--- title: "Cloud and cybersecurity voucher: the application platform" description: "How to fill in the cloud and cybersecurity voucher application on the Invitalia platform: company details, investment plan, declarations and attachments." canonical: https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-application-platform/ url: /en/cms/insights/cloud-cybersecurity-voucher-application-platform/ lang: en --- ![](https://www.aegister.com/static/images/header-contact.webp) # Filling in the cloud and cybersecurity voucher application on the Invitalia platform, section by section The cloud and cybersecurity voucher application is filled in on the Invitalia platform from 20 October 2026 and submitted from 10 November. The form's sections one by one: company details, investment plan, declarations, generation of the application and attachments, with the source of each rule. October 29, 2026 16 min read ![Compliance officer completing an online registration on a laptop](https://www.aegister.com/static/images/cms/theme-online-filing.webp) Made with AI cloud and cybersecurity voucherinvitalia voucher platformvoucher application attachmentsvoucher application compilation Contents 1. [Before you start](#before-you-start) 2. [Informazioni impresa (company details)](#informazioni-impresa-company-details) 3. [Piano degli investimenti (investment plan)](#piano-degli-investimenti-investment-plan) 4. [Dichiarazioni (declarations)](#dichiarazioni-declarations) 5. [Generazione domanda e allegati (application and attachments)](#generazione-domanda-e-allegati-application-and-attachments) 6. [Differences from the template](#differences-from-the-template) 7. [References](#references) The cloud and cybersecurity voucher application is filled in on [Invitalia's platform](https://invitalia-areariservata-fe.npi.invitalia.it/), with access through SPID, CIE or CNS. Compilation has been open since 12:00 on 20 October 2026; submission runs from 12:00 on 10 November 2026 to 12:00 on 20 January 2027. This guide follows the platform's sections as shown by the interactive guide to filling in the application published by Invitalia (version of 28 October 2026). Invitalia presents it as a demonstration desk that may change: when a point appears only there, we report it as a point made by the guide, not as a rule of the measure. The platform is in Italian, so each section is named with its Italian label. The mandatory contents of the application, the documents and the signature rules are in the guide on [how to submit the application](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-how-to-submit-the-application/). *Directorial decree of 4 August 2026, article 5(1) and (2); the measure's page on Invitalia's website.* ## Before you start To fill in the application you need: - SPID, CIE or CNS for the person who logs in to the platform; - the digital signature of the person who signs the application form; - an active PEC (certified email) address; - a description of the initial technology situation and of the expected improvement; - the suppliers' offers, with the identification codes and the cost details; - the measure's requirements, including an Internet connection of at least 30 Mbps; - for SMEs, the self-declaration (DSAN) on the [catastrophe insurance](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-catastrophe-insurance/). Before starting compilation, according to Invitalia's guide, the privacy notice must be read to the end before the «Presa visione» (acknowledgement) box can be ticked. You then choose the type of applicant, self-employed worker or Italian company entered in the Register of Companies, and the entity you are filling in for. Before submitting the application, a company entered in the Register of Companies must be registered in the «Anagrafica e Deleghe» system, according to the slides of the MIMIT webinar of 15 October 2026; Invitalia's guide says to register it there if it does not appear among the entities that can be selected. A self-employed worker does not register in Anagrafica e Deleghe. Registration, delegation and signature are covered in the guide on [Anagrafica e Deleghe, delegation and signature](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-registration-delegation-signature/). For help with the platform, Invitalia's Contact Center answers on the freephone number 800 775397, Monday to Friday from 9:00 to 18:00. *Directorial decree of 4 August 2026, article 5(2); Official MIMIT FAQ, section 2, no. 30; slides of the MIMIT webinar of 15 October 2026, nos. 13, 15 and 16; the measure's page on the MIMIT website; Invitalia's interactive guide, privacy notice and choice of applicant.* ## Informazioni impresa (company details) This section collects the details of the applicant. For companies it has four tabs (Impresa proponente, Rappresentante legale/Titolare, Firmatario, Referente da contattare: applicant company, legal representative or owner, signatory, contact person); for the self-employed it has three (Proponente, Firmatario, Referente da contattare). ### Impresa proponente (applicant company) Invitalia's guide states that the company name, tax code and VAT number are prefilled from the Register of Companies and cannot be changed. The other fields match sections A.1, A.2 and A.3 of the application form template: - legal form, registered office, PEC, phone and email; - size (micro, small or medium enterprise) with staff in annual work units (ULA), turnover and balance sheet total, under Recommendation 