Skip to content

Reference

Security, data and compliance in Election Worker Management Portal

Security controls, supported requirements, hosting and limitations of Election Worker Management Portal.

Applies to Election Worker Management Portal as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.

Last reviewed 2 min readReport a problem
On this page
  1. Security controls
  2. Single sign-on
  3. Role-based access
  4. Encryption and keys
  5. Complete audit trail
  6. US-only hosting
  7. Tested releases
  8. Requirements it supports
  9. Where it runs
  10. Limitations

How Election Worker Management Portal protects data and supports your compliance obligations.

Security controls

Single sign-on

Staff sign in through your identity provider, so your password and multi-factor policies apply. Workers sign in with verified email and a one-time code.

Role-based access

What each person can see and do follows their role; pay details and party affiliation are limited to the roles you choose.

Encryption and keys

Client data is encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.

Complete audit trail

Every view of personal data, change, approval and export is logged with the person and time, and cannot be edited.

US-only hosting

Data for US government clients is hosted in the United States region only.

Tested releases

Every release passes security testing gates before it ships, and a software bill of materials is kept for the product.

Requirements it supports

  • Help America Vote Act of 2002 (52 U.S.C. 20901 et seq.)
  • Voting Rights Act Section 203 language minority requirements (52 U.S.C. 10503)
  • Americans with Disabilities Act, Title II
  • Social Security Act Section 218 and IRS reporting rules for election worker pay
  • State election codes on poll worker eligibility, party balance, training and compensation

The product supports these requirements; meeting them remains your organization's responsibility.

Where it runs

  • Moraph cloud (US): Hosted and operated by Moraph in the United States region.
  • Statewide deployment: One environment for a state and its counties, with each county's workers and locations kept separate and state staff able to see across them, scoped in the proposal.
  • With a managed service: Optionally run alongside a Moraph managed service for election-period support and platform administration.

Limitations

  • It does not handle ballots, voters or vote tabulation. It manages the workforce only.
  • It is not a payroll system. It prepares an approved payroll file; your payroll system pays workers and handles tax reporting. Moraph does not hold funds.
  • Eligibility, party-balance, training and pay rules are your jurisdiction's decisions under state law; the portal applies and records them.
  • Assignment suggestions are proposals. Election staff confirm every assignment.
  • Voter registration checks depend on access to your voter registration system, granted by the agency that runs it.
  • Background checks, where your jurisdiction requires them, are done through your existing provider and recorded in the portal.
  • Training content for specific voting equipment comes from your office or your equipment vendor; the portal hosts and tracks it.
  • Election-day check-in at polling places relies on the supervisor's device or a paper sheet entered afterward.
Note

Company-wide controls, independent audits (SOC 2 Type II and ISO/IEC 27001) and data residency are described in the Moraph Trust Center, where you can request the evidence pack.

Was this page helpful?

Report a problem with this page
What’s the problem?
Quote the step or heading if you can. Don’t include passwords or personal records.
Only if you’d like a reply. We use it for this report and nothing else.

Need help with your own setup rather than this page? Raise a support ticket.