Voting data is stored in such a way that the records are not, in fact, there, while still being auditable - unless the tallying system is compromised in some way.