In short
Many SMEs start by buying a piece of software and, a year later, still have their data scattered across several systems. In this article I explain why the first step is to map the processes that generate margin, in which order it pays to act (security, integration, automation, opening up to customers and suppliers), how to use Italy’s super-depreciation and the Cloud and Cybersecurity Voucher without letting them drive the project, and the most common mistakes.
Estimated reading time: 7 minutes
When a business owner calls us to talk about “digital transformation”, they usually already have a purchase in mind: a new ERP, a CRM, a customer portal, sometimes an artificial intelligence project. The right question is almost never which software to buy.
The right question is a different one: where is my company losing time and money today?
In the projects we run with limited companies of every size we often see the same script. It starts with the tool, the year’s budget is spent and, twelve months later, the data still sits in three systems that don’t talk to each other, with someone in accounts copying it by hand into an Excel sheet. Digital didn’t fail: it was put in the wrong place.
These notes are for those who run a company with a turnover between 0.5 and 50 million euros and want to understand where to start, in what order to move and how to use the 2026 and 2027 incentives without letting them lead the way.
Why now: companies are moving, and fast
The latest Istat data on Italian companies with at least 10 employees show a clear change of pace: in 2025, 16.4% use at least one artificial intelligence technology (up from 8.2% the year before) and 68.1% buy intermediate or advanced cloud services (Istat, Enterprises and ICT – 2025, in Italian).
Those who stand still don’t stay where they were: they lose ground to competitors and to customers who expect faster quotes, traceable orders and same-day answers.
Then there is security. With the transposition of the NIS2 directive (Legislative Decree 138/2024) many medium and large companies in sectors considered critical have precise obligations, and those who work as their suppliers see them passed on in their contracts.
Even a company outside the scope is now asked by its larger customers how it handles backups, access and incidents.
The first step is not technological: map your processes
Before choosing any tool you need an honest picture of how the company works. Not a hundred-page document: a few weeks of interviews and observation of the flows that generate margin are enough. We almost always start from three questions.
- Where is data re-entered? Every time a piece of information is copied from one system to another (order, customer record, job, invoice) there is a hidden cost and a risk of error.
- Where do people wait? Approvals by email, quotes that depend on a single person, a warehouse that doesn’t know what sales has sold.
- Which figures are decision-makers missing? If finding out the real margin of a job takes three days and two phone calls, the problem is not the accounting software.
This map usually reveals two or three clear priorities. That is where digital pays back first.
A sensible order of action
Every company is different, but the order that works most often is this.
1. Secure the foundations. Tested backups, personal accounts with multi-factor authentication, updates and an incident plan. It’s not the most exciting part, but a week-long ransomware outage wipes out the benefits of any project in one go. We work on this with ISO 9001 and ISO 27001 certified processes.
2. Make the existing systems talk to each other. Often the ERP is fine, and so is the CRM: the problem is that they don’t exchange data. A well-built integration between ERP, CRM, website and e-commerce costs far less than a replacement and frees up working hours straight away.
(We described an example in our article on streamlining company workflows with an ERP, in Italian.)
3. Automate repetitive flows. Only when data is clean and in one place does automation make sense: quotes, payment reminders, management reports and the first artificial intelligence use cases too.
AI applied to wrong data just produces wrong answers faster.
4. Open up to customers and suppliers. Portals for orders and documents, apps for the sales network or for after-sales support. It’s the most visible part, which is exactly why it’s tempting to do it first.
Incentives: use them without letting them lead
This year there are concrete tools in Italy, but they need careful reading.
Super-depreciation. The 2026 Budget Law (Law 199/2025, art. 1, paragraphs 427-436) replaced the Transition 4.0 and 5.0 tax credits with an increase in the cost of new capital goods for depreciation purposes: for tangible assets the increase is 180% on investments up to 2.5 million euros.
It applies to investments from 1 January 2026 to 30 September 2028, also covers intangible assets such as the software listed in Annex V, and requires interconnection with company systems, a sworn technical appraisal, an accounting certification and filings on the GSE platform.
The benefit is a tax one: it should be handled with your accountant.
Cloud and Cybersecurity Voucher. The Ministry of Enterprises has allocated 150 million euros for SMEs and self-employed professionals: a non-repayable grant of up to 50% of eligible costs, capped at 20,000 euros, for cloud and security services purchased from providers listed by the Ministry.
Applications can be filled in from 20 October 2026 and submitted from 12:00 on 10 November 2026 to 12:00 on 20 January 2027, on a first-come, first-served basis (Invitalia, Cloud and cybersecurity voucher, in Italian). With this method, those who arrive prepared on day one have an advantage.
There are also measures for internationalisation and digitalisation, such as the one we described in our article on the SIMEST call for digitalisation (in Italian). The rule stays the same: first the project, then the incentive that funds it. A purchase made only because “there’s a grant” rarely pays for itself.
The mistakes we see most often
- Too many suppliers and no one in charge of the whole. The ERP from one, the website from another, the network from a third. When something doesn’t work, nobody is responsible for the overall picture.
- Projects without an internal owner. Even with the best external partner, you need a person inside the company who decides and has the time to do it.
- No starting indicators. If you don’t measure how long a quote or a monthly close takes today, at the end of the project you won’t know whether it worked.
- Training forgotten. A tool people don’t know how to use ends up in a drawer within three months.
How we work
Our approach is that of a partner, not a licence seller. We start with a process analysis, propose a sequence of steps with clear costs and timelines for each phase, and build what is needed ourselves: integrations, custom software, cloud, security, websites and apps.
When a step isn’t worth it, we say so clearly. If you are considering an incentive, we help you understand which project costs may qualify, leaving the part that is theirs to your tax adviser.
Frequently asked questions
Where should an SME start its digital transformation?
By mapping the processes that generate margin: where data is re-entered, where people wait, which figures decision-makers are missing. Tools come afterwards.
Is it better to replace the management system or integrate it with other systems?
It often pays to integrate the ERP, CRM and e-commerce that already work first. Replacement makes sense when the current system can no longer support the processes or cannot exchange data.
How long before the first results?
A targeted first step, such as an integration or an automation, delivers measurable results within a few months. A full programme develops in phases over one to two years.
Does software qualify for Italy’s 2026 super-depreciation?
Yes, if it is among the intangible assets listed in Annex V to Law 199/2025 and is interconnected with company systems. A sworn technical appraisal, an accounting certification and filings with the GSE are required: check with your accountant.
Who can apply for the Cloud and Cybersecurity Voucher?
Italian SMEs and self-employed professionals, for services from providers listed by the Ministry. The grant covers up to 50% of eligible costs, up to 20,000 euros; applications open on 10 November 2026.
Does security matter even if the company is outside NIS2?
Yes. Larger customers increasingly ask suppliers for guarantees on backups, access control and incident handling, and an IT outage is costly for any company.
Let’s talk
If you want to understand where to start in your company, book a free 30-minute call, with no obligation: we start from your processes, not from a price list.
Don’t put off until tomorrow what you can do today.
Or write to me: posta@swdweb.it
Leonardo Pantaleo
CEO of SWD Group
