Cloud and cybersecurity voucher: how the application is submitted

The procedure has two phases three weeks apart. From 20 October 2026 the application is filled in, the PDF form generated, digitally signed and the preparation code issued; from 10 November the application is submitted using that code. The guide follows the application form template section by section: what to gather first, declarations, attachments (offers and the insurance DSAN), signature and delegation, the CUP and the deadlines that follow the award.

September 24, 2026 18 min read

Open volume of legislation on a desk with a Roman palazzo in the background Made with AI
Contents
  1. The two phases
  2. What you need to fill in the application
  3. The application preparation code
  4. The application form, section by section
  5. Digital signature and delegation
  6. The unique project code
  7. One application per applicant
  8. Exhaustion of resources
  9. Checks to run before submitting
  10. After the award
  11. References

The application is submitted exclusively through the online procedure made available on the website of the Ministry of Enterprises and Made in Italy. The directorial decree of 4 August 2026 splits the process into two distinct phases, three weeks apart: compilation and submission. On 8 October 2026 the Ministry published the template of the application form (fac-simile del modulo di domanda), together with the template of the supplier's offer and the model self-declaration on catastrophe insurance. This guide sets out what happens in each phase, what to arrange beforehand and what the form asks for, section by section.

The two phases

Article 5(2) of the directorial decree of 4 August 2026 distinguishes:

  • Compilation, from 12:00 on 20 October 2026. In this phase you access the procedure, enter the data, upload the attachments, generate the application form as a non-editable PDF, apply a digital signature to it and upload it again.
  • Submission, from 12:00 on 10 November 2026 to 12:00 on 20 January 2027. Here you access the procedure again and enter the code issued at the end of compilation.

Compilation is not submission. Applications are assessed in chronological order of submission (article 8(1) of the ministerial decree of 18 July 2025 and article 6(1) of the directorial decree of 4 August 2026), so position depends on when the application is submitted, not when it was filled in. Dates and times are also summarised on the measure's page.

The application must be written in Italian and submitted by the applicant or by another person delegated to compile it, with the formalities of articles 21(1) and 38(2) and (3) of Presidential Decree 445 of 28 December 2000, exclusively through the Ministry's online procedure, on pain of invalidity and inadmissibility (article 5(1)). Who may sign the form is a separate question, covered further down.

What you need to fill in the application

The application is filled in on Invitalia's platform (the measure's page on Invitalia's website). An Italian business entered in the Business Register first registers its details in the Anagrafica e Deleghe (registry and delegations) section: the measure's page on the MIMIT website and the slides of the MIMIT webinar of 15 October 2026 give it as a step to complete before the application is submitted. Delegation to a third party and the registration of a special attorney go through the same section (official MIMIT FAQ, section 2, nos. 31 and 32), so it is worth completing it first. A self-employed worker cannot register their activity in Anagrafica e Deleghe, but may still delegate someone to submit the application (slides of the MIMIT webinar of 15 October 2026).

The official MIMIT FAQ (section 2, no. 30) list what is needed to fill in the application. The list below follows them and adds the data the application form template asks for. It is worth gathering everything before starting to fill it in.

