What is ZATCA e-invoicing (Fatoora)?
E-invoicing in Saudi Arabia, known as Fatoora, is the framework of the Zakat, Tax and Customs Authority (ZATCA) that replaces paper and handwritten invoices with structured electronic invoices issued from compliant systems. It applies to VAT-registered taxpayers resident in the Kingdom and covers tax invoices, simplified tax invoices and the related credit and debit notes. The aim is greater transparency, a smaller informal economy and VAT compliance that is easier to verify.
For a business, e-invoicing is not just an IT upgrade. It touches sales processes, customer master data, accounting, VAT returns and record-keeping, so it works best when finance, operations and your system provider plan it together.
Phase 1 and Phase 2: generation and integration
ZATCA introduced e-invoicing in two phases.
- Phase 1 (Generation): invoices must be generated and stored electronically using a compliant solution. Handwritten or editable invoices are not acceptable, and simplified invoices must carry a QR code.
- Phase 2 (Integration): the e-invoicing solution connects to the ZATCA Fatoora platform, invoices are produced in a structured XML format with additional security elements, and ZATCA receives the data before or after the buyer does, depending on invoice type.
Phase 2 is being rolled out in waves. ZATCA selects groups of targeted taxpayers and notifies them in advance, at least six months before their integration date. ZATCA sets and updates the selection criteria and timings, so check your status regularly and start preparing early.
Practical tip: once you receive a ZATCA notification, treat the integration date as fixed. Choosing a system, testing and onboarding usually take longer than expected, especially for multi-branch groups.
Tax invoice vs simplified tax invoice
The invoice type determines which data must appear on the invoice and how it is shared with ZATCA in Phase 2.
- Tax invoice (standard, mainly B2B): includes buyer details such as the VAT number where applicable. In Phase 2 it goes through clearance: ZATCA validates and stamps it before it is shared with the buyer.
- Simplified tax invoice (mainly B2C): usually issued to consumers at the point of sale, with fewer buyer details. In Phase 2 it is reported to ZATCA within the time limit set in the rules after it is issued.
- Credit and debit notes: follow the rules of the original invoice type and must reference the invoice they adjust.
Many businesses, such as distributors with showrooms, issue both types. Your system must classify every transaction correctly, or invoices may be rejected or flagged.
Technical elements: XML, UBL, QR code and cryptographic stamp
Phase 2 invoices are built on the UBL 2.1 XML standard, issued either as an XML file or as a PDF/A-3 document with the XML embedded. The key elements are:
- A unique identifier (UUID) and an invoice counter for every document
- An invoice hash that links each invoice to the previous one, so gaps or alterations can be detected
- A cryptographic stamp generated with keys and a certificate obtained through ZATCA
- A QR code containing invoice data and, in Phase 2, security elements that can be read with verification tools
You do not need to build these yourself, but you should understand them well enough to judge your provider's implementation.
Onboarding your solution and obtaining CSIDs
Before going live in Phase 2, each e-invoicing unit, such as an ERP instance, a POS device or a branch system, must be onboarded through the Fatoora portal. The process typically involves generating a one-time password on the portal, creating a certificate signing request from the solution, passing compliance checks with sample invoices and then obtaining a production Cryptographic Stamp Identifier (CSID). Certificates expire and need renewal.
Multi-branch groups need a clear inventory of every invoicing device; missing one is a common cause of last-minute problems.
Choosing a compliant ERP or POS system
Compliance responsibility stays with the taxpayer, even if a vendor calls its product ZATCA-ready. When choosing or upgrading a system, check:
- Support for both the clearance and reporting flows in Phase 2
- Arabic invoice output, correct VAT calculation and rounding
- Handling of credit notes, advance payments, discounts and multi-currency sales
- Integration with your accounting, inventory and VAT reporting
- Local support, update policy and how certificates are renewed
Foreign groups often run a global ERP. In that case a Saudi e-invoicing connector or middleware may be needed, and its configuration should be tested in the ZATCA sandbox before go-live.
VAT linkage, record-keeping and penalties
E-invoicing applies to VAT-registered businesses, so the starting point is a correct VAT registration with ZATCA, with the right legal name, address and VAT number on every invoice. Invoice data feeds your VAT returns, which are filed monthly or quarterly depending on your situation. When e-invoices, accounting records and returns do not match, questions from ZATCA become more likely. Our accounting and payroll service keeps your books, invoices and VAT filings aligned.
The e-invoicing rules include penalties for violations such as not issuing electronic invoices, omitting the QR code, deleting or altering invoices after issue, or failing to inform ZATCA of system malfunctions. Penalties and enforcement practice are set by ZATCA and can change, so early preparation is far cheaper than fixing problems after an inspection.
Support for foreign companies with Saudi entities
For foreign-owned Saudi subsidiaries and branches, e-invoicing is often where global systems first meet local rules. RDO explains your obligations, coordinates with your ERP or POS provider, prepares the onboarding steps on the Fatoora portal and follows up on testing until invoices are issued correctly. We work in Arabic and English and bridge communication with head offices in China, Turkey, Japan and Korea. If you are still establishing your presence, see our guide to investing in Saudi Arabia, and use our glossary for key terms.
