How Hart Manages Supply Chain Voting Technology Security

What happens if something changes or goes wrong?

Hart has contingency plans in place to mitigate risks caused by supplier or subcontractor interruptions, as well as plans to cover any risks related to manufacturing interruptions. Additionally, we carry business interruption insurance coverage that provides customers with further assurance that we are positioned to provide continuous service and support.

In 19 years of manufacturing voting systems, Hart has managed numerous supply chain interruptions with no disruptions to our customer base. We maintain an adequate supply of inventory at Hart and at several secure offsite facilities as part of our business continuity plan. We have managed several major weather events both at Hart and at several of our key suppliers with no issues. We have managed through tornadoes, hurricanes, floods, heat waves, and ice storms – as well as transitioning our top tier partners with no loss of supply and no interruption of service to customers. Our business continuity plan has been tested, and we continually update it.

What about parts like computer chips, motherboards etc.?

Our contract manufacturer receives all electronic components capable of storing software in an un-programmed state. They then program these devices in Austin, TX (using only EAC approved software) at the last stage of production prior to final test and ship. Hart issues all master copies of software to our manufacturer for media duplication. These are stored in an onsite locked cabinet with access limited to key personnel.

Our return authorization process defines a strict step-by-step procedure for logging, securing and tracking chain of custody of product that requires technical attention that cannot otherwise be repaired in the field.

How do you manage your suppliers?

Hart’s supply chain is a newly scoped, closely managed element of Hart’s direct approach, which protects the integrity of all parts of the system. Hart has in place with key supply chain partners Master Service Agreement (MSA) document signed by both companies. We monitor and maintain these documents on an ongoing basis. Core to these agreements are detailed plans that cover:

Detailed recovery plans that address contingencies in case of a natural disaster or the sale or discontinuation of the partner business.
Escrow accounts to allow access to software and hardware designs with the right to continue to manufacture and sell Hart’s products should an event occur.
All custom tooling, fixtures, test software, bills-of-materials, approved vendor lists, assembly and test methods retained as Hart property, maintained in our Agile product data management (PDM) system, enabling us to recreate any needed tools using the original design criteria if needed.

How do you evaluate your suppliers?

Hart conducts frequent business reviews with our key suppliers. In these reviews, security, product quality, manufacturing quality, any upstream supply chain sourcing issues, and any pending end-of-life (EOL) issues are covered extensively.

Where do your parts come from?

Hart sources components from within the U.S. whenever feasible. Like many other technology products, including security technology used by the U.S. military and Department of Homeland Security (TSA), it is not possible to build Verity using 100% U.S.-sourced components. Some of the basic electrical components used in Verity’s production are not currently manufactured in the U.S. Some examples are resistors, capacitors, connectors and some integrated circuits. These are made in various locations outside of the US.

The Verity Voting system also incorporates several commercial off the shelf components including Okidata printers manufactured in Thailand, Canon Scanners manufactured in Japan, and HP workstations manufactured in Mexico.

How do you choose who makes your products?

Hart requires the following manufacturing certifications of final assembly manufacturers- ISO: 9001:2015 Quality Management System, J-STD-001 / Class II Manufacturing Requirements for Soldered Electrical and Electronic Assemblies, IPC 610 Class II Manufacturing for dedicated service electronic end products assemblies.

These are the same quality standards used by organizations that manufacture for the U.S. military and medical equipment used in hospitals across the country.

Where are Hart products made?

Hart products are designed, developed, and built in the United States. All Hart products are assembled exclusively by U.S. based contract manufacturers. Hart has developed a stable, long standing network of partnerships. These partners understand the elections community and the unique requirements specific to our market. This network has been very responsive to the changes that have been occurring over the past few years.

VirTex Enterprises, LP, is our primary contract manufacturer for the Verity Voting System. VirTex is located approximately 5 miles from Hart’s headquarters in Austin and restricts access to the Hart production line to authorized personnel only. The proximity of our manufacturing facility allows Hart to monitor security and quality practices, and to optimize communications about the manufacturing process.

How does Hart manage Supply Chain and Manufacturing Security?