Skip to content

Fatoora Β· Phase 1 Β· Phase 2 Β· Wave 25

ZATCA e-invoicing in Saudi Arabia: the complete guide

ZATCA e-invoicing (Fatoora) is mandatory for every VAT-registered business in Saudi Arabia. Phase 1 has required electronic generation and storage of invoices since 4 December 2021. Phase 2 requires integration with the Fatoora platform in waves by revenue, from Wave 1 on 1 January 2023 down to Wave 25 β€” businesses above SAR 187,500 β€” by 1 February 2027. B2B invoices are cleared in real time; B2C invoices are reported within 24 hours.

Last reviewed 10 September 2026 against zatca.gov.sa. Wave 25 was announced 24 July 2026.

The essentials

Four things to understand before anything else

Most confusion about ZATCA e-invoicing comes from treating it like a tax filing. It is a set of requirements on your invoicing software.

The legal basis

ZATCA issued the E-Invoicing Regulation on 4 December 2020 under the VAT law, followed by the Implementing Resolution with the controls, requirements and technical specifications. It applies to every taxable person resident in the Kingdom and to third parties issuing invoices on their behalf; non-resident taxable persons are excluded.

Two phases, not one

Phase 1 (Generation) started for everyone on 4 December 2021: generate and store invoices electronically. Phase 2 (Integration) started on 1 January 2023 and is rolled out in waves by VAT-liable revenue: connect your system to ZATCA's Fatoora platform and sign every invoice.

Two invoice types, two models

Standard tax invoices (B2B, B2G) are cleared by ZATCA in real time before they are valid. Simplified tax invoices (B2C) are issued immediately and reported to ZATCA within 24 hours. Your software has to handle whichever types you issue β€” many businesses issue both.

It is a system requirement, not a filing

E-invoicing does not replace your VAT return. It changes what your invoicing software must do: locked invoices, mandatory fields, Arabic, a QR code, and β€” in Phase 2 β€” UBL 2.1 XML, a cryptographic stamp, a hash chain and a live connection to Fatoora.

Which obligations apply to you

Three questions settle it

Answer them with your VAT registration status and your VAT-liable revenue for 2022 to 2025.

  1. 1

    Are you registered for VAT in Saudi Arabia?

    If yes, Phase 1 applies to you today, whatever your size: electronic invoices with the mandatory fields, Arabic, a QR code on simplified invoices, no editing or deleting. If no, e-invoicing does not apply β€” but registration becomes mandatory above SAR 375,000 of taxable supplies.

  2. 2

    Did your VAT-liable revenue exceed SAR 375,000 in 2022, 2023 or 2024?

    If yes, you were in Wave 24 or earlier and your Phase 2 integration deadline has already passed (30 June 2026 at the latest). Integrate now.

  3. 3

    Did it exceed SAR 187,500 in 2022, 2023, 2024 or 2025?

    If yes, you are in Wave 25: integrate with Fatoora by 1 February 2027. If your revenue is below that in every year, you remain on Phase 1 for now and should expect a further wave with at least six months' notice.

The timeline so far

  1. 4 Dec 2020

    E-Invoicing Regulation issued by ZATCA (then GAZT)

  2. 4 Dec 2021

    Phase 1 (Generation) in force for all VAT-registered residents

  3. 1 Jan 2023

    Phase 2 (Integration) begins β€” Wave 1, revenue above SAR 3 billion

  4. 31 Dec 2025

    Wave 22 β€” revenue above SAR 1 million

  5. 31 Mar 2026

    Wave 23 β€” revenue above SAR 750,000

  6. 30 Jun 2026

    Wave 24 β€” revenue above SAR 375,000 (the mandatory VAT registration threshold)

  7. 1 February 2027

    Wave 25 β€” revenue above SAR 187,500 (the voluntary registration threshold), announced 24 July 2026

All 25 waves with thresholds, reference years and announcement dates are on the Phase 2 page.

