Security and privacy at a glance
Where data lives, what organisers can and cannot see, and where the formal legal pages are.
Hosting
Application and database processing run in UK/EEA regions (including London for core app and database services). Email and other providers are named on the Subprocessors page. If a committee asks for a formal answer, send them that page and Security rather than quoting this summary from memory.
What organisers can see
After a voter finishes casting, rankings are not stored against their email. Organisers see turnout: whether someone voted, not how they voted. On Enterprise, independent scrutineers may exist under contract for oversight exports. That still is not a way for everyday Admins to open named ballots.
Legal documents
Use the legal pages for formal wording. Help articles paraphrase for convenience; they are not a substitute for Privacy, Terms, the DPA, or Cookies.