Business PEC and Digital Signature in Rome: How to Set Them Up

In a nutshell

If you run a business or hold a Partita IVA (Italian VAT number — required to invoice as a self-employed worker) in Italy, the law requires two digital tools: PEC (Posta Elettronica Certificata — certified email, legally valid in Italy), which carries the same weight as a recorded-delivery letter with proof of receipt, and a digital signature, which is the legal equivalent of a handwritten authenticated signature. Without a PEC address your company cannot even be registered in the Registro Imprese (Italy's official business register). Both can be set up online in one to three days, even if you're a foreign national.

At a glance

PEC cost	5–25 EUR/year
Digital signature cost	30–80 EUR (three-year USB token) or 25–50 EUR/year (remote signature)
PEC timeline	A few minutes (with SPID) to 24–48 hours
Digital signature timeline	Same day (remote) or 3–7 days (USB token delivery)
Where	Online via AgID-accredited providers (Aruba, Namirial, InfoCert, Poste, Register)
Registration	Registro Imprese within 30 days of activation

What PEC is and who is legally required to have one

PEC is a certified email system that verifies the sender's identity, the recipient, the exact date and time of delivery, and the integrity of the message content. The delivery receipts carry the same legal weight as a recorded-delivery letter under art. 48 of D.Lgs. 82/2005.

The following are legally required to have a PEC address:

• All companies (SRL, SPA, SAS, SNC, cooperatives): mandatory since 29/11/2008
• All sole traders: mandatory since 30/06/2013
• All professionals registered with a professional body: lawyers, accountants, engineers, doctors, and others

Since 2020 the PEC address registered with the Registro Imprese or with INI-PEC (the national directory of certified email addresses) serves as your official digital domicile. Public-administration bodies send legally binding notifications and communications to that address. This means you are expected to check it: a PEC notification is legally valid from the moment it reaches your provider's server, even if you never open the inbox.

Penalties for non-compliance are real: for companies they range from €206 to €2,064; sole traders also face a 45-day suspension of any ongoing procedures at the Registro Imprese.

Choosing a PEC provider

The main AgID (Agenzia per l'Italia Digitale — Italy's digital-agency body that accredits certified-email and digital-signature providers) accredited providers offer different prices and features. For a small business, the base plan is more than enough.

Provider	Base annual price	Storage
Aruba PEC	5–25 EUR	1–8 GB
Namirial PEC	6–30 EUR	1–5 GB
InfoCert (Legalmail)	25–60 EUR	5–15 GB
Poste (PostaCertificata)	5.50–30 EUR	100 MB – 8 GB
Register PEC	10–30 EUR	1–5 GB

You can choose an address on the provider's domain (e.g. yourcompany@pec.it), use your own domain if you own one, or apply for the free Chamber of Commerce PEC via impresa.italia.it.

For identity verification you can use SPID (Italy's digital identity for accessing online public services) or CIE (Italian electronic ID card) — both instant — or opt for a video-identification call with an operator (15–20 minutes), or in-person recognition. If you're a foreign national without SPID, video-identification is the fastest route: all you need is a valid passport.

Within 30 days of activation you must register your PEC address with the Registro Imprese (for companies) or INI-PEC (for registered professionals). Sole traders can do this through ComUnica Impresa in un giorno.

What a digital signature is and what it's used for

A digital signature is a qualified electronic signature based on a certificate issued by an AgID-accredited trust-service provider under EU Regulation 910/2014 (eIDAS). It carries the same legal force as an authenticated handwritten signature.

You need one to file the annual financial statements with the Registro Imprese, sign company deeds and chamber-of-commerce extracts, execute electronic contracts with clients and suppliers, communicate with Agenzia delle Entrate (Italy's tax-revenue agency) via Entratel or Fisconline, file tax appeals, and much more.

There are three main formats:

• USB token (smart card): a physical device containing the certificate. Costs 30–80 EUR for three years. Requires a USB port or card reader.
• Remote signature: the certificate is held on the provider's server; you sign via a web portal or app using an OTP code. Costs 25–50 EUR/year, no hardware needed.
• Automatic signature: for high-volume use cases, such as bulk e-invoicing.

For the most common needs — annual accounts, company deeds, communications with public bodies — a remote signature is the most convenient option.

How to activate a digital signature: step by step

Choose a provider (Aruba, Namirial, and InfoCert are the most widely used), purchase a kit on their official website, then complete identity verification. By law, a qualified digital signature requires direct or equivalent identification:

• In-person recognition at a participating tobacconist or newsagent (extra cost of €10–15, immediate)
• In-person recognition at a participating post office
• Video-identification call with an operator (15–30 minutes, often free)
• Identification via SPID or CIE

If you're a foreign national, video-identification is the standard route: you need your passport and Italian Codice Fiscale (Italian tax ID — your personal 16-character code used for almost everything).

For a USB token, the kit is shipped to an Italian address and arrives in 3–7 days. Remote signature activation is immediate. The first time you use it the system asks you to set a PIN — keep it safe. Anyone who knows your PIN can sign documents on your behalf with full legal effect.

You can verify signatures on documents using the AgID signature verifier or your provider's app. Documents signed with a USB token produce files with a .p7m extension (CAdES format) or signed PDFs (PAdES format).

Mistakes to avoid

1. Don't use ordinary email for legally binding communications with public bodies. Gmail, Outlook, and similar services have no certified-email status: a message sent via regular email does not produce any legal effect as a notification.
2. Never write your signature PIN on the device itself. If you lose the token, whoever finds it can sign documents in your name with fully binding legal consequences.
3. Don't buy digital signatures at suspiciously low prices with no identity verification. A digital signature issued without a proper identification process is not a qualified electronic signature and does not carry the same legal weight. Be wary of "digital signature for €10 in 5 minutes, no video-ID required" offers.

Special cases

Foreign legal representative not resident in Italy: PEC can be activated from abroad via video-identification with a passport. The postal address can be the registered address of the Italian company. For the digital signature, Aruba and InfoCert accept identification with a foreign passport plus an Italian Codice Fiscale via video-ID — but verify this before you purchase.

Proxy to an accountant: if you can't manage the activation yourself, you can grant a special power of attorney (notarial deed or authenticated private deed) to an Italian commercialista (accountant), who will obtain the PEC and digital signature in your name for company compliance purposes. Bear in mind this is not the same as having your own personal signature: the accountant signs "on behalf of" you.

Renewal: both PEC addresses and digital signatures expire. Without renewal, the PEC inbox becomes inactive and the digital signature can no longer be used for new documents. Set a reminder a few months before the expiry date.

Official sources

• AgID — PEC
• AgID — List of accredited PEC providers
• AgID — Qualified electronic signature
• AgID — Active trust service providers in Italy
• INI-PEC — National index of PEC addresses
• Registro Imprese — InfoCamere
• Impresa Italia
• AgID digital signature verifier

Legal references: DL 185/2008 art. 16 conv. L. 2/2009; DL 179/2012 art. 5 conv. L. 221/2012; DPR 68/2005; D.Lgs. 82/2005 (CAD); Regolamento UE 910/2014 (eIDAS); DL 76/2020 conv. L. 120/2020 art. 37; Linee guida AgID 23/03/2020.