2003/361/EC and the ministerial decree of 18 April 2005; - the ATECO code of the activity the spending plan is for. An active PEC is mandatory under the decree; the guide asks applicants to check that it is active and typed without errors, and states that all communications about the application will be sent to that address. On the ATECO code, the guide adds that if the company also carries out other admitted activities, the grant may concern those, entered in the «Codice ATECO attività» field of the plan. The excluded sectors and the size calculation are in the guide on [requirements and de minimis](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-requirements-de-minimis/). For a self-employed worker, Invitalia's guide asks for the VAT number, the professional register with registration number and date only where the activity requires it, and, as turnover, the revenue or fees of the last available tax period. ### Legal representative and signatory For companies, in the Rappresentante legale/Titolare (legal representative or owner) tab, Invitalia's guide states that the details of the legal representative or owner are prefilled from the Register of Companies and cannot be changed. The application form is digitally signed by the company's legal representative or by the self-employed worker. The exception is the special attorney registered in Anagrafica e Deleghe, who may sign instead of the legal representative; a simple delegate for compilation cannot sign. In the Firmatario tab you therefore state whether the signatory is the «Rappresentante legale» or a «Delegato con procura» (delegate with power of attorney), as in section A.5 of the template. With a delegate with power of attorney, Invitalia's guide says to upload the power of attorney among the attachments. The guide also states that the signatory must be of age. For a self-employed worker, the guide states that the field is fixed to «Rappresentante legale» and that a delegation with power of attorney is not possible. The application may be filled in by a third party using their own digital identity, but it is always signed by the owner: in that case a delegation signed by the applicant goes among the attachments, with no set format. The slides of the MIMIT webinar of 15 October 2026 add that the application and the attachments, the delegation included, are digitally signed by the self-employed worker. ### Referente da contattare (contact person) This is the person Invitalia's team may contact for clarifications on the application, according to Invitalia's guide, and it matches section A.6 of the template. The guide describes a button that prefills the fields with the digital identity details of the person logged in. *Directorial decree of 4 August 2026, article 5(2) and (3); Official MIMIT FAQ, section 2, no. 32; application form template, section A; slides of the MIMIT webinar of 15 October 2026, no. 15; Invitalia's interactive guide, section Informazioni impresa.* ## Piano degli investimenti (investment plan) This section has three tabs: Descrizione del piano di spesa (description of the spending plan), Sede oggetto dell'investimento (investment location) and Spese previste dal piano di spesa (planned costs), which ends with the Totale Piano summary. ### Descrizione del piano di spesa (description of the spending plan) The description matches section B of the template and the declaration the decree requires on the starting position and the expected improvement. It has two fields: - **Stato di partenza** (starting position): the cloud computing and cyber security services and products in use, how they are managed (in house or through suppliers) and their limits. Invitalia's guide states that an applicant using none says so, and that this does not prevent access; the description must be consistent with the starting position stated in the suppliers' offers. - **Obiettivi del piano** (plan objectives): the services and products to buy and the improvement they bring, separating entirely new solutions from more advanced ones than those already in use. The consistency with the offers has a basis in the decree: each offer also describes the starting position and the improvement it delivers, or states that the product is not already available to the applicant. Products or services with performance similar to those in use, version upgrades without a substantial improvement and extensions of licences already held are not eligible. The [Cyber Check-up](https://www.aegister.com/en/assessment/?source=voucher) describes your current security situation: a starting point for writing this field. The same tab asks for: - **Project duration**, in months: 1 to 12 with direct purchases only, 24 with a subscription, alone or together with direct purchases. With direct purchases only, the duration does not exceed 12 months from the notice of the grant decision; a subscription lasts at least 24 months and only the costs of the first 24 are eligible. - **Codice ATECO attività** (activity ATECO code): according to Invitalia's guide it may be the code in the company details or concern another activity carried out. The purchase mode follows the way of paying, not the length of the service: a 36-month SaaS contract can be a direct purchase if it is paid within the 12 months; a subscription is a periodic payment of fees. ### Sede oggetto dell'investimento (investment location) This is the local unit where the spending plan mainly takes effect; the plan may also concern several local