Submitting the cloud and cybersecurity voucher application from 10 November: submission code and checklist

How the cloud and cybersecurity voucher application is submitted from 10 November 2026: the submission code, the certificate and the CUP, chronological order, one application, the assessment, and a checklist by phase with the source of each check.

October 29, 2026 12 min read

Compliance officer completing an online registration on a laptop Made with AI
Contents
  1. Submitting the application from 10 November
  2. Submission code and application preparation code
  3. Certificate of submission and CUP
  4. Chronological order and exhaustion of funds
  5. One application only
  6. Assessment and grant
  7. After the grant
  8. Application checklist
  9. References

From 12:00 on 10 November 2026 the cloud and cybersecurity voucher application filled in on Invitalia's platform can be submitted. This guide covers the submission and what follows it. The content of the form, section by section, is in the guide on how to submit the application; the platform's screens are described in the guide on filling in the application on the platform. At the end you will find a checklist by phase, with the source of each check.

Submitting the application from 10 November

The directorial decree of 4 August 2026 splits the process into two phases: compilation, open from 12:00 on 20 October 2026, and submission, from 12:00 on 10 November 2026 to 12:00 on 20 January 2027. The application, written in Italian, is submitted exclusively through the online procedure, on pain of invalidity and inadmissibility. The applicant may act, or a person who has been delegated to fill in the application; who may sign the form is explained in the guide on registration, delegation and signature.

Submission has three steps:

  1. the applicant accesses the online procedure;
  2. the applicant enters the application preparation code issued at the end of compilation;
  3. the procedure issues the certificate of submission (attestazione di avvenuta presentazione della domanda) as a non-editable PDF.

The interactive guide to filling in the application published by Invitalia (version of 28 October 2026) states that the submission desk (sportello di invio) will be reached from a notice posted on the desk page (scrivania) of the personal area from 10 November 2026. For help with the platform, Invitalia's Contact Center answers on the toll-free number 800 775397, Monday to Friday from 9:00 to 18:00, and takes contact forms from the personal area.

Directorial decree of 4 August 2026, article 5(1) and (2); measure page on the MIMIT website; Invitalia's interactive guide, section Generazione domanda e allegati.

Submission code and application preparation code

The decree calls the code the procedure issues once the digitally signed application has been uploaded, and which is needed to submit it, the application preparation code (codice di predisposizione domanda, article 5(2)(a), point 4). At submission the applicant enters it in the procedure (point (b)(2)).

Invitalia's guide calls it the submission code (codice di invio): in the step "Generazione codice di invio" the unique code for the actual submission is generated, and it must be typed by hand, not copied and pasted, into the submission desk. The two texts therefore describe the same step: a code issued at the end of compilation and required to submit the application.

Directorial decree of 4 August 2026, article 5(2)(a), point 4, and (b), point 2; Invitalia's interactive guide, section Generazione domanda e allegati.

Certificate of submission and CUP

On submission the procedure issues the certificate of submission as a non-editable PDF, and the platform assigns the unique project code (CUP). The CUP must appear on every expense document connected to the subsidised programme: the disbursement request is sent with the invoices and the proof of payment, and the invoices must carry the CUP and the identification code of the subsidised service or product.

Invitalia's guide to the personal area, which applies to every incentive managed on the platform, states that the desk page lists the submitted applications: the detail of each one shows a summary of the data, the CUP codes where the incentive provides for them and the desks available for the next phases, and the current phase is looked up from the protocol number.

Ministerial decree of 18 July 2025, article 7(5); directorial decree of 4 August 2026, article 5(2)(b), point 3, and article 7(4)(a); official MIMIT FAQ, section 2, no. 37; Invitalia's guide to the personal area, paragraphs 2.1, 2.3 and 2.4.

Chronological order and exhaustion of funds

Applications are admitted to the assessment in the chronological order of submission. What counts is the moment the application is submitted with the code, not when it was filled in.

If the applications submitted exhaust the funds before the closing date, the Ministry announces it and closes the window. Applications submitted before the closure that have no financial cover are suspended until any savings are established; if no further funds become available they lapse, with a notice that may cover several applications at once. Without exhaustion, the window closes at 12:00 on 20 January 2027. The dates are also summarised on the measure's page.

Ministerial decree of 18 July 2025, article 7(7) and article 8(1); directorial decree of 4 August 2026, article 5(1) and (7), and article 6(1).

