PollSentry captures Nigerian election result sheets in the field, runs AI and forensic checks on every image within seconds, and streams verified tallies to a live monitoring wall — with full chain-of-custody, fraud flags, and human review at every step.
Between the polling unit and the final declaration, results are tallied and re-tallied by hand, level after level. That journey — slow, manual and hard to observe — is where confidence in the vote breaks down.
Figures are added up by hand up a long chain — a process that takes days, and invites error at every step.
Numbers are copied from the polling-unit sheet up to the state return. Along the way they can be transposed, inflated or swapped — often unnoticed.
Parties, observers and citizens have no fast, trustworthy way to test a declared result against the original sheets.
The result is contested outcomes, litigation, and eroded confidence — long after the last vote is cast.
Each audience gets a tool shaped for its job — all connected to one secure core and the same AI scoring engine.
The organisation's command centre — set up the election, staff the field, and review every sheet with its full forensic breakdown.
The field agent’s tool. A native iOS & Android app agents carry to the polling unit — capturing the EC8A, buffering it offline, and screening it for fraud on-device — plus a web version for testing and owner/admin override uploads.
A real-time results wall — aggregated candidate tallies, coverage and turnout by geography, leaders and trends, updating as verified sheets land.
The secure core every screen runs on, plus an admin console for PollSentry-wide operations — the engine behind the three surfaces above. (The agent's mobile app is the Agent surface.)
Two layers of access: a broad platform role, and — inside each organisation — a specific role, narrowed further by a geographic area. Everyone acts only within their own organisation and their assigned area.
| Capability | Owner | Admin | Coord. | Agent | Observer |
|---|---|---|---|---|---|
| Election setup | |||||
| Configure elections | ● | ● | — | — | — |
| Manage parties & candidates | ● | ● | — | — | — |
| Set up polling units | ● | ● | ◑ | ◑ | — |
| Team & access | |||||
| Invite & manage members | ● | ● | ◑ | — | — |
| Onboard & scope agents | ● | ● | ◑ | — | — |
| Field & results | |||||
| Capture & upload sheets | ● | ● | ◑ | ◑ | — |
| Review forensics & scores | ● | ● | ◑ | — | — |
| Set the final verdict | ● | ● | — | — | — |
| Re-run AI scoring | ● | ● | ◑ | — | — |
| Resolve flags & incidents | ● | ● | ◑ | — | — |
| Report an incident | ● | ● | ◑ | ◑ | ◑ |
| Export results & reports | ● | ● | ◑ | — | — |
| Oversight | |||||
| Monitor live results | ● | ● | ● | ● | ● |
| View the audit log | ● | ● | — | — | — |
Role breakdown — select a role
Owns the organisation and everything inside it. Sets up elections, staffs the field, reviews results, and signs off the final verdicts.
The owner's right hand — handles the day-to-day running of the organisation, with the same operational reach as the owner minus ownership-only actions.
Runs a cluster within the election. Their core job is to recruit, onboard and manage the agents in their area — and oversee those agents' results.
The field capturer. Photographs EC8A result sheets at the polling units they're assigned and submits them for verification — the front line of data collection.
An external, accredited witness the organisation lets in to watch — a monitor or guest who can see results without changing anything. Stays a guest, never internal staff.
Every action passes through the same layered checks before it runs. Your role decides what you may do, your scope decides where, isolation keeps organisations apart, and the audit trail records it all — and anything not explicitly allowed is refused.
The guarantees
You get exactly what your role needs to do the job — nothing spare. New powers are granted explicitly, never assumed.
Every organisation’s data is walled off. One org can never see or touch another’s elections, members or results.
Agents and coordinators are bound to their state, LGA or ward — they simply cannot act outside the area they’re assigned.
Anything not explicitly allowed is refused. Access has to be earned, not assumed — the safe default is always “no”.
Every sensitive action is recorded — who did it, to whom, and the before / after — so nothing happens off the record.
Even elevated “act on behalf of” access is permission-checked and written to the audit trail like any other action.
What each role cannot do
Electoral data is some of the most sensitive there is. PollSentry treats it that way — you own it, it stays separate, and the original evidence is never altered.
Each organisation’s election data belongs to it. PollSentry is the custodian, not the owner — you can export it, and it’s never repurposed.
Every organisation is isolated. One org’s members, elections and results are invisible to any other.
Uploaded sheets are written once and never overwritten — the original evidence is preserved for re-checks and disputes.