units. Invitalia's guide states that only one location can be entered on the platform. The location also decides the reserve: EUR 71,065,813.34 is reserved for spending plans carried out in Abruzzo, Basilicata, Calabria, Campania, Molise, Puglia, Sardinia and Sicily, and what counts is the local unit where the plan mainly takes effect. Invitalia's guide repeats it for this tab: for the reserve, the location entered here is what counts. ### Spese previste dal piano di spesa (planned costs) Each product or service is one cost item, entered in the tab of its category, A to E, according to Invitalia's guide. Only products and services in the list of approved suppliers can be entered, with their identification code; what each category covers is in the guide on [eligible costs](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-eligible-costs/). The fields of each item: | Field | What to enter | Source | | --- | --- | --- | | Tipologia (type) | One of the category's types; for category E there is a single type. If none matches, «Altro» (other): the product or service must still fall within the category and be in the list. | Invitalia's guide | | Fornitore (supplier) | An approved supplier in the list. An applicant that is itself in the list buys from suppliers other than itself. | Directorial decree of 4 August 2026, art. 3(3) and art. 5(3)(f); FAQ section 1, no. 6 | | Codice identificativo (identification code) | The code of the product or service in the list, the same as in the offer. It will be shown on every invoice together with the CUP. | Directorial decree of 4 August 2026, art. 5(3)(e) and art. 7(4)(a); FAQ section 1, no. 41 | | Modalità di acquisto (purchase mode) | Direct purchase, subscription or a combination of the two. After the application, switching from direct purchase to subscription or the other way round is not allowed. | Directorial decree of 4 August 2026, art. 4(4) and art. 8(4) | | Prodotto o servizio richiesto (product or service requested) | The description as given in the supplier's offer. It need not match the one used for the listing, but it must identify the product, including the manufacturer, its fit with the type and whether it is new, additional or more advanced. | FAQ section 1, no. 57; template, section D | | Imponibile (taxable amount) | The amount excluding VAT. For a subscription, the sum of the fees for the first 24 months, as stated in the offer. | FAQ section 2, no. 34 | | VAT and total | The guide says to enter VAT for completeness only: it is not an eligible cost and does not count towards the grant, which is calculated on the taxable amount. | Invitalia's guide | When the supplier making the offer is not approved for the type of a service and includes it as supplied by another approved supplier, the spending plan carries the identification code of the original supplier; invoicing and delivery stay with the supplier the offer was agreed with. Invitalia's guide also describes a template to download, fill in without changing its fields and upload, for applicants with many items. According to Invitalia's guide, type, supplier, code, description and amounts must match the attached offer. What an offer must contain is in the guide on the [supplier offer](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-supplier-offer/), and how to check a supplier in the guide on the [approved supplier check](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-approved-supplier-check/). For our services, an [offer request](https://www.aegister.com/en/contact/?source=voucher) goes through the contact page: our part is the offer, the application remains yours. ### Totale Piano (plan total) The summary adds up the items by category on the taxable amount, excluding VAT, and calculates the grant automatically, according to Invitalia's guide. The thresholds it shows are those of the measure: - eligible costs of at least EUR 4,000, excluding VAT; - category E within 30% of the total, linked to at least one product or service in categories A to D; - a grant of 50% of eligible costs, up to EUR 20,000: above EUR 40,000 of costs the grant does not increase. The plan as a whole is covered in the guide on the [spending plan](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-spending-plan/). *Ministerial decree of 18 July 2025, article 3(2), article 5(3) and (5), and article 6(1); directorial decree of 4 August 2026, article 2(3), article 3(3), article 4(2), (3), (4) and (6), article 5(3) and (4), article 7(4) and article 8(4); Official MIMIT FAQ, section 1, nos. 6, 41, 53, 54, 55 and 57, and section 2, nos. 28, 33, 34 and 42; slides of the MIMIT webinar of 15 October 2026, nos. 9 and 10; Invitalia's interactive guide, section Piano degli investimenti.* ## Dichiarazioni (declarations) This section collects the self-declarations made under articles 46 and 47 of Presidential Decree 445/2000. Invitalia's guide shows them as boxes to tick, all mandatory: 14 for companies and 13 for the self-employed, who do not have the catastrophe insurance declaration. They cover: - entry in the Register of Companies or, for the self-employed, the VAT number and any membership of the professional order; - a connection with a minimum download speed of 30 Mbps; - full exercise of rights, with no voluntary liquidation and no insolvency proceedings aimed at liquidation; - no unlawful or incompatible aid left unrepaid; - an investment programme not yet started on the date of the application; - a truthful description of the starting position and of the improvement; - the size requirements and not operating in the sectors excluded by de minimis; - compliance with social security contributions, no convictions, no disqualifying sanctions and no other barriers; - for companies, compliance with the catastrophe insurance obligation. A programme not yet started means that on the date of the application there are no legally binding commitments, invoices, down-payment invoices included, or payments relating to the plan. *Directorial decree of 4 August 2026, article 4(5) and article 5(3); application form template, declarations a) to o) and note 2; Invitalia's interactive guide, section Dichiarazioni.