Skip to content
Rollbook

The voter roll, kept current every day of the year.

Today a county finds out a voter died, moved or lost eligibility weeks or months late, then rushes a cleanup before the next deadline. Rollbook replaces the scramble. Each event reaches the right official the day it happens, with the evidence and the legal next step. The official signs. The record is sealed.

Sign in with your keyHow it works
  1. 1Nov 18Social Security reports a death
  2. 2Matched by token to one voter in Douglas County
  3. 3One source only: waiting for a second
  4. 4Nov 21State vital records confirms the death
  5. 5Flag opened: cancel, voter has died
  6. 652 U.S.C. § 20507(a)(4)(A), evidence attached
  7. 7County official signs with a hardware key
  8. 8Sealed in the log. No one can rewrite it.

How it works

  1. It turns on the day the election certifies

    The 90-day federal quiet period has passed, so the state switches its node on and Rollbook runs continuously until the next election, and then the one after.

  2. Events arrive as they happen

    Death records, change-of-address data, court and corrections records, DMV records, and registrations in other states. Each record is sealed the moment it lands, before anything is matched.

  3. Each event becomes one flag

    The rules engine applies that state's law and federal law, grades the match, and sends one flag to the right county with the evidence and the legal next step written out. No one re-checks the whole roll.

  4. An official decides, every time

    Rollbook never removes a voter. A county official approves or rejects each flag and signs with a registered hardware key.

  5. The record cannot be rewritten

    Every signal, flag and decision is hash-chained, signed and anchored each night. The database refuses edits and deletes, even from an administrator.

Safeguards built into the law it follows

Deaths
Two independent record systems before removal. Social Security and the HAVV check count as one, because HAVV draws on Social Security data.
Activity after death
A ballot request, address change or new registration on a record matched to a death raises an alarm straight to an official.
Moves
Change-of-address data starts a forwardable notice and never removes anyone. The record cancels only if the voter neither responds nor votes through the second federal general election after the notice.
The 90-day hold
Systematic changes are held automatically in the 90 days before every federal primary and general election, and released the day after. Individual changes for death, conviction or the voter's own request continue.
Felony status
Each state's own rules, by offense class, with restoration tracked. Where a state requires a new registration, the voter gets a pre-filled notice.
Citizenship
A flag starts a notice and a chance to show proof. The record stays active until the deadline passes.

Only tokens cross state lines

Each state's voter list stays inside that state. Rollbook stores the state's own voter ID, county and status, never a name, number, birth date or address.

To match a person across states, each identifier is turned into a token by key holders who never see the identifier, using a split key no single holder controls. When a voter registers in a new state, the old state hears about it by token and cancels on review, because the new registration is the voter's own request.

Born Between 2 Generals never sees who anyone is.

51 jurisdictions

Every state and the District of Columbia has its own node with its own rules loaded and cited. Open any one to see the rules Rollbook applies there.