CeVo — Secure Digital Elections for University Departments
Multi-Tenant SaaS with Cryptographic Verification, Structural Secret Ballots, and OCR-Driven Student Verification
The Problem
Student union and departmental elections at Nigerian universities run on paper — manually counted ballots, no audit trail, and results that can be disputed with no evidence either way. When CESA needed to run its elections digitally, there was no off-the-shelf tool that could handle multiple departments, enforce secret ballots structurally, and verify that only eligible students voted.
Key Bottlenecks Before Engineering:
- Vulnerability to physical ballot box tampering and manual miscounting during high-tension departmental elections.
- Zero verifiable cryptographic audit trail to resolve contested outcomes between executive slates.
- No existing commercial tool that allowed multi-tenant isolation across faculties without extensive custom engineering.
- The ask wasn't just a voting form. It was a trustworthy, fraud-resistant election system.
What I Built
CeVo is a multi-tenant SaaS voting platform where each department runs as a fully isolated organisation — separate candidates, separate voter rolls, separate results. No department can see another's data.
The Hard Problems I Solved:
Multi-tenancy without data bleed
Every query is scoped to a tenant at the Prisma Client Extension level, not at the application layer. A misconfigured route or developer oversight cannot accidentally expose another organisation's election.
Secret ballot, enforced structurally
There is no voter foreign key on the Vote table. The system knows you voted. It does not know what you voted for. This isn't a cosmetic UI toggle — it is a strict database schema constraint.
Identity verification via OCR
Voters upload their student ID during registration. Google Gemini Flash reads and validates the ID card details against their registered student profile before access is granted, eliminating manual admin review bottlenecks.
Password setup without email exposure
Onboarding uses SHA-256 single-use tokens stored in the database. Links expire immediately after use. No plaintext passwords, no reusable reset links, and zero email exposure vectors.
5-role access hierarchy
Role-based access separating Platform Admin → Org Admin → Election Manager → Scrutineer → Voter. Each role sees exactly what it needs and nothing more, backed by cryptographic session validation.
The Result
CeVo ran live departmental elections at the University of Ilorin — the first time multiple departments could run concurrent, auditable digital elections on a single platform. Results were tamper-evident, disputes were resolvable with logs, and the entire process required zero paper.
Measurable Impact & Deployment Metrics:
- 100% paperless election lifecycle with real-time live audit dashboards.
- Zero voter impersonation or double-voting incidents recorded during live deployment.
- Proved multi-tenant architecture: Any student association, faculty, or institution can be onboarded as a new tenant without modifying the codebase.
- Passed a full independent security audit prior to institutional deployment.
What This Unlocked & Proves
Multi-tenancy at this level — with structural secret ballots and OCR-based identity verification — is the same architectural pattern that powers mission-critical enterprise SaaS products. CeVo demonstrated it works reliably at institutional scale, built and shipped end-to-end by one engineer.
🔒 Note: Access is restricted to verified institutional administrators. Full live demo and source walkthrough are available upon request.
Want to build a system like this?
Let’s discuss your architecture, database constraints, and operational workflows.