Smart Sokrab Header - Updated
e-invoicing in Saudi Arabia FATOORAH

E-Invoicing (FATOORAH) in Saudi Arabia: Your Complete Phase 2 Compliance Guide for 2026

What is FATOORAH Phase 2? FATOORAH Phase 2, also called the Integration Phase, is the stage of Saudi Arabia’s mandatory e-invoicing programme that requires VAT-registered businesses to connect their invoicing systems directly with ZATCA’s Fatoora platform. In short, B2B invoices must first be cleared by ZATCA in real time, while B2C invoices must be reported within 24 hours.

Introduction: E-Invoicing Is Now a Business-Critical Requirement in Saudi Arabia

Saudi Arabia has moved firmly into the digital tax era. At the centre of this shift is the mandatory e-invoicing in Saudi Arabia FATOORAH programme, run by the Zakat, Tax and Customs Authority (ZATCA). Above all, it supports the Kingdom’s Vision 2030 goals: more openness, a smaller shadow economy, stronger protection for consumers, and simpler tax administration.

So, what does this mean for business owners in 2026? Put simply, the message is clear. The final announced wave, Wave 24, reached its 30 June 2026 deadline, and ZATCA’s penalty waiver ended on the same date. As a result, the Kingdom is now in full enforcement mode. In other words, e-invoicing compliance is no longer a future task. It is a present-day operating requirement.

What This Guide Covers

This guide walks through the FATOORAH Phase 2 rules, the wave timeline and thresholds, the technical steps for ZATCA e-invoicing integration, the penalties for non-compliance, and a clear roadmap for getting compliant fast. If your finance systems are not yet linked to the Fatoora platform, our Tax & Zakat Support team can help you close the gap before it becomes costly.

The Evolution of E-Invoicing in Saudi Arabia: From Generation to Integration

ZATCA rolled out e-invoicing in two phases. Each phase builds on the last, and together they form one connected digital invoicing system.

Phase 1 — The Generation Phase (Since 4 December 2021)

First, Phase 1 required all resident taxpayers to stop issuing handwritten invoices, or invoices made with simple text-editing software. Instead, businesses had to create and store tax invoices and notes electronically through approved systems. Key features included:

  • Structured electronic invoice creation and storage
  • Coverage of domestic, zero-rated, and export sales (exempt supplies and imports were left out)
  • A required QR code on B2C invoices, so customers could check them instantly

In short, Phase 1 set a common invoice format and built the digital base. Many businesses met it with fairly small software changes. Because of this, some were later caught off guard by the size of Phase 2.

Phase 2 — The Integration Phase (Since 1 January 2023, Rolled Out in Waves)

Phase 2 sets a much stricter standard. Specifically, it calls for direct, secure integration between a taxpayer’s e-invoicing system and ZATCA’s Fatoora platform:

  • Standard tax invoices (B2B and B2G): sent to ZATCA for real-time clearance first, and only then shared with the buyer — a Continuous Transaction Controls (CTC) model
  • Simplified tax invoices (B2C): reported to ZATCA within 24 hours of issue
  • In addition, invoices must be issued in UBL 2.1 XML or PDF/A-3 (with embedded XML), and must carry a cryptographic stamp, hash value, and UUID

ZATCA rolled Phase 2 out in waves, based on yearly VAT-taxable revenue, and gave each group at least six months’ notice. Also, in May 2026, ZATCA released the third version of its e-invoicing rules and technical guidance, covering tax invoices, simplified invoices, self-billing, and third-party invoicing. In other words, compliance is an ongoing job, not a one-time task.

ZATCA E-Invoicing Integration: Key Technical and Business Rules

Meeting FATOORAH Phase 2 depends on two things: technical setup and business rule checks. In practice, this usually means upgrading your ERP, POS, or accounting system, or instead choosing an e-invoicing solution that connects to it for you.

Technical Requirements for E-Invoices

Your e-invoicing system must be able to:

  • Create invoices in UBL 2.1 XML format (or PDF/A-3 with embedded XML) — plain PDFs, scans, and word-processor invoices do not qualify
  • Add a cryptographic stamp and hash value to prove each invoice is real and unchanged
  • Include a UUID (Unique Universal Identifier) and a running invoice counter on every invoice
  • Fill in all required and conditional fields, such as seller and buyer details, line items, VAT amounts, and, where needed, Purchase Order and Contract ID numbers
  • Finally, finish ZATCA’s onboarding steps, including getting a production CSID (Cryptographic Stamp Identifier), which must be renewed before it runs out

Business Rules and Validation

Beyond formatting, ZATCA also runs a detailed set of checks on data accuracy, completeness, and VAT treatment. So, invoices that fail these checks get rejected, and you must fix and resend them. As a result, high error rates can slow billing and hurt cash flow.

Practical tip: Before you go live, test invoice submission fully in ZATCA’s simulation environment. Also, build a daily check between your accounting records and Fatoora submissions into your month-end routine. Of course, clean books come first — so if your records need work, our Accounting & Bookkeeping team can help you build a solid base.