We hold what an election requires — geography, sheets, tallies — and nothing extraneous.
Data is kept for the election’s lifecycle and your agreed window, then archived or removed as you decide.
Who viewed or changed what is recorded — access to data is logged, never silent.
One EC8A photograph travels from an agent's phone to the public wall in seconds — gaining a forensic verdict and an immutable audit trail along the way.
Agent photographs the EC8A. On-screen quality check, GPS & device details.
Sent with its location & a tamper-proof seal; the original is stored, never changed.
Figures read, cross-checked, forensic tests run, integrity scored.
Flags raised, a verdict assigned. Suspicious sheets route to a human.
Canonical, verified sheets feed the live aggregation.
Where owners, admins and coordinators set up the election, staff the field, and turn raw uploads into trusted results with full forensic detail.
Create the election (fixed to its state and type), add parties & candidates with logos, and set up polling units.
Invite members by email, assign a role, and limit them to a geographic area. Coordinators onboard their own agents.
Open any sheet: extracted figures vs. image, per-check scores, raised flags, BVAS variance, custody verification — then set the verdict.
The field app walks the agent from their election down to the exact polling unit, checks whether it’s already been submitted, collects new-PU details when needed, then captures & uploads. Agents carry it as a native iOS & Android app that buffers captures offline and screens them for fraud on-device; the web dashboard mirrors the same flow for testing and owner / admin / super-admin override uploads.
An agent only sees — and can only upload for — polling units inside their assigned scope.
Blurry, dark or over-exposed captures are caught on-device before upload.
Captures buffer on the device with no signal, then sync automatically the moment it reconnects — nothing lost in the field.
The mobile app screens device integrity and capture provenance before sending — mitigating fraud at the source.
As clean sheets are accepted, the monitor aggregates them by geography and paints the picture: who's leading, how much has come in, and where.
Zoom from national down to a single polling unit; every tile re-aggregates.
A Nigeria tile-map, leader cards and trend sparklines track momentum.
Superseded & unverified sheets never inflate the numbers — no double counts.
Beyond the private monitoring wall, PollSentry can publish verified milestones straight to X — turning the same canonical, verified tallies into public, timestamped updates the whole country can follow in real time.
Illustration — an auto-posted verified milestone
Posts only canonical, accepted tallies — provisional or flagged results never reach the public feed.
Auto-posts on coverage milestones (25 / 50 / 75 / 100%), when the lead changes, or on a set schedule.
Every post is timestamped, states its coverage %, and links back to the live tracker for the full picture.
Require a person to approve each post before it goes out — or let trusted milestones publish automatically.
Every image is read automatically, its figures cross-checked, then put through a battery of forensic and arithmetic tests. The result is a set of clear scores and named red flags.
Clean scores, no critical flags — counts immediately.
Flagged (e.g. arithmetic error) — a human confirms.
Over-vote, duplicate or manipulation — excluded; re-upload allowed.
Flag reference — select a check
The numbers don’t reconcile — the sum of candidate votes doesn’t match the recorded total, or the figures and the written words disagree.
More votes were cast than voters were accredited — an impossible result for that polling unit.
The accreditation figure written on the sheet doesn’t match the BVAS device record for that unit.
The same result-sheet image has been submitted more than once — by mistake, or to double-count a location.
The image shows signs of tampering — edited or overwritten figures, or a sheet that isn’t a genuine original.
A procedural red flag — party or observer agents were reported as excluded from the count at that unit.
Integrity isn't only in the scores — it's in how every sheet is stored, signed, isolated and recorded. Provenance travels with the image from the moment of capture.
Each sheet carries a tamper-proof digital signature and a capture fingerprint (GPS, device, time). The signature can be checked at any time — any tampering shows up.
The uploaded image is written once to secure storage and never overwritten. Any re-check works from the original; the record of what arrived is permanent.
Exactly one verified sheet counts per location. A re-upload is allowed only when the prior sheet was flagged or rejected — it supersedes the old one, never double-counts.
Every request is bound to the user's organisation, and non-admin users are further bound to their assigned area — one organisation can never see another's data.
Sensitive actions — verdicts, role changes, removals, permission changes — are recorded with who, whom and the before/after, for later review.
The engine decides fast, but never alone on the doubtful cases: anything flagged waits for a reviewer before it can reach the public tally.
Nigerian results roll up level by level. PollSentry captures each form at its level and links them into a verifiable chain from the polling unit to publication.
