vote.org

A-
Trust rating
Excellent · 90/100
Procurement snapshot
No critical findings. The 2 remaining items are configuration gaps, not architectural problems.
Strengths
DNS Configuration
TLS Configuration
Known Breaches
HSTS Header
Estimated remediation effort: 1–2 days
Based on a passive external scan — supplement with vendor-provided attestations, not a replacement.
Trust Score Trend
→ No change 1 scan · Last scanned February 18, 2026
Your rating Industry average
Score
100 75 50 25 0
A-
vote.org
90/100
Compliance & Certifications
Not yet verified
GDPR
GDPR
DPA not on file
Self-reported
Pro subscribers only
CCPA
CCPA
Privacy policy not on file
Self-reported
Pro subscribers only
Incident History
None in 12 months
March 2026
ChatGPT data exposure
1 source
Resolved
Pro subscribers only
April 2023 – Feb 2026
ChatGPT data exposure
1 source
Resolved
Pro subscribers only
Security Posture
2 items need attention
7 passed
Add 2 optional security headers
Security Headers
< 1 hour

This is a minor hardening gap, not a significant risk on its own. vote.org already has most of the recommended security headers — nice work. The remaining 2 are a smaller, best-practice improvement rather than an urgent gap.

How to fix this
1Add these headers exactly as shown. If you manage your own server (nginx, Apache, IIS) or a CDN like Cloudflare, add it in that config. If your site is on a managed platform (Wix, Squarespace, Shopify, WordPress.com), search their help center for "custom headers" or ask their support — most support it, though a few don't.
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()
2Confirm it worked: search "http header checker" and enter vote.org — check the headers below in the response.
Report unlocked.
View all 7 passed checks
DNS Configuration
TLS Configuration
Known Breaches
HSTS Header
DMARC / Email Security
MX Records & Mail Provider
CVE Exposure
Company Signals
Claim profile →
Operational risk
Low
11 yrs operating. Well-funded
Lynxradar · Composite signal
Last funding
$40B
Series F · Mar 2025 · SoftBank-led
Crunchbase ↗
Employees
~3,000
+40% YoY growth
LinkedIn ↗
Trust Resources
Claim profile →
Trust Center
trust.vote.org ↗
Security page
vote.org/security ↗
Privacy Policy
vote.org/privacy ↗
DPA (Data Processing Agreement)
vote.org/dpa ↗
Updated recently
Subprocessors List
vote.org/policies/subprocessors ↗
Similar companies in Nonprofit
Appears in
Claim profile →
SOC 2 Type II certified vendors
847 companies · Updated weekly by LynxRadar
Track
ISO 27001 certified SaaS
312 companies · Updated weekly by LynxRadar
Track
Top AI vendors by trust score
94 companies · LynxRadar ranking
Track
Enterprise-ready SaaS · Trust score A or above
203 companies · LynxRadar ranking
Track