  • Digital identity. Access is through SPID, the national services card (CNS) or the electronic identity card (article 5(2)(a.1)).
  • The legal representative's digital signature. The platform generates the application form as a non-editable PDF which must be digitally signed before being uploaded again (article 5(2)(a.3)). The signature belongs to the legal representative, except for a registered special attorney (official MIMIT FAQ, section 2, no. 32). As practical advice, not a rule of the decree: a digital signature is a separate instrument from SPID and, if you do not hold one, it is worth requesting it in good time.
  • An active PEC mailbox. A certified email address is mandatory for submission (article 5(2)(a.2)).
  • ATECO 2025 code and size. Section A.1 of the form asks for the activity code in the 2025 ATECO classification and the applicant's size.
  • Employees in annual work units (ULA), turnover and balance sheet total. These are the three figures used to declare micro, small or medium size (form, declaration a); official MIMIT FAQ, section 2, no. 2).
  • Location of the investment. The address of the local unit where the spending plan mainly takes effect (section C of the form).
  • Project contact. Name and contact details of the person, inside the organisation or otherwise delegated, who will deal with the Agency (section A.6).
  • A description of the starting position and the expected improvement. It goes in section B of the form.
  • Supplier offers, signed by the supplier, with the identification codes and cost items (official MIMIT FAQ, section 2, no. 35). Their contents are covered in the guide to the supplier's offer.
  • Self-declaration (DSAN) on catastrophe insurance, for SMEs, using the model published by the Ministry (official MIMIT FAQ, section 2, no. 30). What it declares is explained in the guide to catastrophe insurance.
  • Connectivity contract with a minimum download speed of 30 Mbps. The application only needs the declaration; the contract is produced at disbursement and must already be in force on the date of the application. Mobile network connections are not accepted (official MIMIT FAQ, section 2, no. 10 and no. 11).

The requirements to be met on the date of the application are covered in the guide to eligibility requirements and the de minimis regime.

For help with the procedure, Invitalia runs a contact centre: the contact form, available in the personal area of Invitalia's website, can be filled in 24 hours a day; the free number 800 775397 answers Monday to Friday from 9:00 to 18:00 (the measure's page on the MIMIT website; slides of the MIMIT webinar of 15 October 2026).

The application preparation code

On upload of the digitally signed form, the platform issues the codice di predisposizione domanda (article 5(2)(a.4)). This code links the two phases: from 10 November, submission consists of accessing the procedure and entering that code (letter b.2).

The operational consequence: anyone who has not completed the compilation phase has no code to enter and cannot submit until they do.

Invitalia's interactive guide to filling in the application (version of 28 October 2026) calls codice di invio (submission code) the unique code generated at the end of compilation for the actual submission of the application. According to the guide, the code must be typed by hand, not copied and pasted, into the submission desk (sportello di invio), reached from the notice published in the platform's desk (scrivania) from 10 November 2026. Submission is described in the guide to submitting the application from 10 November.

The application form, section by section

The application takes the form of a self-certified declaration in lieu of an affidavit (dichiarazione sostitutiva di atto notorio) and must contain, on pain of inadmissibility, the items listed in article 5(3). The form template published by the Ministry arranges them in five sections, followed by the declarations, the commitments and the attachments. The form to be signed is generated by the platform from the data entered (article 5(2)(a.3)). Section titles are given below in English with the Italian original.

Filling in the application on the platform, screen by screen, is described in the guide to the application platform; the sections below are those of the template.

A. Applicant identification data (Dati identificativi soggetto proponente)

  • A.1 Applicant details: name, legal form, tax code, VAT number, ATECO (2025) code and size. For a self-employed professional the form also asks for first and last name and, where applicable, registration with the professional register and its date.
  • A.2 Registered office: address, municipality, postcode, province and region.
  • A.3 Company contacts: PEC, telephone and email.
  • A.4 Legal representative or owner: first and last name, date and place of birth, tax code.
  • A.5 Signatory (Firmatario): who signs the form, as legal representative or as a delegate holding a power of attorney (delegato con procura).
  • A.6 Project contact (referente del progetto): the person inside the organisation, or otherwise delegated, who will deal with the Agency.

B. Description of the programme (Descrizione programma)

Three fields. The starting position (stato di partenza) is the declaration on the actual starting position regarding the adoption of cloud computing and cyber security services and products. The programme objectives (obiettivi del programma) describe the expected improvement, evidencing the new solutions acquired or those more advanced than the ones already in use. The planned duration (durata prevista) is the time needed to carry out the spending plan (article 5(3)(d) and (g)).

