Italy’s Ministry of Enterprises and Made in Italy (MIMIT) has opened one of the most concrete measures of recent months for the digitalisation of small and medium-sized businesses: the Cloud & Cybersecurity Voucher, a non-repayable grant covering 50% of eligible costs, up to €20,000, for SMEs and self-employed professionals across Italy. The total budget is €150 million, with over €71 million reserved for the southern regions (Abruzzo, Basilicata, Calabria, Campania, Molise, Puglia, Sardinia and Sicily).
But one detail changes everything: applications are assessed on a first-come, first-served basis, in chronological order of submission. It is not the best project that wins, but the one that arrives first with a complete, correct application. With a limited budget and a wide pool of applicants, being ready on day one is not an advantage: it is the condition for not being left out.
Two dates to mark, not one
The process runs in two distinct phases — and this is where many get confused.
20 October 2026, 12:00 — Preparation. The MIMIT platform opens: you log in with SPID, CNS or CIE, enter your data, upload the attachments and the suppliers’ quotes, generate the application as a locked PDF and sign it digitally. The system then issues the application predisposition code. Important: this phase does not count as submission. It is only the preparation.
10 November 2026, 12:00 — Submission. Only from this moment is the application formally sent, by entering the code obtained in the previous phase. The window stays open until 12:00 on 20 January 2027, but with first-come, first-served assessment, hours matter more than weeks.
The three weeks between 20 October and 10 November are the real room for manoeuvre: the time to build a solid application before the race begins. The review is completed within a maximum of 60 days from submission.
What you need to have ready
Even before the project itself, there are eligibility requirements without which the application is simply inadmissible:
- SPID, CNS or CIE of the legal representative and a digital signature;
- an active certified email (PEC) as the company’s official address for all communications;
- connectivity with a minimum download speed of 30 Mbps;
- suppliers listed in the MIMIT register: costs towards suppliers outside the register are not eligible.
Two of these are the ones that, in practice, cause the most last-minute trouble. They are worth pausing on.
First: 30 Mbps connectivity
The decree is explicit: eligible applicants are those who, at the time of submission, hold a contract for connectivity services with a minimum download speed of 30 Mbps. This is not something to sort out later: it is a condition of access, to be declared in the application and documented with a copy of the contract at the disbursement stage. Checking today that your contract meets this threshold avoids discovering a problem when there is no longer time to fix it.
Second: the accredited supplier’s quote, already in the application
This is the most underestimated point. The decree requires that the quotes for the purchase of services and products be submitted together with the application. And these quotes must meet precise conditions: they must carry the identification codes assigned to the products and services by the MIMIT register, and include a description of the company’s starting point and of the upgrade guaranteed by the project.
In practice, you cannot submit a serious application on 10 November if the supplier’s quote is not already prepared, with the correct codes and the required technical description. And the supplier must be listed in the official MIMIT register (maintained with the support of Invitalia): a quote from a non-accredited party cannot be used. Building this quote takes time and technical expertise — and it is the part best tackled during the preparation weeks, not at the deadline.
What gets an application rejected
Beyond the requirements, some choices lead straight to exclusion:
- Non-improving solutions. Costs for products with performance similar to those already in use, for a simple version upgrade, for extending licences or increasing seats and users are not eligible. The project must introduce new or more advanced solutions.
- Fixed purchase method. You choose between direct purchase (costs within 12 months of the grant) and a subscription of at least 24 months. Switching from one method to the other after submission is not allowed.
- Incomplete documentation. No additions are allowed after submission: a missing attachment or a project description judged inadequate leads to exclusion. Eligible spending cannot be below €4,000, and each applicant may submit only one application.
How to move now
The real deadline is not 10 November: it is today. The weeks before the opening are when you build an application that holds up — a coherent spending plan, quotes with the right codes, complete documentation — so you can submit at the first available moment. On our dedicated Cloud & Cybersecurity Voucher page you’ll find the full requirements and the 23 service codes.
FinGreenTech is a supplier listed in the MIMIT register (ID VCCFA2600001258), with services admitted across all five categories set out in the decree: from security (firewall, SIEM, vulnerability management) to cloud IaaS, PaaS and SaaS, through to professional configuration and support services. But we are also the consultant who builds the application: a single point of contact, from the initial assessment to the quote to attach, all the way to project delivery.
If you want to reach 10 November with your application ready, the time to start is now.
Sources: Ministerial Decree of 18 July 2025 and MIMIT Directorial Decree of 4 August 2026. The official text published on mimit.gov.it and incentivi.gov.it prevails.