* ## Generazione domanda e allegati (application and attachments) The last section has four steps: Controlli finali (final checks), Format di domanda (application form), Allegati (attachments) and Termina compilazione (end of compilation). ### Controlli finali (final checks) According to Invitalia's guide, when the window opens the platform asks you to check the data entered and that the attachments are complete. Each applicant may submit one application only. The guide adds that a new application is possible after a rejection, unless the window has closed because the funds ran out, and that a submitted application can be submitted again only after a formal cancellation request, handled through the withdrawal desk. ### Format di domanda (application form) The platform generates the application form as a PDF with the data entered; the form is digitally signed and uploaded. Invitalia's guide says to: - always use the last version downloaded, if the form was downloaded more than once; - not change the PDF in any way after downloading it; - check the validity of the digital signature with the verification service indicated by AgID. The guide also warns that, with «Modifica dati» (edit data), the attachments already uploaded are lost. ### Allegati (attachments) The attachments as Invitalia's guide lists them; signed files are uploaded as p7m or pdf. | Attachment | Companies | Self-employed | Signature | | --- | --- | --- | --- | | Application form | Mandatory | Mandatory | Digital, by the signatory | | Suppliers' offers | Mandatory | Mandatory | By the supplier, then digital by the signatory | | Catastrophe insurance DSAN | Mandatory | Not required | Digital | | Power of attorney | Only if a delegate with power of attorney signs | Not required | Digital | | Delegation for compilation | In the Anagrafica e Deleghe system, not among the attachments | Only if someone other than the signatory fills in the application | Digital, by the applicant | | Other | Optional | Optional | Not required | Each offer is signed by the supplier and identifies the supplier, the products or services, the identification codes in the list, the cost items and the starting position with the improvement delivered. Invitalia's guide states that the supplier may sign digitally or by hand and that the offer must then be digitally signed by the application's signatory; with a handwritten signature the supplier's identity document is attached, in the same file or in the ALTRO (other) section; if the supplier also signs digitally, the last signature on the file must be the applicant's. ### Termina compilazione and the submission code At the end, Invitalia's guide shows the «Termina compilazione» step, where the submission code (codice di invio) is generated, and states that the code must be typed in by hand, not copied and pasted, in the submission desk, reached from the notice published in the platform's desk area from 10 November 2026. The decree describes the same step under another name: after the digitally signed application is uploaded, the procedure issues the application preparation code (codice di predisposizione domanda), which the applicant enters during submission. In both texts it is the code obtained at the end of compilation and used to submit. Submission, the receipt and the CUP are covered in the guide on the [submission checklist](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-submission-checklist/). *Directorial decree of 4 August 2026, article 5(2)(a.3), (a.4) and (b.2), and article 5(4) and (6); Official MIMIT FAQ, section 2, no. 35; Invitalia's interactive guide, section Generazione domanda e allegati.* ## Differences from the template The [application form template](https://www.mimit.gov.it/images/stories/moduli/Fac-simile-Format-Domanda-VCC.pdf) published by MIMIT shows the content of the final form; the platform collects the same data in a different order. Compared with Invitalia's guide: | Template | Platform, according to Invitalia's guide | | --- | --- | | Sections A.1 to A.6: applicant, registered office, contacts, legal representative, signatory, contact person | Informazioni impresa, with company name, tax code and VAT number prefilled from the Register of Companies | | Section B: starting position, objectives, expected duration | Descrizione del piano di spesa, with an extra Codice ATECO attività field | | Section C: investment location | One location only, which also applies to the reserve | | Section D: a single table of services and products | One tab per category, A to E, with one item per product or service | | Section E: taxable amount requested and grant available | Totale Piano, with the thresholds and the grant calculated automatically | | Declarations a) to o) | Mandatory boxes: 14 for companies, 13 for the self-employed | | Attachments: offers, catastrophe insurance DSAN, other | In addition, the signed application form, the power of attorney when a delegate with power of attorney signs and, for the self-employed, the delegation when a third party fills in the application | *Application form template (MIMIT); Invitalia's interactive guide, version of 28 October 2026.