administrator activity and system events, but it does not automatically satisfy laws that require physical ballots, a particular audit method, or specific retention practices. Confirm the applicable rules before the election calendar is set.

The Bottom Line

Strong chain of custody is ordinary work done consistently: count carefully, control access, document every handoff, reconcile independently, and preserve the evidence. The best procedure is the one your team can follow under pressure and explain plainly after the election.

If you are redesigning an election workflow or need help translating your procedures into a defensible operating plan, talk with the Votem team before you set your next election deadline.