One application only

Each applicant may submit one application only. The limit applies to the individual legal entity: two separate companies of the same single undertaking may each submit an application, while the de minimis ceiling is calculated on the single undertaking.

Invitalia's guide states that the application can be sent only once, except that a new one may be submitted if the first is rejected after assessment, but not when the window closes because the funds are exhausted. It also states that an application already sent can be submitted again only after a formal cancellation request, handled through the dedicated withdrawal desk (sportello di rinuncia).

While the application is still being filled in, Invitalia's guide to the personal area states that it can be edited or cancelled from the desk page. For the voucher, the guide to filling in the application warns that the "Modifica dati" command discards any attachments already uploaded.

Ministerial decree of 18 July 2025, article 7(5); directorial decree of 4 August 2026, article 5(6); official MIMIT FAQ, section 2, no. 13; Invitalia's interactive guide, section Generazione domanda e allegati; Invitalia's guide to the personal area, paragraph 2.1.

Assessment and grant

The Ministry, supported by Invitalia, examines the applications in chronological order, checking:

  • that the documents sent are complete and in order;
  • that the eligibility requirements and conditions are met;
  • that the chosen suppliers are in the list of approved suppliers;
  • that the services and products are in the same list and match the spending plan.

The checks are completed within 60 days of submission. The term is longer if the Ministry notifies grounds for rejection or asks for clarifications; for applications suspended for lack of funds it runs from the notice that funds have become available.

The Ministry may ask for clarifications or additional documents on the data and documents provided. They must be sent within the term stated, on pain of forfeiture of the application; meanwhile the assessment terms are suspended. The PEC address given in the application is used for communications about the grant.

If the outcome is negative, or if the National State Aid Register shows the de minimis ceiling exceeded, the Ministry notifies the reasons for not accepting the application under article 10-bis of law no. 241 of 7 August 1990. With a positive outcome, and once the aid is recorded in the National State Aid Register, the Ministry adopts the grant decision, which may cover several applications at once.

Ministerial decree of 18 July 2025, article 7(3)(f) and article 8(1), (2), (3) and (4); directorial decree of 4 August 2026, article 6.

After the grant

  • Subscription: the contract with the supplier is signed after the application and within 30 days of the notice of the grant; within 60 days of the same date the signature is notified through the online procedure, using the model the Ministry makes available on its portal, on pain of forfeiture.
  • Direct purchase: expenses and payments within 12 months of the notice of the grant; down-payment invoices are allowed, provided they postdate the application.
  • Acquisition method: the method stated in the application cannot be changed, neither from direct purchase to subscription nor the other way round.
  • Invoices: each one, down payment or balance, carries the CUP and the identification code of the product or service.

The disbursement request, the documents to attach and the terms are in the guide on disbursement and reporting.

Ministerial decree of 18 July 2025, article 8(5); directorial decree of 4 August 2026, article 4(4) and (5), article 7(4)(a) and article 8(4); official MIMIT FAQ, section 1, no. 53; application form, undertakings.

Application checklist

Each row gives a check and its source. In the tables DM is the ministerial decree of 18 July 2025, DD the directorial decree of 4 August 2026, FAQ the official MIMIT FAQ (section and number), Form the template application form, and Guide Invitalia's interactive guide to filling in the application (version of 28 October 2026). A row that cites the Guide alone reports Invitalia's indication, not a rule of the measure.

Before filling in the application

CheckSource
Digital identity (SPID, CNS or CIE) for whoever accesses the procedureDD art. 5(2)(a.1); FAQ s. 2 no. 30
Valid digital signature for whoever signs the form: legal representative, self-employed applicant or registered special attorney; a person delegated to fill in the application does not signDD art. 5(2)(a.3); FAQ s. 2 no. 32
Active PEC mailbox, required to submit the applicationDD art. 5(2)(a.2)
Company entered in the Companies Register recorded in Anagrafica e Deleghe before the application (the self-employed are not recorded there)Slides of the MIMIT webinar of 15 October 2026, nos. 13 and 15
Delegation to fill in the application granted in Anagrafica e Deleghe, if someone other than the legal representative fills it inFAQ s. 2 no. 31
Size data (staff in annual work units, turnover, balance sheet total) and de minimis aid already received by the single undertaking (requirements and de minimis)Form, declaration a); DD art. 6(4); FAQ s. 2 no. 13
Fixed connectivity contract with a minimum download speed of 30 Mbps, in force on the date of the application; mobile networks do not countDM art. 4(1); FAQ s. 2 nos. 10 and 11
Catastrophe insurance in place and self-declaration ready, for companies (catastrophe insurance)DD art. 5(3)(i); FAQ s. 2 no. 30
Offers from approved suppliers, signed by the supplier, with identification codes, cost items, starting position and improvement (supplier offer)DD art. 5(4); FAQ s. 2 no. 35
Spending plan of at least 4,000 euro net of VAT, with macro-category E within 30% and connected to at least one other service in the plan (spending plan)DM art. 5(5); DD art. 4(2)(e) and (6); Guide
Programme not started: no contract, order confirmation, invoice or payment, down payments included, before the applicationForm, declaration i) and note 2; DD art. 4(5); FAQ s. 2 no. 25

