Introducing Shutter Governance: Private, Verifiable Voting Is Here

Today, we are officially unveiling Shutter Governance.

After years of research and engineering at brainbot GmbH, we have built a voting system that resolves the problem that has blocked secure digital voting for decades: you can now run an election where every individual vote is permanently private, and where every result is independently, publicly verifiable by anyone. At the same time.

That combination has never existed before in a production-ready system. It does now.

The Problem We Set Out to Solve

Every previous attempt at digital voting has collapsed on the same fundamental contradiction. Privacy requires secrecy. Verifiability requires openness. Traditional systems treat these as a trade-off: you encrypt the ballots and ask voters to trust the operator, or you publish the data and expose how people voted.

Neither is acceptable for institutional elections. Privacy without verifiability is just asking people to trust a black box. Verifiability without privacy eliminates the secret ballot, which is the foundation of free elections.

Shutter Governance solves both simultaneously, using three cryptographic techniques that have matured to the point where they can be combined and deployed at scale.

Threshold encryption distributes the decryption key across a set of independent keyholders. No single party (not us, not the operator, not any government) can decrypt individual votes. Decryption only happens when voting closes and requires a threshold of keyholders to cooperate. The ballot content is locked from the moment it is cast.

Zero-knowledge proofs let voters prove that their ballot is valid, containing a legitimate choice cast exactly once, without revealing what that choice is. The math guarantees correctness without exposure.

Homomorphic encryption allows the final tally to be computed directly on encrypted ballots. The result emerges from ciphertext. No individual vote is ever decrypted in isolation.

Together, these three properties mean that the outcome of any election run on Shutter Governance is verifiable by the public, while individual choices remain permanently sealed.

Who It Is Built For

Shutter Governance is designed for institutions with real accountability requirements: city councils running participatory budget votes, universities electing rectorates and senates, unions conducting statutory ballots, cooperatives holding general assemblies, and any body where the legitimacy of a result depends on voters being able to check it for themselves.

These are not experimental contexts. These are elections where a disputed result has real consequences: legal, political, and institutional. The system is built to meet that standard.

What Comes Next

We are moving into our first production pilots with institutional partners. If you represent a body that runs regular elections or referendums, we want to talk to you. The path from first conversation to a live pilot is short: a scoping call, a proposal, a dry run, and a real vote.

If you have been following the problem of digital voting and waiting for a system that actually solves it, we believe that moment has arrived.

We look forward to showing you what it looks like in practice.