The two phases

Generation, then integration

Phase 1 Β· since 4 Dec 2021

Generation Phase

  • Invoices, credit and debit notes generated by an electronic system β€” no handwriting, Word or Excel
  • All mandatory VAT fields, plus buyer VAT number on standard invoices
  • QR code (5 TLV tags) on simplified invoices
  • Arabic mandatory; a second language optional
  • No anonymous access, no editing or deleting issued invoices, tamper-resistant log
  • Electronic storage, retrievable on request
Phase 1 requirements in full β†’
Phase 2 Β· waves since 1 Jan 2023

Integration Phase

  • UBL 2.1 XML for every invoice and note (or PDF/A-3 with the XML embedded)
  • UUID, invoice counter and previous-invoice hash chain
  • Cryptographic stamp from an onboarded unit holding a Production CSID
  • Standard invoices cleared by ZATCA in real time before issue
  • Simplified invoices reported to ZATCA within 24 hours
  • 9-tag QR code carrying the hash, signature and public key
Phase 2 requirements and all waves β†’

A myth worth killing

There is no such thing as β€œZATCA-approved software”

Dozens of vendor pages say it. ZATCA's own directory page says the opposite.

ZATCA maintains an e-invoicing solution-provider directory of vendors who have passed its qualification process, and describes it as an indicative list that is not considered as an approval by ZATCA. The same page states that ZATCA considers any taxpayer who meets the requirements to be compliant even if their provider is not in the directory, and its FAQ answers β€œshould my system be certified by ZATCA?” with a plain no. Compliance is established per invoicing unit: the taxpayer onboards it on the Fatoora portal, the unit passes compliance checks with sample documents on a Compliance CSID, and only then receives a Production CSID tied to that taxpayer's VAT number. That certificate is not transferable between businesses and must be renewed.

So the useful questions are not β€œare you approved?” but β€œshow me a Production CSID onboarding and a cleared invoice for a real customer”, and β€œwalk me through what I have to do on the portal myself”. We hold ourselves to the same wording: we are not listed in ZATCA's e-invoicing solution provider directory today, and we will not describe AmalERP as 'ZATCA-approved' or 'ZATCA-certified' β€” ZATCA itself says listing is not an approval.

What you do yourself, whatever software you buy

  1. 1.Log in to the Fatoora portal with your ZATCA credentials
  2. 2.Generate a one-time password (OTP) for each invoicing unit you onboard
  3. 3.Enter the OTP into the software within the validity window
  4. 4.Let the unit pass the compliance checks and receive its Production CSID
  5. 5.Repeat for every till, branch system or invoicing instance
  6. 6.Renew CSIDs before they expire and re-onboard replaced devices

Penalties: warning first, then escalation

ZATCA's published violations cover not issuing or storing invoices electronically, missing QR codes or mandatory fields, deleting or amending issued invoices, and failing to integrate by your wave deadline. A first violation normally draws a warning; repeat violations within twelve months are fined on an escalating schedule that the published ranges put between SAR 1,000 and SAR 50,000 depending on the violation.

The full penalty schedule with sources β†’

The fines-cancellation initiative

ZATCA has extended its initiative cancelling fines and exempting penalties to 31 December 2026. Whether it still reaches e-invoicing violations is genuinely unclear: the November 2025 announcement included fines for e-invoicing field-control violations, while the 29 June 2026 extension excludes fines under Article 45 of the VAT Law. We will not pretend to know: confirm it with ZATCA before you rely on it, and integrate regardless β€” the initiative does not remove the obligation.

Choosing software

Eight checks before you buy ZATCA e-invoicing software

Written for business owners. Run them against any vendor β€” including us.

  1. 1

    Establish which wave you are in β€” and whether it has already passed

    Take your VAT-liable revenue for 2022, 2023, 2024 and 2025. If any year exceeded SAR 375,000 your deadline was 30 June 2026; if any year exceeded SAR 187,500 your deadline is 1 February 2027. ZATCA also notifies each wave directly, at least six months ahead. A vendor who cannot tell you your wave from those numbers has not read the notices.

  2. 2

    Ask for evidence of Phase 2 clearance, not the word 'approved'

    ZATCA states that its solution-provider directory is indicative and 'not considered as an approval'. Ask instead: has the software obtained a Production CSID for a real Saudi taxpayer? Can it show a cleared standard invoice with ZATCA's stamp and a reported simplified invoice with the nine-tag QR? Those are the facts that matter.

  3. 3

    Check both invoice types and both notes

    The system must produce standard tax invoices (clearance), simplified tax invoices (reporting), and credit and debit notes that reference the original document β€” in UBL 2.1 XML, with a UUID, an invoice counter and the previous-invoice hash chain, plus a human-readable PDF/A-3 or print layout in Arabic.

