The Victorian Electoral Commission will migrate its vote-counting virtual machines into Microsoft’s Australian sovereign Azure region by December, completing a data-residency upgrade that began with public-facing web systems and now reaches the backend tallies used after election night.
Why counting VMs moved last
Chief information officer Jonathan Underwood told a parliamentary technology briefing that pre-production and disaster-recovery workloads already ran in Azure, but counting environments stayed on dedicated hardware while lawyers signed off on sovereignty attestations. The commission’s 2023–24 annual report described parallel efforts to cut paper ballot production time by 31 hours through digital layout tools; cloud counting is the logical extension—faster tabulation without shipping raw images offshore.
Security and Essential Eight
VEC partnered with Microsoft to rebuild cyber capabilities aligned to the Australian Signals Directorate’s Essential Eight, starting with patch cadence, credential hardening and macro disablement on staff endpoints. Moving counting VMs reduces the number of physical servers the commission must monitor during the high-risk post-poll window when contractors flood the network with results uploads.
Election night itself already demonstrated elastic scale: during a prior state poll, officials scaled Azure capacity when polling-place lookup traffic doubled by mid-morning, then scaled down after close of business—a pattern Underwood cited as the template for batch counting jobs that spike for 72 hours then idle for years.
Local government ripple
October 2024 council elections exercised new training and logistics systems; 2028 state polls will be the first full test of sovereign-region counting VMs alongside Dynamics 365 donation registers and Office 365 collaboration. Opposition MPs asked whether a single-vendor stack creates concentration risk; VEC responded that portability plans include containerised export of tally databases to air-gapped audit servers regardless of cloud host.
For voters, the change is invisible if it works: results should post faster to the VEC results site with the same double-check procedures. For administrators in other states watching Victoria, the decision is a reference case for whether sovereign cloud regions finally clear the bar that kept South Australia and Queensland counting gear in government-owned data halls.
Microsoft declined to disclose contract value. VEC capital budgets show ongoing uplift in information and digital services, reflecting the commission’s role as both election operator and political donations regulator.
Staff training modules on the new counting environment start in November, with contractors who tally upper-house preference flows required to pass authentication drills before credentials activate. VEC said paper ballots remain the legal record of the vote; digital images are working copies only.