Common Mistakes to Avoid

Based on patterns seen across KSA businesses during past waves, watch out for these traps:

  1. Assuming Phase 1 covers Phase 2. In fact, a system that “issues e-invoices” often cannot meet Phase 2’s XML, stamping, and clearance rules without extra, specialised work.
  2. Waiting for ZATCA’s notice before you start. Six months passes fast, since ERP changes, vendor choice, testing, and staff training all take time.
  3. Ignoring credit and debit notes. In fact, Phase 2 rules apply to electronic notes just as they do to invoices.
  4. Treating this as an IT-only job. Instead, finance, tax, and IT teams must work together on field mapping, VAT treatment, and error handling.
  5. Skipping post-launch monitoring. For example, rejected invoices, expiring CSIDs, and rule updates all need ongoing attention.

Onboarding Waves, Deadlines, and Revenue Thresholds

ZATCA announced each e-invoicing onboarding wave at least six months ahead, based on yearly VAT-taxable revenue. Over time, the thresholds dropped step by step, so smaller and smaller businesses came into scope. The table below sums up the most recent waves:

announcements, since the programme has steadily moved toward wider coverage.

Consequences of Non-Compliance

ZATCA’s penalty waiver, which let businesses fix past errors without fines, ended on 30 June 2026. So, from 1 July 2026, enforcement applies in full. Published penalties under the FATOORAH programme include:

  • Failing to issue or store e-invoices: penalties starting from SAR 5,000
  • Deleting or changing e-invoices after issue: penalties starting from SAR 10,000

Beyond fines, non-compliance can also slow billing, delay customer payments, harm business relationships, and draw closer checks during VAT audits. So, if your business missed its wave deadline, or you are simply unsure of your status, act now. Early, voluntary fixes are always the safer path. Our VAT Services team can check your exposure and, if needed, manage the fix with ZATCA.

Benefits Beyond Compliance: Why E-Invoicing Strengthens Your Business

While the rules are the main driver, e-invoicing in Saudi Arabia FATOORAH also brings real business value once it is set up well.

Streamlined Operations and Cost Savings

Automating invoice creation, submission, and reconciliation cuts the time and cost of manual work, such as printing, postage, data entry, and error fixes. Also, faster, checked invoicing shortens payment cycles and boosts cash flow. In fact, many businesses find that the integration project sparks wider finance automation. Our AI Business Solutions team often helps clients extend their e-invoicing setup into automated reconciliation, reporting, and document workflows.

Enhanced Accuracy and Reduced Fraud

ZATCA’s checks catch errors before invoices reach customers. At the same time, cryptographic stamps make invoices tamper-evident. As a result, the risk of fake invoices drops sharply, and trust grows with tax authorities, banks, and trading partners alike.

Better Data for Better Decisions

Structured XML invoice data is ready for analysis from day one. So, businesses gain near real-time insight into sales trends, VAT positions, and customer payment habits — insight that paper-based work simply cannot offer. ZATCA itself is heading this way too, with pre-filled VAT returns expected as a longer-term result of the programme.

Preparing for ZATCA E-Invoicing Integration: A Practical Roadmap

Whether you are fixing a missed deadline, setting up a new company, or getting ready for a future wave, the same steady approach applies.

Step 1 — Assess Your Current Systems and Identify Gaps

First, check your invoicing setup against Phase 2 rules. Does your ERP or accounting software support UBL 2.1 XML? Can it link to outside APIs for real-time clearance? Are credit notes, self-billing, and third-party invoicing covered? Then, write down the gaps in both technical ability and internal workflow. For businesses entering the Saudi market, this check should be part of initial setup. Our Business Setup in Saudi Arabia advisors build e-invoicing readiness into market-entry plans from day one.

Step 2 — Select and Implement a Compliant Solution

Next, pick your solution. Because ZATCA’s rules are complex, most businesses work with an e-invoicing provider whose software is already set up for FATOORAH, or hire integration specialists to link their current ERP to the Fatoora platform. When you compare providers, look at their ZATCA track record, their flexibility with your ERP or POS setup, and how well they keep pace with rule updates. If you need an outside technology review first, our IT Consulting & Technology Services team can assess vendors and options for you.

Step 3 — Onboard, Test, and Go Live

After that, finish ZATCA’s device onboarding, get your production CSID, and test fully in the simulation environment before you submit live invoices. Most importantly, check every invoice type your business issues — standard, simplified, credit notes, and debit notes — against your real VAT cases.

Step 4 — Train Staff and Establish Ongoing Controls

Finally, train your finance and operations staff on the new steps, including how to handle rejected invoices. Also, set clear rules for daily reconciliation, error handling, CSID renewal, and tracking of ZATCA rule updates. Compliance is ongoing, so treat it as part of your month-end routine, not a finished project.

Conclusion: Full Enforcement Is Here — Make Compliance an Advantage

FATOORAH Phase 2 has changed how business runs in the Kingdom. With all announced waves now past their deadlines, and the penalty waiver closed, e-invoicing in Saudi Arabia FATOORAH compliance is now a baseline requirement for working credibly in the Saudi market. That said, the businesses that gain the most treat integration not as a burden, but as an investment in cleaner data, faster payments, and stronger financial control. In the end, whether you need to fix, improve, or prepare, the right support makes the difference between a stressful scramble and a smooth switch.

