Italy’s Cloud & Cybersecurity Voucher: applications open

Since 12:00 on 10 November 2026, small and medium-sized businesses and self-employed workers in Italy can apply for the Italian Ministry of Enterprises and Made in Italy (MIMIT) Cloud & Cybersecurity Voucher: a non-repayable grant of 50% of eligible costs, up to 20,000 euro, from a 150 million euro budget. Applications are assessed in the order they arrive and the window closes at 12:00 on 20 January 2027, or earlier if the funds run out. This is what it covers, what it excludes and how to prepare.

Figures checked on the official MIMIT page (last updated 3 November 2026). Article updated on 11 November 2026. The scheme is run in Italian; this is a plain-language summary, not an official translation.

How the Cloud & Cybersecurity Voucher works

According to the official MIMIT page (in Italian), the rules for the window are set by the directorial decree of 4 August 2026. The aid is a non-repayable grant under the de minimis regime: it covers at most 50% of eligible costs and never exceeds 20,000 euro. The minimum spending plan is 4,000 euro.

The money comes from the 2014-2020 Development and Cohesion Fund. MIMIT states a budget of 150 million euro, with 71,065,813.34 euro reserved for spending plans in Abruzzo, Basilicata, Calabria, Campania, Molise, Puglia, Sardinia and Sicily.

Who can apply

SMEs and self-employed workers anywhere in Italy. When applying you need a connectivity contract with at least 30 Mbps download. Suppliers on the official list can apply too, but they must buy the services from a different supplier.

Which costs are eligible

• Cybersecurity hardware: firewalls, NGFW, routers and switches, IDS/IPS.
• Cybersecurity software: antivirus and anti-malware, network monitoring, encryption, SIEM, vulnerability management.
• IaaS and PaaS: virtual machines, storage and backup, network and security (including VPN and anti-DDoS services), databases.
• SaaS: accounting, HR management, ERP, CMS and e-commerce, CRM (including UCC and PABX solutions).
• Services: configuration, monitoring and support, including professional services, excluding training. They can be at most 30% of the plan and must be linked to other services on the list.

You can buy outright, by subscription or with a mix. Subscriptions must last at least 24 months, and if the contract is longer only the first two years are eligible.

What is excluded

Not eligible: products with performance similar to those already in use, version upgrades with no substantial improvement, and licence extensions or additional seats and users.

Your supplier must be on the MIMIT list

The application must include supplier quotes with identification codes and cost items. MIMIT says the list of approved suppliers was set by a directorial decree of 29 July 2026 and can be consulted on the Invitalia portal. Check that the supplier and the service are listed before you ask for a quote.

The grant is paid in two instalments or in one payment once the plan is completed. The request cannot be made earlier than three months after the grant decision is notified, and checks take up to 60 days.

How to prepare, step by step

1. Check the requirements. Company size, available de minimis allowance, a 30 Mbps connection.
2. Decide what you really need. A new firewall, cloud backup, an ERP or CRM subscription: the minimum is 4,000 euro, so think in terms of a plan, not a single product.
3. Pick suppliers on the MIMIT list and ask for quotes with clear codes and cost items.
4. Prepare access. SPID, CNS or CIE of the legal representative or a delegate.
5. Apply without waiting for the deadline. Applications are assessed in order and the window may close before 20 January 2027.

Check with your adviser. This article summarises the MIMIT page and is not advice: eligibility, cumulation with other de minimis aid and reporting depend on your situation.

Where the voucher meets a cloud and security project

Many eligible costs are things a company has to face anyway: moving office servers to the cloud, backup, VPN, an ERP system or a CRM subscription. Our managed cloud services are the kind of service the scheme describes, but always check the official list for each supplier. To start, read our cloud migration guide for SMEs and the cybersecurity golden rules for SMEs.

For cloud subscription fees in 2027 there is also the proposed cloud tax credit in the draft Budget Law: a different measure, still under parliamentary review.

Frequently asked questions

When can I apply for the Cloud & Cybersecurity Voucher?

From 12:00 on 10 November 2026 to 12:00 on 20 January 2027. Pre-filling opened on 20 October. If funds run out, MIMIT announces that the window is closed.

How much can I get?

50% of eligible costs, capped at 20,000 euro. To reach the cap you need a plan of at least 40,000 euro; the minimum plan of 4,000 euro would give a 2,000 euro grant.

Can an ERP or CRM be funded?

Yes, MIMIT lists ERP, CRM, accounting, HR management, CMS and e-commerce among the eligible SaaS services. Version upgrades with no substantial improvement and extra users on a product you already use are excluded.

Is a one-year subscription accepted?

For subscriptions MIMIT sets a minimum duration of 24 months. Direct purchases have a duration of 12 months.

Written by. The URETECH team: developers and consultants who design and integrate ERP systems, custom software, automation and managed cloud for SMEs. About us and how we work.