Why paper is the anchor of a trustworthy count
Ask a security expert the single most important thing an election can do to be trustworthy, and the answer is usually one word: paper. Not because paper is old-fashioned or nostalgic, but because it is the one part of the system a hacker or a software bug cannot silently rewrite. Every other safeguard — audits, recounts, court challenges — ultimately rests on there being a physical record to check against.
The logic is simple. A computer count, on its own, asks you to trust the computer. A paper record turns trust into verification: because the paper exists outside the machines, the machines can be checked against it. Take the paper away and every downstream safeguard loses its footing, because there is nothing independent left to compare the electronic result to.
This is the same principle that runs through how votes are counted: security comes from layers you can inspect, and paper is the layer everything else depends on.
Two kinds of paper
"Paper trail" covers two related but distinct things, and the difference matters:
| Type | How the vote is recorded | The verification question |
|---|---|---|
| Hand-marked paper ballot | The voter marks paper directly | Did the scanner read the marks correctly? |
| Ballot-marking device (BMD) with printout | A machine prints the voter's choices on paper | Did the voter check that the printout matches their intent? |
Both can provide a solid paper trail — but only if the paper is voter-verified. That phrase is the crux. A printout the voter glances past, or never sees, is not truly verified: an error or manipulation between the screen and the paper could slip through unnoticed. The safeguard only works if a human confirmed that the paper reflects their choices.
Software independence
The formal name for the principle is software independence: an undetected error or fault in the voting software should not be able to cause an undetectable change in the election outcome. Paper is what delivers it. If the software miscounts — through a bug or an attack — the paper record can be counted by hand and the discrepancy exposed.
This reframes the whole "what if the machines were hacked?" fear. In a paperless system the question is unanswerable, which is exactly why it corrodes trust. In a paper-based system it has a concrete answer: count the paper. The expert consensus, including the U.S. National Academies' landmark review, is therefore blunt — use human-readable paper ballots, and phase paperless machines out.
What the paper trail enables
Paper is not the safeguard itself; it is what makes the safeguards possible. It underwrites:
- Recounts — re-tallying the physical ballots when a margin is close or a result disputed.
- Audits — hand-checking a sample of paper against the reported totals to confirm the outcome.
- Chain-of-custody checks — reconciling the number of paper ballots against the number of recorded voters.
None of these is possible without a trustworthy physical record. Paper is the raw material every check is made of.
When there's no paper
The value of the paper trail is clearest where it is missing. Two cases show the two ways that happens.
- Paperless machines. Where votes are cast on purely electronic systems that keep no paper record, a contested result cannot be independently verified at all — there is simply nothing to recount. This is why the trend across democracies is to retire such systems.
- Withheld records. Paper (or its equivalent) can exist and still be hidden. In Belarus in 2020, authorities did not publish station-level protocols, so the official result could not be checked against the underlying records. A paper trail no one is allowed to inspect provides no assurance.
The paper trail in practice
The positive case is just as concrete. After the close 2020 result in Georgia, officials conducted a full hand count of every paper ballot. Because a voter-verified paper record existed for every vote, the hand count could be compared directly against the machine tally — and it matched to within ordinary human error. The paper trail turned an explosive "the machines were hacked" claim into a question with a checkable, and ultimately reassuring, answer.
That is the entire point of keeping paper. It does not assume the machines are trustworthy or that they are not — it makes the answer verifiable either way. And the tool that does the verifying, efficiently and at scale, is the election audit.