Wave Integration Deadline Revenue Threshold (VAT-taxable revenues exceeding) Reference Years
15th March 2025 SAR 4 million 2022 or 2023
16th April 2025 SAR 3 million 2022 or 2023
17th July 2025 SAR 2.5 million 2022 or 2023
18th August 2025 SAR 2 million 2022 or 2023
19th September 2025 SAR 1.75 million 2022 or 2023
20th November 2025 SAR 1.5 million 2022 or 2023
21st December 2025 SAR 1.25 million 2022 or 2023
22nd January 2026 SAR 1 million 2022 or 2023
23rd 31 March 2026 SAR 750,000 2022, 2023, or 2024
24th 30 June 2026 SAR 375,000 2022, 2023, or 2024

Where Things Stand After Wave 24

Wave 24's deadline passed on 30 June 2026. Therefore, all businesses with VAT-taxable revenues exceeding SAR 375,000 in 2022, 2023, or 2024 should now be fully integrated with the Fatoora platform.

Businesses below this threshold should continue monitoring announcements from ZATCA regarding future integration requirements and compliance deadlines.

1. What is FATOORAH Phase 2 in Saudi Arabia?

FATOORAH Phase 2, known as the Integration Phase, requires VAT-registered businesses to integrate their e-invoicing systems directly with ZATCA's Fatoora platform. B2B invoices must be cleared by ZATCA before issuance, and B2C invoices reported within 24 hours.

2. Is e-invoicing mandatory for all businesses in Saudi Arabia?

Phase 1 (electronic generation and storage) applies to all resident VAT-registered taxpayers. Phase 2 integration currently applies to businesses with VAT-taxable revenues exceeding SAR 375,000 in 2022, 2023, or 2024, following the Wave 24 deadline of 30 June 2026.

3. What was the deadline for ZATCA Wave 24?

Wave 24 businesses — those with VAT-taxable revenues above SAR 375,000 in 2022, 2023, or 2024 — were required to integrate with the Fatoora platform by 30 June 2026.

4. What happens if my business missed its e-invoicing integration deadline?

ZATCA's penalty relief initiative ended on 30 June 2026, and full enforcement now applies. Businesses should remediate immediately, as penalties start from SAR 5,000 for non-issuance or non-archiving of e-invoices. Voluntary, prompt correction is always the stronger position.

5. What are the main differences between FATOORAH Phase 1 and Phase 2?

Phase 1 required electronic generation and storage of invoices. Phase 2 adds mandatory integration with ZATCA's systems, real-time clearance of B2B invoices, strict XML/PDF-A-3 formatting, cryptographic stamps, UUIDs, and additional mandatory data fields.

6. What invoice format does ZATCA require under Phase 2?

Invoices must be issued in UBL 2.1 XML format, or as PDF/A-3 with an embedded XML file. Standard PDFs, scanned invoices, and word-processor invoices do not meet Phase 2 requirements.

7. What is the difference between a standard and a simplified tax invoice?

Standard tax invoices (B2B/B2G) must be cleared by ZATCA in real time before being shared with the buyer. Simplified tax invoices (B2C) are issued to the customer immediately and reported to ZATCA within 24 hours.

8. What is a cryptographic stamp and why is it required?

A cryptographic stamp is a digital security feature applied to each e-invoice to prove its authenticity and detect tampering. It is mandatory under Phase 2 and is applied using a CSID issued by ZATCA during onboarding.

9. What are the penalties for e-invoicing non-compliance in Saudi Arabia?

Published penalties start from SAR 5,000 for non-issuance or non-archiving of e-invoices, and from SAR 10,000 for deleting or amending e-invoices after issuance. Repeated violations can attract escalating penalties.

10. Does my existing accounting or ERP system need to change for Phase 2?

Usually, yes. Most systems require configuration, upgrades, or middleware to generate compliant XML, apply cryptographic stamps, and connect to the Fatoora platform via API. A gap assessment is the essential first step.

11. Do e-invoicing rules apply to credit and debit notes?

Yes. Electronic credit and debit notes are subject to the same formatting, stamping, and submission requirements as the invoices they relate to.

12. How should new businesses in Saudi Arabia prepare for e-invoicing?

New entities should select ZATCA-compliant invoicing systems from the outset and build integration readiness into their setup plans, since crossing the revenue threshold will bring them into scope. Professional guidance during company formation avoids costly retrofitting later.

13. Will ZATCA introduce more requirements after Phase 2?

ZATCA continues to update its controls and technical specifications — the third version was issued in May 2026 — and is moving toward capabilities such as pre-filled VAT returns. Businesses should monitor ZATCA announcements and keep their solutions current.

Ready to start your journey in Saudi Arabia? Contact Sokrab today for a confidential consultation.

Chat with SOKI

Welcome to SOKI

Please read the Privacy Policy first.
Read our Privacy Policy
Chat with SOKI
Scroll to Top