Saudi Arabia is digitalising its tax administration rapidly under Vision 2030. At the centre of that programme sits Fatoora, the e-invoicing system mandated by ZATCA (the Zakat, Tax and Customs Authority), the Kingdom’s tax authority. Paper and PDF invoices are no longer accepted for VAT recovery or for tax purposes, and invoices that do not meet the electronic specifications set by ZATCA expose the business to penalties.
If your group is establishing a subsidiary or branch in Saudi Arabia and beginning to trade, the first thing to check is whether your accounting and ERP systems can integrate with ZATCA. This guide sets out what finance teams need to know first when they start work on Fatoora compliance.
1. What Fatoora Is: The Two Phases
Fatoora is the e-invoicing system operated by ZATCA. It requires every VAT-registered business in Saudi Arabia to generate, validate and store all of its tax invoices electronically. Phase 1 (the Generation Phase) began on 4 December 2021, and since 1 January 2023 Phase 2 (the Integration Phase) has been rolled out progressively in waves.
The essential point is that the regime goes beyond simple electronic issuance to real-time integration with, and validation by, ZATCA’s servers. A tax invoice that does not meet the specification, or that fails validation, has no legal effect.
2. Phase 1 (Generation) vs Phase 2 (Integration)
The two phases impose very different obligations.
- Phase 1 · Generation: applies to every VAT-registered business. Handwritten invoices and simple PDFs are not permitted; tax invoices must be generated and stored through an electronic system and must carry the prescribed data fields, including a QR code.
- Phase 2 · Integration: accounting, ERP and POS systems must be integrated with the Fatoora platform via API. Standard tax invoices must obtain real-time clearance from ZATCA before they are issued, and must satisfy security requirements including electronic signatures, cryptographic stamps and UUIDs.
Phase 2 therefore turns a process of “generate it in our own system and keep it there” into one of “exchange it with ZATCA in real time”, and it requires genuine integration work on the IT and accounting systems of any business operating in the Kingdom.
Where a head-office ERP (SAP, Douzone and the like) is deployed in the Saudi entity unchanged, it frequently cannot meet the ZATCA specifications — XML format, cryptographic stamp, real-time integration — on its own. Integration with a locally certified solution, or the introduction of middleware, should be evaluated in advance.
3. Are You in Scope? The Waves and Revenue Thresholds
Phase 2 has been extended in waves, beginning with the largest businesses and lowering the threshold over time. ZATCA notifies each wave of its integration date at least six months in advance. As at 2026 the most recent waves are as follows.
- Wave 23: businesses whose VAT-taxable revenue exceeded SAR 750,000 in 2022, 2023 or 2024 → integration to be completed by 31 March 2026
- Wave 24: the threshold falls to SAR 375,000 → integration to be completed by 30 June 2026. In practice this brings a large number of small and medium-sized businesses into scope
Because the threshold keeps falling, a business outside the scope today is very likely to be captured before long. Concluding that “we are too small for this to apply” is a risky judgement, and putting an integration-capable system in place from the outset is also the cheaper course.
The waves are not over; they keep expanding. Even if you are outside the scope today, the safe assumption when designing your systems is that you will be inside it eventually.
4. Standard vs Simplified Tax Invoices
Fatoora distinguishes two types of tax invoice according to the nature of the transaction.
- Standard Tax Invoice: used mainly for B2B and B2G transactions. Under Phase 2 it must go through real-time clearance by ZATCA before issuance, and only a cleared invoice may be passed to the counterparty.
- Simplified Tax Invoice: used mainly for B2C transactions. Real-time clearance is not required at the point of issue, but the invoice must be reported to ZATCA within 24 hours of issuance.
Many sectors use both types side by side, so the processing flow for each should be defined at the system design stage to fit the business model.
5. What to Prepare
The key points for businesses entering or already operating in Saudi Arabia to review for Fatoora compliance are as follows.
- Confirm VAT registration status and the registration threshold (annual taxable revenue of SAR 375,000)
- Check whether the accounting, ERP and POS systems in use are capable of integrating with ZATCA
- Define the processing flow for standard and simplified tax invoices (B2B / B2C)
- Verify compliance with the technical specifications: XML format, QR code, cryptographic stamp and UUID
- Track the date of your wave notification and the integration deadline that applies to you
ZATCA has extended its penalty waiver initiative, which allows past errors to be corrected, through to 30 June 2026. Relief and waiver measures of this kind change frequently, however, so whether one is available should always be confirmed against ZATCA’s announcements at the relevant time.
Closing Thoughts
Fatoora is not merely a switch to electronic invoices. It means that doing business in Saudi Arabia requires the accounting and IT systems themselves to be aligned with ZATCA’s specifications. A business that does not allow for this at the point of entry will carry far greater cost and risk later, when it has to rebuild its systems in a hurry once trading has ramped up.
The rates, thresholds and wave information in this guide are general guidance as at June 2026; the date on which the obligations actually apply, and their scope, vary with revenue, sector and transaction structure. We recommend a separate advisory review to confirm how the rules apply to you and to set your system response strategy.