Alloggiati Web: complete 2026 guide for Italian short-term rentals

Alloggiati Web is the online portal of the Italian State Police (Polizia di Stato) through which every accommodation in Italy — hotels, B&Bs, vacation rentals, agriturismi, hostels and short-term lets — is required by law to report the personal data of guests who stay overnight. It is a public-security obligation under art. 109 of TULPS (Royal Decree 773/1931) and subsequent amendments.

In this guide we cover what Alloggiati Web is, who is required to use it, how to register, how to transmit guest forms within 24 hours, the penalties, the most common FAQs and how to automate the entire process if you manage multiple properties.

What Alloggiati Web is in short

Alloggiati Web (alloggiatiweb.poliziadistato.it) replaces the old paper-based 'schedine alloggiati'. The host enters guest data — personal details, ID document, dates — and submits it digitally to the competent Questura (police HQ). Submission is mandatory for every overnight guest, regardless of length of stay.

Who must use Alloggiati Web

The obligation applies to anyone running an accommodation activity in Italy, even non-professionally:

• Hotels, residences, hostels, agriturismi, B&Bs and affittacamere.
• Vacation rentals and apartments rented short-term (also private listings on Airbnb, Booking, Vrbo).
• Property managers operating on behalf of owners.
• Family-run extra-hotel accommodation and CAVs (Vacation Houses and Apartments).
• Short-term lets under 30 days regulated by Italian Law 50/2017.

Only tourist leases longer than 30 days and ordinary residential rentals are excluded — they fall under different rules.

How to register on Alloggiati Web

To obtain credentials you must file a written request to the Questura of the province where the property is located. Standard procedure:

1. Fill in the credentials request form (downloadable from alloggiatiweb.poliziadistato.it under 'Modulistica').
2. Attach a copy of the applicant's ID, codice fiscale and chamber-of-commerce visura or equivalent document.
3. Provide property data: name, address, type (CAV, B&B, hotel, short-term let) and CIR/CIN code if any.
4. Deliver the request to the Questura — in person, by certified email (PEC) or via the dedicated portal.
5. Receive credentials by email/PEC (User-ID, password and a digital .cer certificate to install in your browser).

The digital certificate is the trickiest part: it must be installed in the browser you'll use (Chrome, Edge, Firefox). Without it, the portal won't open. Reinstall it whenever you change machine or browser.

The 24-hour rule for guest forms

Guest data must be transmitted within 24 hours of arrival. For stays shorter than 24 hours, transmission must occur on arrival. For large groups the Questura may require advance notice.

Practical example: if a guest arrives Monday at 22:00, you have until Tuesday at 22:00 to file. The portal's timestamp is authoritative in case of audit.

What goes on a guest form

• Type of guest (single, head of family, group leader, family member, group member).
• Personal data: surname, first name, gender, date and place of birth, citizenship.
• ID document: type, number, place and date of issue.
• Arrival date and expected length of stay.
• Minors are entered as family/group members linked to the head.

Accepted documents for non-EU citizens include passport and residence permit; EU citizens just need a national ID or passport.

The three submission methods

1. Manual entry: fill in the form online, one guest at a time. Fine for 1–2 guests, unmanageable at scale.
2. Text-file upload (.txt format defined by the State Police spec): one row per guest. This is what PMSs use to automate.
3. Web service: direct API integration between PMS and portal, with automatic submission as soon as check-in is confirmed.

Penalties for missed or late filing

Failure to report guest data is punished under art. 17 of TULPS with detention up to 3 months or a fine up to €206. Multiple violations stack. The Questura may also order administrative checks and refer the activity to the Municipality for further verification on CIR/CIN, SCIA and tax compliance.

Enforcement has ramped up, especially for short-term lets booked via OTAs (Booking, Airbnb), thanks to data cross-checks with regional tourism portals (Turismo5, Ross1000) and the new national CIN.

Alloggiati Web vs CIN: two different obligations

Alloggiati Web (Police) and CIN — Codice Identificativo Nazionale (Ministry of Tourism) are distinct. Alloggiati Web is for public security; the CIN is the property identification code introduced by Italian Law 145/2018, to be displayed in listings and on the property. You must comply with both.

FAQ — Alloggiati Web

Do I need to file forms for Italian guests too?

Yes. The obligation covers all guests — Italians and foreigners, adults and minors — regardless of length of stay.

What if a guest doesn't show me their ID?

Guests are required to show valid ID. Without it you can't host them: liability falls on the property manager in case of audit.

Can I file from a smartphone?

The official portal requires a digital certificate and works best from desktop. For mobile filing, use a PMS or service that handles transmission via web service.

What if I make a mistake on a submitted form?

Wrong forms can be cancelled and resubmitted within 24 hours. Beyond that, file a supplementary communication with the Questura.

How much does Alloggiati Web cost?

The portal is free. Costs come only from optional PMS software or filing-delegation services.

How to automate Alloggiati Web with a PMS

Above 5–10 units, manual filing becomes a bottleneck. The standard solution is connecting the portal to your PMS via the official Polizia di Stato web service. When check-in is completed in the PMS, guest data is transmitted automatically within seconds.

All major Italian PMSs — Krossbooking, Slope, Beddy, Octorate, Wubook — support Alloggiati Web filing. HopySuite integrates natively with these PMSs and with international ones (Guesty, Hostaway, OwnerRez, Avantio, Beds24, Smoobu): WhatsApp pre-check-in collects guest data and ID photos, the PMS performs the check-in, the Alloggiati Web portal receives the form. Three steps, no manual work.

Compliance checklist

1. Request credentials from the Questura (1–2 weeks).
2. Install the digital certificate on your work browser.
3. Set up a check-in workflow that collects ID and guest data before arrival (online form or WhatsApp).
4. Integrate the PMS with Alloggiati Web via web service to skip manual entry.
5. Every morning, verify the transmission status of the previous day's forms.
6. Keep digital copies of guest IDs for the period required by privacy law (24 months unless otherwise required).

With a well-designed workflow, a 30–50 unit operator can run the entire Alloggiati Web process in under 2 minutes per check-in, vs 10–15 with manual entry.

Conclusion

Alloggiati Web isn't just bureaucracy: it's one of the most sensitive parts of the check-in flow. A bad procedure generates fines; an automated one frees up time and makes operations scalable. The combination PMS + WhatsApp automation + Alloggiati Web filing is today's market standard for closing check-ins in minutes while staying 100% compliant.