  4. 4

    Confirm what you must do yourself

    Onboarding is per invoicing device or system unit, done by the taxpayer on the Fatoora portal: generate an OTP, hand it to the software within the time limit, obtain a Compliance CSID, pass the compliance checks, then obtain a Production CSID. A shop with four tills onboards four units. Ask the vendor to walk you through exactly this before you sign.

  5. 5

    Test offline behaviour and the 24-hour reporting queue

    Retail systems must keep issuing simplified invoices when the internet drops and then report them within 24 hours of issue. Ask what happens to invoices issued during an outage, and what alerts you get if reporting fails.

  6. 6

    Insist on published pricing that includes Phase 2

    Several Saudi vendors sell a cheaper tier that covers Phase 1 only, with Phase 2 clearance in a higher tier or as a per-device fee. Get the total for your number of users and devices in writing, in riyals.

  7. 7

    Make sure the accounting behind the invoice is real

    E-invoicing is only the last step of a sale. If the software does not post the invoice to a double-entry ledger, update stock and produce your VAT return figures, you will be running two systems. Choose the ERP first and the e-invoicing capability as a property of it.

  8. 8

    Get the data ready before the go-live date

    Phase 2 XML fails on missing or malformed data that a printed invoice would have forgiven: customer VAT numbers, structured addresses, item tax categories, unit codes. Clean this before onboarding, not during the last week before your wave deadline.

Where AmalERP stands

ZATCA Phase 1 and Phase 2 compliant

Plenty of vendors are already marketing themselves as β€œZATCA approved”. We would rather be precise. AmalERP issues ZATCA-compliant bilingual invoices with the Phase 1 QR code, and integrates with the Fatoora platform for Phase 2 clearance and reporting.

Available now

  • β€’ Bilingual Arabic/English tax invoices and simplified tax invoices with your 15-digit VAT number and 15% VAT
  • β€’ ZATCA Phase 1 QR code (base64 TLV: seller name, VAT number, timestamp, total, VAT) printed on every invoice
  • β€’ Sequential, non-editable invoice numbering with a full audit trail β€” the Phase 1 control that matters most
  • β€’ Credit and debit notes that reference the original invoice instead of editing it
  • β€’ Structured customer, item and VAT data β€” the fields Phase 2 XML fails on when they are missing
  • β€’ Phase 2 Fatoora integration: UBL 2.1 XML, cryptographic stamp, hash chain, real-time clearance of standard invoices and 24-hour reporting of simplified invoices
  • β€’ Onboarding via Compliance CSID β†’ Production CSID with the OTP from your Fatoora portal

Not offered

  • β€’ We are not listed in ZATCA's e-invoicing solution provider directory today, and we will not describe AmalERP as 'ZATCA-approved' or 'ZATCA-certified' β€” ZATCA itself says listing is not an approval
  • β€’ We do not file your VAT return or represent you before ZATCA

Tell us your wave

Message us with your revenue band, your invoice types and how many tills or branch systems you run, and we will confirm your go-live plan and price in writing.

Ask on WhatsAppSee SAR pricing β†’

FAQ

ZATCA e-invoicing questions

What is ZATCA e-invoicing (Fatoora)?

ZATCA e-invoicing β€” branded Fatoora β€” is Saudi Arabia's mandatory electronic invoicing system. Since 4 December 2021 every VAT-registered resident business must generate and store tax invoices electronically (Phase 1), and since 1 January 2023 businesses have been required, wave by wave, to integrate their invoicing systems with ZATCA's Fatoora platform so that B2B invoices are cleared in real time and B2C invoices are reported within 24 hours (Phase 2).

Who has to comply with ZATCA e-invoicing?

All taxable persons resident in the Kingdom who are registered for VAT, plus any third party issuing tax invoices on their behalf. Phase 1 applies to all of them regardless of size. Phase 2 applies according to the wave you fall into, which is set by your VAT-liable revenue in the reference years ZATCA names for that wave. Non-resident taxable persons are excluded.

What is the latest ZATCA Phase 2 wave?

Wave 25, announced on 24 July 2026. It covers businesses whose VAT-liable revenue exceeded SAR 187,500 in 2022, 2023, 2024 or 2025, with an integration deadline of 1 February 2027. It is the first wave to reach below the SAR 375,000 mandatory VAT registration threshold, so it brings voluntarily registered small businesses into Phase 2.

