From 20 October 2026, at 12:00, you can fill in the application for the MIMIT Cloud & Cybersecurity Voucher. Submission runs from 12:00 on 10 November to 12:00 on 20 January 2027, or until the funds run out, and applications are assessed in chronological order. The non-repayable grant covers 50% of eligible spend, up to 20,000 euros, for SMEs and self-employed workers buying cloud services and IT security from suppliers on the ministry's list. If you plan to move your management software to the cloud, or to replace firewalls and backups, choose supplier and quote before filling in the form: the quote is an attachment.
What the measure provides
- The budget is 150 million euros, of which 71,065,813.34 are reserved for spending plans in Abruzzo, Basilicata, Calabria, Campania, Molise, Puglia, Sardinia and Sicily.
- The grant is non-repayable: 50% of eligible expenses, up to 20,000 euros. The plan needs at least 4,000 euros of eligible expenses, so the minimum grant is 2,000 euros. It is de minimis aid (Regulation (EU) 2023/2831).
- The grant is paid after the spend, in one or two instalments (the first once at least half of the approved plan is spent); the request cannot be made earlier than three months after notice of the award.
Who can apply
SMEs and self-employed workers anywhere in Italy can apply.
- Businesses must be active in the Business Register, not in voluntary liquidation or liquidating insolvency proceedings, and compliant with the compulsory insurance against natural disasters and catastrophic events, which they declare in the application.
- Self-employed workers not registered in the Business Register need a VAT number and, if the profession requires it, membership of the professional body.
- At the time of application you need a connectivity contract of at least 30 Mbps download; according to MIMIT's FAQ, a mobile data SIM does not count. Each applicant can submit one application only.
Filling in and submitting
Nothing is submitted on 20 October: the chronological order counts from submission. From that day you enter data and attachments, sign the PDF form with a digital signature and upload it: the system issues a preparation code. From 10 November you enter the code and the application counts as submitted, with a receipt and the CUP (project code). Access is with SPID, CIE or CNS (Italian digital identity) and you need an active PEC (certified email) address.
According to MIMIT's FAQ, the digital signature is the legal representative's or a registered special attorney's. A consultant can fill in and submit only with a delegation registered beforehand in the Anagrafica e deleghe section of Invitalia's platform. If the funds run out, MIMIT closes the counter: applications without cover stay suspended pending savings and, without further resources, lapse.
What you can buy
- Security hardware: firewalls, routers and switches, IDS/IPS systems.
- Security software: antivirus and antimalware, network monitoring, encryption, SIEM, vulnerability management.
- Cloud IaaS and PaaS: virtual machines, storage and backup, network and security (VPN, DDoS), databases.
- SaaS: accounting, HR, ERP, CMS and e-commerce, CRM; ERP and CRM only as a cloud service.
- Configuration, monitoring and ongoing support, including professional services but not training: up to 30% of the plan and tied to the other purchases.
Purchases can be direct, by subscription or both. For direct purchases, expenses and payments must both fall within 12 months of notice of the award. A subscription lasts at least 24 months and the fees of the first 24 are eligible: it must be signed after the application and within 30 days of the award, and reported within 60 days, or the grant lapses. Only expenses incurred after the application count, and after submission you cannot switch from direct purchase to subscription, or the reverse. Products similar to those in use, upgrades without substantial improvements and licence extensions or added users are excluded. Invoices and proof of payment must show the CUP and the product code.
What it means for your company
An example: management software on a server in the office and backups made by hand. A cloud service with managed backups, or a firewall that is missing today, can qualify if the quote explains how they are new or more secure than what you use.
- Write down what you have today in security, backup and cloud software: the application declares your starting point and every quote must describe it.
- Look up suppliers on the list and ask for a quote with codes and cost items.
- Choose the purchase mode before submitting and decide who logs in and who signs.
- Fill in the application and upload the signed form from 20 October, so that on 10 November at 12:00 you only enter the code.
Where we start
The voucher touches our work on internal platforms and cloud software: multi-user platforms with roles and permissions that integrate with the systems in use. If you ask us for an opinion before collecting quotes, we start from the analysis: where the management software runs today, who accesses what, where the backups end up, which systems talk to each other.
Then we check that each quote carries the list's codes, the cost items and the starting point, and we write down before submission which items go into direct purchase and which into a subscription. Direct purchases close within 12 months of the award, so we propose a phased roadmap with the dates written before we start; for subscriptions we also work out the cost from the twenty-fifth month, when the grant no longer applies.
We cannot guarantee the outcome: the funds are limited and the checks are MIMIT's.
What we do not know yet
- When the application form and the link to the procedure will come out: the decree promises adequate notice, the measure page does not show them yet, and the FAQ page announces an offer template.
- How long the funds will last: MIMIT's pages give no estimate, and the decree of 4 August does not say how the reserve for the eight southern regions combines with the chronological order.
If you want us to look at your starting point before you ask for quotes, write to us or see what we do on internal platforms and cloud software.
Sources
- MIMIT: Sostegno alla domanda di servizi di cloud computing e cyber security (7 August 2026)
- MIMIT: Decreto direttoriale 4 agosto 2026, termini e modalità di presentazione delle domande (7 August 2026)
- MIMIT: Sostegno domanda servizi di cloud computing e cyber security, risposte alle domande frequenti (1 October 2026)
- MIMIT: Decreto ministeriale 18 luglio 2025, disciplina degli interventi (2 December 2025)
- MIMIT: Decreto direttoriale 29 luglio 2026, elenco dei soggetti abilitati alla fornitura (30 July 2026)
- Invitalia: Elenco dei fornitori abilitati (pagina di accesso)
