The new standard for modern voting, your choice stays hidden from absolutely everyone, and anyone can verify the results.
The trust gap
Voters need privacy. Organizers need proof. Existing voting systems are run behind closed doors, so leaked voter data, contested counts, and misinformation can turn any result into a conspiracy.
Shutter Governance closes this gap. It's a new digital voting system for municipalities, universities, unions, cooperatives, and more, where votes stay hidden from everyone and results stay publicly verifiable.
Shutter Governance
Individual choices are cryptographically secured. No administrator, vendor, or observer can link a ballot to a person.
Anyone can independently confirm that every valid vote was counted and the published result is correct.
Every election produces a tamper-proof record that proves it was held fairly, to auditors, regulators, and the courts.
The process
STEP 1
Before any votes are cast, the key that unlocks the results is created and split across independent parties. No single party can open the results alone.
STEP 2
Each voter makes their choice and casts it on their own device. The ballot is sealed the instant they submit, unreadable to anyone until the count.
STEP 3
When voting closes, the sealed ballots are counted while still encrypted. The independent parties combine their key pieces to unlock only the final totals, without ever opening any individual ballot.
STEP 4
The published result comes with a public proof that every valid vote was counted. Anyone can check it, with no account and no special access.
Who it's for
City of Munich
2026 · staff council election
Upcoming pilot test
We're working with Universität der Bundeswehr München, the City of Munich, Votebase and additional contributors on a pilot for an upcoming staff council election. The aim is to learn how the approach holds up in a real setting before looking at broader use.
Partner integration · Live since 2022
Over nearly four years, our integration with Snapshot has encrypted over 370,000 votes across 800+ digital communities known as Decentralized Autonomous Organizations (DAOs) — without a single error.
Built for European trust
Fully open and auditable, and designed to align with the EU regulations and GDPR.
Data minimisation and privacy by default. Ballots are never linkable to a person.
All data is hosted on EU infrastructure, keeping it within European jurisdiction.
The full codebase and voting protocol are public. Anyone can inspect how privacy and verification are enforced.
Anyone can verify the full result. Each election produces a signed record and cryptographic proof.
Contact us
Start with a pilot: run one private, verifiable vote end to end, live in weeks. It works with the IT systems you already operate.