Is ZATCA Phase 2 mandatory for small businesses?

Yes, once your wave is announced. Wave 24 (deadline 30 June 2026) covered every business with VAT-liable revenue above SAR 375,000, and Wave 25 (deadline 1 February 2027) reaches down to SAR 187,500. A business below every announced threshold is still bound by Phase 1 and should expect a further wave; ZATCA gives at least six months' notice.

What is the difference between clearance and reporting?

Clearance is for standard tax invoices (B2B and B2G): your system sends the signed XML to ZATCA, which validates it, applies its stamp and QR code and returns it β€” only then can you issue it to the customer. Reporting is for simplified tax invoices (B2C): your system signs and issues the invoice immediately and reports it to ZATCA within 24 hours.

Is there such a thing as ZATCA-approved software?

Not in the way vendors use the phrase. ZATCA publishes an e-invoicing solution-provider directory and states that it is an indicative list and 'not considered as an approval by ZATCA'. Compliance is established per invoicing unit when the taxpayer onboards it on the Fatoora portal and it obtains a Production CSID. So 'ZATCA-approved' on a sales page means the vendor has listed itself; it does not mean your installation is compliant.

What are the penalties for not complying?

ZATCA's published violations include not issuing or storing invoices electronically, missing QR codes or mandatory fields, deleting or amending issued invoices, and not integrating with Fatoora by your wave deadline. Enforcement is warning-first, with fines escalating for repeated violations within twelve months β€” the published ranges run from SAR 1,000 up to SAR 50,000 depending on the violation and the repetition. Our penalties article sets out the schedule and the sources.

Does the ZATCA fines-cancellation initiative cover e-invoicing penalties?

ZATCA's initiative cancelling fines and exempting penalties has been extended to 31 December 2026. ZATCA's November 2025 announcement expressly included fines for e-invoicing field-control violations, but its 29 June 2026 extension excludes 'fines imposed under Article 45 of the VAT Law', which several advisers read as the article e-invoicing fines fall under. Treat it as unconfirmed and ask ZATCA or your tax adviser directly rather than relying on a vendor page β€” ours included.

What is a CSID?

A Cryptographic Stamp Identifier β€” the certificate ZATCA issues to each invoicing unit so it can sign invoices. Onboarding produces a Compliance CSID first, used to pass ZATCA's compliance checks with sample invoices and notes, and then a Production CSID used for live clearance and reporting. The taxpayer obtains it with a one-time password from the Fatoora portal, and it must be renewed before it expires.

Do I need special hardware?

No. Phase 2 is met by software: an ERP, an accounting package, a POS or an e-invoicing middleware that implements the XML, stamping and API integration. What you do need is one onboarded unit per invoicing device or system, so a multi-till shop has more onboarding work than a single-invoicer trading company.

Can I keep using QuickBooks, Xero or Excel in Saudi Arabia?

Excel and hand-made templates fail Phase 1 outright. Global accounting tools vary: some have added Saudi localisations or partner integrations for Phase 2, others rely on third-party connectors, and several do not produce Arabic invoices at all. Whatever you use, the test is the same β€” can it onboard with Fatoora and clear or report a real invoice for your VAT number?

Does AmalERP support ZATCA e-invoicing?

Yes. AmalERP issues bilingual Arabic/English tax and simplified invoices with the Phase 1 QR code, and integrates with ZATCA's Fatoora platform for Phase 2 β€” standard invoices are cleared in real time and simplified invoices are reported within 24 hours, from a unit onboarded with a Production CSID. We are not listed in ZATCA's solution-provider directory and do not call ourselves 'ZATCA-approved', because ZATCA says listing is not an approval; what matters is your onboarding, which we walk you through.

What should I do if my wave deadline has already passed?

Integrate as soon as possible rather than waiting for a notice. ZATCA's enforcement is warning-first for a first violation, and a documented, dated plan to onboard is a far better position than none. Start with clean master data and a system that can obtain a Production CSID, because that is the step that cannot be skipped.

This page is general information, not tax advice. ZATCA announces new waves and updates its guidelines regularly; confirm dates, thresholds, penalties and the solution-provider directory on zatca.gov.sa before making compliance decisions. Last reviewed 10 September 2026.

Get your invoicing ready for your wave

7-day free trial, no credit card required. ZATCA plans from SAR 599/year.

No credit card required Β· 200+ businesses across the Gulf and beyond.