The programme duration to enter is 1 to 12 months if the plan provides for direct purchases only, and 24 months if it includes a subscription (official MIMIT FAQ, section 1, no. 55; section 2, no. 33). With direct purchases the programme runs from the award and expenses and payments must be completed within 12 months, the limit set by article 5(3)(a) of the ministerial decree of 18 July 2025; with a subscription the contract signing date counts, and expenses are incurred and paid in the first 24 months (section 1, no. 55). A subscription cannot run for less than twenty-four months (section 2, no. 33). The offers also describe the starting position and the upgrade (article 5(4)(a)), so it is worth keeping the two texts consistent.

C. Location of the investment (Sede oggetto dell'investimento)

The address of the local unit where the spending plan mainly takes effect, it being understood that the plan may cover more than one local unit (article 5(3)(b)).

D. Services and products requested (Elenco servizi e/o prodotti richiesti)

One row per service or product, with these columns: product or service identification code, supplier, supplier's tax code, category, type, purchase method, product or service requested as stated in the supplier's offer, taxable amount, VAT and total in euro (article 5(3)(e) and (f)).

The purchase methods are those of article 4(4): a) direct purchase, b) subscription, c) a combination of the two. For a subscription, the "Imponibile" (taxable amount) field carries the sum of the fees for the first 24 months as stated in the offer (official MIMIT FAQ, section 2, no. 34). If a supplier offers a service of another accredited supplier, the original supplier's service identification code is entered; invoicing and delivery stay with the supplier that made the offer (official MIMIT FAQ, section 2, no. 28). How to compose the plan, the 30% limit on macro-category E and the minimum spend are covered in the spending plan guide.

E. Amount requested and grant (Importo richiesto e agevolazione concedibile)

Two amounts: the taxable amount requested and the grant that can be awarded (article 5(3)(h)). The grant is 50% of eligible expenses and cannot exceed EUR 20,000; eligible expenses cannot be below EUR 4,000 (article 4(6)). The applicant then requests the grant for carrying out the plan set out in section D.

Declarations

The form gathers fifteen declarations, letters a) to o), made under articles 46 and 47 of Presidential Decree 445/2000. Grouped by subject:

  • Sector and size (a): the applicant does not operate in the sectors excluded by article 1 of Regulation (EU) 2023/2831 (de minimis) and is a micro, small or medium enterprise, stating employees in annual work units (ULA), turnover and balance sheet total. Employees are staff on fixed-term or permanent contracts entered in the employment register (libro unico del lavoro), excluding those on extraordinary wage supplementation; part-time and seasonal staff count as fractions of a ULA (note 1 of the form).
  • Eligibility (b, f, g, h): meeting the requirements of the ministerial decree of 18 July 2025; being duly incorporated and registered in the Business Register or, for a self-employed worker, holding only a VAT number, subject to registration with the professional body where required; full and free exercise of rights, with no voluntary liquidation nor insolvency proceedings for liquidation purposes; no unlawful or incompatible aid received and neither repaid nor placed in a blocked account.
  • Connectivity (c): a connectivity contract with a minimum download speed of 30 Mbps.
  • Starting position (d): confirmation that the starting position and expected improvement described in section B are true.
  • Catastrophe insurance (e): compliance with the insurance obligations against natural disasters and catastrophic events (law 213 of 30 December 2023, article 1(101), and decree-law 39 of 31 March 2025).
  • Programme not started (i): on the date of the application the programme has not yet started. Under note 2 of the form, the programme has started if any of these applies: legally binding commitments (signing a contract, order confirmations or any other commitment that makes it irreversible); invoices issued; payments made, including deposits.
  • Conformity of the plan (j): the services and products in section D comply with the ministerial decree of 18 July 2025 and the directorial decree of 4 August 2026.
  • Social security compliance (k): the applicant is up to date with its social security contributions. At disbursement the Ministry obtains the DURC certificate ex officio for businesses (article 7(5)(c)).
  • Grounds for exclusion (l, m, n, o): no conviction of directors or legal representatives, by final judgment, irrevocable criminal conviction order or sentence on request under article 444 of the Code of Criminal Procedure, for offences that exclude from procurement or concession procedures; no disqualifying sanction under article 9(2)(d) of legislative decree 231 of 8 June 2001; no other condition barring access to public aid; compliance with the further exclusion conditions and the rules on investment programmes set by the decrees.