For an offer from Aegister drawn up on the template: Offer request.

While filling in the application

CheckSource
Starting position and expected improvement described consistently with the starting position stated in the offersDD art. 5(3)(d) and (4); Guide
Programme duration: 1 to 12 months with direct purchases only, 24 months with a subscriptionFAQ s. 1 no. 55; FAQ s. 2 no. 33
Site where the spending plan mainly takes effect, even if it covers several local unitsDD art. 5(3)(b)
For each item, type, supplier, identification code and description as stated in the offer; amounts net of VATDD art. 5(3)(e) and (f); FAQ s. 1 no. 57; Guide
Acquisition method for each item (direct purchase or subscription), which cannot be changed after submissionDD art. 4(4) and art. 8(4)
Declarations read one by one: they are made as a sworn statement (dichiarazione sostitutiva di atto notorio)DD art. 5(3); Form, declarations a) to o)

The Cyber Check-up describes the current security situation and can serve as a basis for describing the starting position.

Generazione domanda e allegati (application and attachments)

CheckSource
Application form in the latest version downloaded, not edited, digitally signed and uploaded againDD art. 5(2)(a.3) and (a.4); Guide
Validity of the digital signature checked with the AgID service named in the guideGuide
Offers signed by the supplier (digitally, or by hand with the signer's identity document) and then digitally signed by the person signing the application; the last digital signature is the applicant'sGuide
Self-declaration on catastrophe insurance, for companies: the model allows a digital signature or a copy of an identity document, the guide asks for a digital signature for the uploadSelf-declaration model; Guide
Power of attorney, if an attorney signs; for the self-employed, a digitally signed delegation if the person filling in is not the signerFAQ s. 2 no. 32; Guide
All mandatory attachments uploaded, a condition for sendingGuide
Changes made before uploading the attachments: "Modifica dati" deletes themGuide
Application preparation code (submission code) written down for the submissionDD art. 5(2)(a.4); Guide

Submission from 10 November

CheckSource
Submission from 12:00 on 10 November 2026 and by 12:00 on 20 January 2027, unless the window closes early because funds run outDD art. 5(1) and (7)
Submission desk reached from the notice on the desk page of the personal areaGuide
Code typed by hand, not copied and pastedGuide
Certificate of submission downloaded and keptDD art. 5(2)(b.3)
CUP written down and passed to the suppliers, who put it on their invoicesDD art. 5(2)(b.3) and art. 7(4)(a)

After submission

CheckSource
PEC and personal area checked regularly: clarifications and additional documents must be sent within the term stated, on pain of forfeitureDM art. 7(3)(f) and art. 8(2)
Orders, invoices, payments and subscriptions only after submission: earlier expenses cannot be subsidisedDD art. 4(5); FAQ s. 2 no. 25
Subscription signed within 30 days of the notice of the grant and notified within 60 daysDD art. 4(5); DM art. 8(5)
Direct purchases made and paid within 12 months of the notice of the grantDD art. 4(4)(a)
Invoices with the CUP and the identification codeDD art. 7(4)(a); FAQ s. 2 no. 37
Application rejected: a new application is possible, unless the window has closed because the funds ran outGuide
Application to withdraw: cancellation request through the withdrawal deskGuide

References

This article was reviewed with AI tools for proofreading and error checking. Despite these checks it may contain inaccuracies: for compliance decisions, always refer to the official texts.

Self-assessment · NIST CSF 2.0 · ISO 27001

Cyber Check-up

A self-assessment that returns your company's cyber profile: its security posture and the recommendations to mitigate risks and start your cybersecurity journey.

Our service

Aegister services for the voucher

The identification codes of our services to enter in the offer and in the application, and how we prepare the offer in the format the measure requires.

Learn more
Share this post:

Related news