Cloud and Cybersecurity Voucher

What it funds

This is a grant on cloud computing and cybersecurity services: infrastructure and platform in the cloud, managed software, firewalls and intrusion detection systems. The rate, the ceiling and the minimum threshold are in the card above and are worth reading carefully, because they are two different quantities that almost every listing shows as a range. The ceiling set by the ministerial decree of July 18, 2025 caps the grant, the threshold is a minimum on the spend: anyone aiming at the full grant should budget roughly twice that amount. Applications are handled in chronological order of submission, and MIMIT can close the measure before the deadline if the money runs out.

Software as a service is eligible, from the management system to the CRM and the online shop.

Requirements and what is left out

• Anyone working with an unlisted supplier: spend counts only towards suppliers listed on the register MIMIT keeps, every service carries an identifying code that has to appear on the quote, enrolment closed on May 27, 2026, and the directorial decree of July 29, 2026 declares the register unmodifiable. No rewriting of the invoice header gets around it.
• Training, even inside an otherwise eligible platform.
• Version upgrades, extra seats and license extensions on contracts already running.
• Anyone without a connectivity contract of at least 30 Mbps download, or not complying with the catastrophe insurance obligation: both are required at application time.
• Anyone building the plan on consultancy: ancillary services count only for a minority share.
• Anyone who needs more time: a direct purchase runs over twelve months, a subscription is eligible if it lasts at least two years, and eligible spend stops at those first two.
• Anyone who has already used up their de minimis allowance: the MIMIT page grants the contribution under that regime, so it counts against the same three-year ceiling as every other de minimis aid received. On combining it with aid outside de minimis on the same costs the source is silent, so I do not present it as allowed.

How to apply

1. Check the two entry requirements: connectivity and catastrophe insurance.
2. Pick the services from MIMIT's supplier register and ask for a quote carrying the identifying code of each service.
3. Pre-fill the application: pre-filling opens before the submission window.
4. Submit with SPID, CNS or an electronic identity card as soon as the window opens. One application per applicant.

It runs through MIMIT's own procedure and not through Invitalia's portal, which with Infratel provides technical support only. The money comes from the 2014-2020 cohesion fund and not from the national recovery plan, and just under half of it is reserved for companies in Abruzzo, Basilicata, Calabria, Campania, Molise, Puglia, Sardinia and Sicily.

What this budget builds

This is a budget for one targeted piece of work, not for rewriting a system. I move to the cloud the archive that today lives on a server under a desk, with backups that are verified and not merely scheduled; I separate identities and permissions, where most incidents begin; I leave an access log somebody genuinely reads. If the company falls under the NIS2 directive, it is worth lining the two up rather than paying for them twice.

This entry is informational and is not advice: I do not handle grant applications, and before committing to a purchase it is worth reading the official source above or talking to whoever files the application.