The form recalls the criminal liability for false declarations and the forfeiture of benefits obtained through an untrue declaration (articles 75 and 76 of Presidential Decree 445/2000).

Commitments

By signing the form the applicant undertakes to:

  • complete the programme within the set terms;
  • sign any subscription contract no later than 30 days after notification of the award and inform the Ministry;
  • allow checks and monitoring, including inspections and site visits, and answer requests for information;
  • respect the rules on combining aid and the ban on double funding;
  • show the CUP on electronic invoices, both for deposits and for the balance;
  • keep the project documentation in paper or electronic files, so that operations can be traced;
  • respect the conditions and terms for disbursement requests.

Attachments

The form's "Allega" (attachments) section has three entries.

  • Offers for the services and products requested, following the template published by the Ministry and showing the related cost items. They are signed by the supplier (official MIMIT FAQ, section 2, no. 35). Article 5(4)(a) requires that they carry the identification codes assigned to the products and services by the official list. They must also describe the applicant's starting position and the upgrade the offer delivers or, for a new product or service, attest that it is not already available to the applicant.
  • DSAN on catastrophe insurance: the self-declaration on the insurance obligation, required for SMEs (official MIMIT FAQ, section 2, no. 30).
  • Other: any further documentation (article 5(4)(b)). Any other document useful to prove the declared improvement may be produced (official MIMIT FAQ, section 1, no. 48).

The identification code is not the same as the type abbreviation. It combines the supplier's identifier with the type abbreviation: in the example given in the official MIMIT FAQ (section 1, no. 41), supplier VCCFA2600009999 offers services of type C.1 Virtual machine under the code VCCFA2600009999-C1, which may cover several services of the same type. Each supplier states its own codes in the offer. An offer without the codes does not satisfy paragraph 4.

Digital signature and delegation

The form is signed with a digital signature under legislative decree 82 of 7 March 2005 (note 3 of the form). The signature belongs to the legal representative of the business, or to the self-employed worker applying for themselves. The exception is the special attorney (procuratore speciale), registered through a specific procedure in the platform's registry and delegation system, who may sign in place of the legal representative. A person merely delegated to fill in or submit the application cannot sign the form in place of the legal representative (official MIMIT FAQ, section 2, no. 32).

Delegation to a third party, such as a consultant, a professional or a collaborator, is granted through the platform's "Anagrafica e Deleghe" (registry and delegations) function. The business must first be registered on the platform; then the delegate's details and permissions are entered, the delegation form is generated and digitally signed. Once the signed delegation is uploaded, the delegate acts for the business within the permissions received (official MIMIT FAQ, section 2, no. 31).

It follows that, even when compilation is entrusted to a delegate, the legal representative, or a registered special attorney, must be able to digitally sign the form generated by the platform before it is uploaded again.

Registration in Anagrafica e Deleghe, delegation and signature are described step by step in the guide to registration, delegation and signature.

The unique project code

On submission the platform issues the codice unico di progetto (CUP), which must appear on every expense document connected to the funded programme (article 5(2)(b.3)). For disbursement, every expense document must carry the CUP and the identification code assigned to the individual funded service or product (article 7(4)(a)). It is worth passing the CUP to suppliers before invoices are issued: an expense document without it does not satisfy article 7(4); the Ministry then requests additional documents and, if they do not arrive or do not remove the obstacle, the result is a reduced disbursement or the partial or total revocation of the grant (article 7(6)).

One application per applicant

Each applicant may submit only one application (article 5(6) of the directorial decree of 4 August 2026, implementing article 7(5) of the ministerial decree). It is therefore not possible to submit several applications and choose later which to pursue.