Form breakdown — select a level
The result sheet filled and signed at the polling unit right after the count. This is the ground truth — every higher form is just a sum of these, so this is where verification matters most.
A field agent photographs the signed EC8A at the polling unit with the mobile app — guided to the exact PU, with a live quality gate and offline buffering.
Figures are read from the image: registered & accredited (BVAS) voters and each party’s votes are extracted and tied to that PU.
The full forensic battery runs here — arithmetic, over-vote vs BVAS, consensus, duplicate and tamper checks. Fraud is caught at the source.
The ward summary — the total of every polling unit (EC8A) inside one registration area. The first point where individual sheets are added together.
Captured at the ward collation centre, or derived automatically from the accepted EC8A tallies in that ward.
The collated figures are extracted, and the ward is matched against the sum of its verified polling-unit sheets.
A reconciliation check — the ward total must equal the sum of its EC8A. Any gap is flagged for review.
The Local Government Area summary — the total of every ward (EC8B) in an LGA.
Captured at the LGA collation centre, or rolled up from the accepted ward results.
Figures are extracted and matched against the sum of the LGA’s ward sheets.
Roll-up reconciliation — a discrepancy at this level escalates as an incident.
The senatorial-district collation — the total of the LGAs within a district. Used where the contest is district-scoped, such as senatorial elections.
Captured at district collation, or rolled up from the LGA results.
Extracted and reconciled against the sum of its LGA figures.
Roll-up reconciliation, scoped to the district’s contest.
The state-level summary — the total of the LGAs (or districts) in a state. The state’s official return.
Captured at the state collation centre, or rolled up from the level below.
Extracted and reconciled against the verified totals beneath it.
Final roll-up reconciliation before the result is declared.
The publication / declaration of result — the official figures that get announced. PollSentry holds this up against its own independently verified roll-up.
The declared figures are recorded as published.
Compared, side by side, with PollSentry’s verified tally built from the EC8A up.
A divergence check — any gap between the announced result and the independently verified total is surfaced immediately.
Every screen connects to one secure core. Behind it sit the services that store each result, run the checks, keep every organisation's data separate, and record who did what.
Building blocks — select a part
The organisation’s command centre on the web — set up the election, staff the field, and review every sheet with its full forensic breakdown before signing off the result.
The same guided capture flow in the browser — used for testing, and as an owner / admin / super-admin override to upload results directly when the field can’t. Not the everyday channel.
A real-time results wall — aggregated tallies, coverage and turnout by geography, leaders and trends — updating as verified sheets land. Read-only, safe to share widely.
The real field tool agents carry — a native iOS & Android app built for polling units with poor signal. It captures EC8A sheets, buffers them offline, and runs on-device fraud checks before anything reaches the core.
The multi-organisation core every screen connects to. It decides who can do what, keeps each organisation’s data separate, and orchestrates the whole capture → verify → publish pipeline.
The verification brain. It reads each result sheet, cross-checks the figures, and runs a battery of forensic tests — scoring integrity and raising named fraud flags in seconds.
A dedicated service that mirrors Nigeria’s official electoral geography — every state, LGA, ward and polling unit — synced from INEC and stored, so the whole system speaks one consistent map.
Where the election’s structured records live, and where every uploaded sheet image is kept — written once and never overwritten, so the original evidence stays permanent.
The trust layer. Every sheet gets a tamper-proof signature at the moment of capture, and every sensitive action is written to an audit log — so results can be proven and actions traced.
Election day is a spike — tens of thousands of units reporting within a few hours, many from places with patchy signal. PollSentry is built for exactly those conditions.
The agent app captures and buffers with no signal, syncing the moment it reconnects — no result is lost in the field.
Uploads are queued and processed in the background, so a flood of sheets at close of polls is absorbed, not dropped.
If one part slows, capture and buffering carry on — nothing blocks the agent on the ground.
PollSentry turns a slow, opaque count into an independent, verifiable, public record — in real time.
A parallel tally that doesn’t wait on official pace — declared results can be checked, sheet by sheet.
Anomalies are flagged on the polling-unit sheet, where manipulation starts — not discovered weeks later.
A live, shareable results wall and auto-posts to X put verified numbers in the open, in real time.
A complete, signed audit trail — every sheet, every action — that stands up to scrutiny, and in court.
Observers, parties and citizens get a trustworthy, timely answer — cutting disputes and mistrust.