Across California Counties, Strict Security Vaults Protect Voted Ballots

The two-person rule from drop box to counting room

The cornerstone of California ballot custody is the two-person rule. Under Secretary of State regulations, no individual is ever permitted to transport, handle, or store voted ballots alone. Pairings are mandatory. When ballots are collected from official drop boxes or neighborhood vote centers, retrieval teams consist of at least two sworn election workers, frequently registered with different political parties. The team inspects the existing tamper-evident seals. They compare the unique serial numbers against written manifests. Then they cut the seals, place ballots into secure transfer bags, and apply new numbered seals while signing a joint transfer log. Every step is documented.

When I reviewed the physical vault specifications across several county registrar offices, the depth of security was striking. At the central elections facility, the custody chain tightens further. Ballots enter badge-restricted, keycard-monitored processing rooms where overhead security cameras record every square foot twenty-four hours a day. Dual-keypad entry systems require two separate authorized employees to badge in together. High-speed digital scanning machines operate entirely on air-gapped internal systems with zero connection to the internet. The scanners tally votes accurately. They generate immutable digital audit records while preserving the original paper ballots in pristine order.

The same paired protocol governs damaged or folded ballots. When a scanning machine detects a torn or stained ballot that cannot feed smoothly, a bipartisan duplication team steps in. One worker reads the voter's marked choices aloud while the partner marks an official duplicate ballot. Both workers verify the replacement. They stamp identical matching serial numbers onto both the original damaged ballot and the new duplicate. Both versions are logged and preserved together in the permanent archive. Nothing is discarded.

Inside the twenty-two month archival vault

After county election officials finish tabulating and certify the official canvas, state and federal statutes govern storage. California Elections Code Section 17301 and federal law under 52 U.S.C. § 20701 dictate what happens to the physical paper. Every voted ballot, rejected envelope, and precinct tally sheet is packed into heavy archival boxes. Workers seal each carton with heavy-duty serialized red cable ties and place them into locked wire cages inside climate-controlled vaults. We can trace every box through its unique barcode and serial manifest. Once locked, the cartons remain undisturbed for twenty-two months unless a superior court judge specifically orders an unsealing during a formal election contest. The seal is absolute.

The most charming ritual in this entire security apparatus is the mandatory one percent manual tally. Before any election is certified, county registrars draw random precincts out of a physical drum or glass bowl during an open public meeting. Bipartisan teams of election workers sit at folding tables before public observers and hand-count every single paper ballot in those precincts using colored pencils and tally sheets. Four workers sit at each table. Two call out the votes, and two record the marks simultaneously. The math must match. In our view, this transparent physical process is the unsung anchor of public trust.