Exhaustion of resources

If the applications submitted exhaust the available resources before the final deadline, the Ministry announces the exhaustion and closes the window. Applications submitted pending closure that lack financial cover are suspended until any savings are established; absent further resources they are treated as lapsed (article 5(7)).

Checks to run before submitting

Some conditions surface not at compilation but during assessment or reporting, when there is little room left to correct them. They are worth checking beforehand.

CheckReferenceWhen it surfaces
The supplier is on the official listart. 6(1)(c) DD 4 August 2026Assessment
The chosen services are on the list and match the planart. 6(1)(d)Assessment
Macro-category E services do not exceed 30% of the plan and are connected to other services in the planart. 4(2)(e)Assessment
Eligible expenses are not below EUR 4,000art. 4(6)Assessment
Subscriptions run for at least 24 monthsart. 4(4)(b)Assessment and reporting
The programme has not started: no contract, order confirmation, invoice or payment, including deposits, before the application is submittedart. 4(5); form, declaration i) and note 2Reporting
The form is signed by the legal representative or a registered special attorney, not by a mere delegateofficial MIMIT FAQ, section 2, no. 32Assessment
The de minimis allowance has headroomart. 6(4)Assessment, via the national aid register

Assessment is completed within 60 days of the date the application is submitted, subject to the longer terms provided in the same paragraph (article 6(2)). During assessment the Ministry may request clarifications or additional documents, which must arrive within the stated term, on pain of the application lapsing; until they arrive the assessment terms are suspended (article 8(2) of the ministerial decree of 18 July 2025).

The full checklist, from compilation to submission, is in the guide to submission and checklist.

After the award

For a subscription, two deadlines run from notification of the award (article 4(5)):

  • the subscription must be signed after the application is submitted and no later than 30 days; failure to comply with article 4(5) is a ground for revoking the grant (article 10);
  • notification that it has been signed must be transmitted through the online procedure within 60 days, using the template published in the measure's area of the portal, on pain of forfeiting the grant.

For a direct purchase, expenses must be incurred and paid within 12 months of notification of the award (article 4(4)(a)).

Disbursement cannot be requested earlier than 3 months after notification of the award (article 7(2)). The request for the second and final tranche, or for the single tranche, must be submitted within 30 days of the deadline for completing the spending plan (article 7(3)).

Early withdrawal from a subscription and a change of the subscription's supplier must be reported promptly through the online procedure (article 8(1)). They interrupt the benefit and forfeit any residual contribution connected to that subscription (article 8(2)); failing to report them promptly is a ground for revocation (article 12 of the ministerial decree of 18 July 2025).

Note also that switching the acquisition method between direct purchase and subscription, relative to what was stated in the application, is not permitted (article 8(4)).

References

  • Ministerial decree of 18 July 2025, rules governing the measure.
  • Directorial decree of 21 November 2025, formation of the list of approved suppliers.
  • Directorial decree of 29 July 2026, definition of the list of approved suppliers.
  • Directorial decree of 4 August 2026, application terms and procedures.
  • MIMIT, application form template, published on 8 October 2026.
  • MIMIT, official answers to frequently asked questions (section 1, supplier list; section 2, beneficiaries and eligibility).
  • MIMIT, the measure's page and slides of the webinar of 15 October 2026 on the desk for beneficiaries (in Italian).
  • Invitalia, the measure's page (in Italian).
  • Invitalia, interactive guide to filling in the application, version of 28 October 2026 (in Italian).

This article was reviewed with AI tools for proofreading and error checking. Despite these checks it may contain inaccuracies: for compliance decisions, always refer to the official texts.

Self-assessment · NIST CSF 2.0 · ISO 27001

Cyber Check-up

A self-assessment that returns your company's cyber profile: its security posture and the recommendations to mitigate risks and start your cybersecurity journey.

Our service

Aegister services for the voucher

The identification codes of our services to enter in the offer and in the application, and how we prepare the offer in the format the measure requires.

Learn more
Share this post:

Related news