* ## References - Ministerial decree of 18 July 2025, articles 3, 5 and 6. - Directorial decree of 4 August 2026, articles 2, 3, 4, 5, 7 and 8. - [Official MIMIT FAQ](https://www.mimit.gov.it/it/assistenza/domande-frequenti/sostegno-domanda-servizi-di-cloud-computing-e-cyber-security-risposta-alle-domande-frequenti-faq), section 1, nos. 6, 41, 53, 54, 55 and 57; section 2, nos. 28, 30, 32, 33, 34, 35 and 42. - [Application form template](https://www.mimit.gov.it/images/stories/moduli/Fac-simile-Format-Domanda-VCC.pdf) (MIMIT). - [Interactive guide to filling in the application](https://manuali.invitalia.it/cybersecurity/) (Invitalia, version of 28 October 2026). - [Slides of the MIMIT webinar of 15 October 2026](https://www.mimit.gov.it/images/stories/IncentiviImprese_Normativa/Presentazione-VCC-Sportello_Beneficiari.pdf) on the applicants' desk. - The measure's pages on the websites of [Invitalia](https://www.invitalia.it/incentivi-e-strumenti/voucher-cloud-e-cybersecurity) and [MIMIT](https://www.mimit.gov.it/it/incentivi/sostegno-alla-domanda-di-servizi-di-cloud-computing-e-cyber-security). This article was reviewed with AI tools for proofreading and error checking. Despite these checks it may contain inaccuracies: for compliance decisions, always refer to the official texts. Self-assessment · NIST CSF 2.0 · ISO 27001 ### Cyber Check-up A self-assessment that returns your company's cyber profile: its security posture and the recommendations to mitigate risks and start your cybersecurity journey. [Start the Cyber Check-up](https://www.aegister.com/en/assessment/?source=voucher) Our service ### Aegister services for the voucher The identification codes of our services to enter in the offer and in the application, and how we prepare the offer in the format the measure requires. [Learn more](https://www.aegister.com/en/voucher-cloud-cybersecurity/#servizi-aegister) Share this post: Self-assessment ### Cyber Check-up Answer the questionnaire and get your company's cyber profile: security posture and recommendations to mitigate risks. [Start the Cyber Check-up](https://www.aegister.com/en/assessment/?source=voucher) ### Aegister services for the voucher The identification codes of our services to enter in the offer and in the application, and how we prepare the offer in the format the measure requires. [Learn more](https://www.aegister.com/en/voucher-cloud-cybersecurity/#servizi-aegister) ## Related news October 20, 2026 ### [Cloud and cybersecurity voucher: compilation opens](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-precompilation-open/) From 12:00 today the compilation phase of the Voucher Cloud & Cybersecurity application opens. In this phase the data is entered, the form is generat… 20 October 2026 application preparation code cloud and cybersecurity voucher +3 October 29, 2026 ### [Submitting the cloud and cybersecurity voucher application from 10 November: submission code and checklist](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-submission-checklist/) How the cloud and cybersecurity voucher application is submitted from 10 November 2026: the submission code, the certificate and the CUP, chronologic… application preparation code chronological order voucher cloud and cybersecurity voucher +5 October 29, 2026 ### [Cloud and cybersecurity voucher: registration, delegation and who signs the application](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-registration-delegation-signature/) Before submitting the voucher application, the company registers in Invitalia's Anagrafica e Deleghe. Who may fill it in, who signs, how a delegation… cloud and cybersecurity voucher digital signature voucher application Invitalia Anagrafica e Deleghe +4 ## Legal notes 1. Articles reflect the rules and information available on the publication or update date shown. 2. The content of this site is for information only and is not legal or tax advice. 3. Third-party product, company and organisation names and trademarks mentioned on this site belong to their respective owners. We mention them to describe our services and the applicable rules and standards; unless stated otherwise, a mention does not imply affiliation, sponsorship or endorsement. 4. The information on the Voucher Cloud e Cybersecurity summarises the MIMIT decrees and official FAQ: where they differ, the official texts prevail. We are an approved supplier with identifier VCCFA2600000933 and we prepare the offer; submitting the application and meeting the requirements remain the applicant company's responsibility, and the grant depends on the checks the measure provides for and on the funds available. 5. The details of the application platform follow the interactive guide published by Invitalia, which reproduces a demonstration counter and may change: the platform and the official documentation of the measure prevail. 6. Images labelled “Made with AI” are generated with artificial intelligence tools, are illustrative and do not depict real people or events. 7. The Cyber Check-up is a self-assessment: its results and suggestions depend on the answers given and do not replace a technical review, an audit or a certification.