Where Saudi Arabia’s E-Invoicing Rollout Stands in 2026

Saudi Arabia’s mandatory e-invoicing system, known as FATOORA, is one of the most ambitious digital tax infrastructure projects in the region. Managed by the Zakat, Tax and Customs Authority (ZATCA), the system has been rolling out in two phases since December 2021. According to ZATCA’s official e-invoicing portal , the initiative aims to replace paper-based invoices with a secure, digital-first process that improves transparency, reduces tax evasion, and standardizes invoice processing across all industries in KSA.

By mid-2026, the rollout has reached Wave 24, and the revenue thresholds for mandatory compliance have dropped significantly. Businesses that previously considered e-invoicing a concern only for large enterprises now find themselves squarely within ZATCA’s scope. Understanding the regulations, technical requirements, and compliance timelines is no longer optional for any VAT-registered business operating in Saudi Arabia.

Phase 1 vs. Phase 2: What Changed and Why It Matters

FATOORA was implemented in two distinct phases, each with different technical and operational requirements.

Phase 1: Generation Phase (December 4, 2021)

Phase 1 required all VAT-registered businesses in Saudi Arabia (excluding non-residents) to generate and store electronic invoices using compliant systems. The key requirements included issuing invoices in a structured digital format, including mandatory fields such as VAT registration number and QR codes for simplified invoices, and ceasing the use of handwritten or manually produced invoices. Phase 1 focused on moving businesses away from paper-based processes. It did not require real-time connection with ZATCA’s systems.

Phase 2: Integration Phase (January 1, 2023, onward)

Phase 2 introduced a fundamental shift. Businesses must now connect their invoicing systems directly with ZATCA’s FATOORA platform through secure API connections. Invoices are validated in real time, digitally stamped, and returned with a cryptographic signature before they can be issued to the buyer.

The technical requirements for Phase 2 are significantly more demanding. Every invoice must be generated in XML or PDF/A-3 format. Each invoice must include a UUID (Unique Universal Identifier), a cryptographic stamp, and a QR code generated according to ZATCA’s specifications. B2B invoices must be submitted to ZATCA for clearance before being sent to the buyer. B2C simplified invoices must be reported within 24 hours.

Integration Waves: Who Must Comply and When

ZATCA is rolling out Phase 2 in waves, each targeting a specific group of taxpayers based on annual taxable revenue. As reported by EY Global Tax Alerts , the rollout has now reached 24 waves, with revenue thresholds falling progressively to bring smaller businesses into scope.

ZATCA notifies affected businesses at least six months before their wave deadline, giving them time to select a compliant e-invoicing solution, configure systems, and complete onboarding. Businesses that do not fall within current waves should monitor future announcements, as every VAT-registered entity in Saudi Arabia will eventually be required to integrate.

Technical Requirements Businesses Must Meet

Compliance with Zatca e Invoicing standards requires specific technical capabilities in your Invoicing system. The requirements go beyond simply issuing digital invoices. Your system must be able to communicate with ZATCA’s FATOORA platform in real time via APIs, generate invoices in

Businesses that use accounting or ERP systems not natively compatible with FATOORA will need either a system upgrade or a middleware solution that handles the ZATCA integration layer. Infinity Horizons’ financial advisory software helps businesses evaluate their current systems, identify gaps, and implement solutions that meet ZATCA’s technical specifications without disrupting daily operations.

Penalties for Non-Compliance

ZATCA enforces e-invoicing compliance through a structured penalty framework. The penalties are designed to scale with the severity of the violation.

ZATCA has extended its penalty waiver initiative (“Initiative to Cancel Fines and Exempt Taxpayers from Penalties”) through June 30, 2026, giving businesses a window to correct past errors without financial consequences. However, this waiver will not be renewed indefinitely. According to the IMF’s 2025 Article IV consultation for Saudi Arabia , the temporary penalty waiver should not be renewed when it expires, as it risks undermining long-term compliance culture.

How to Prepare Your Business for E-Invoicing Compliance

Assess your current invoice system. Determine whether your ERP, POS, or accounting software supports ZATCA’s Phase 2 requirements. If it does not, identify whether a system upgrade, replacement, or middleware integration is the most practical path forward.

Obtain ZATCA API credentials. Register on the FATOORA portal and set up the necessary API access for your invoicing system. This includes server IP whitelisting and firewall configuration.

Configure invoice formats and fields. Ensure invoices include all mandatory data elements: seller and buyer tax identification numbers, invoice line items with correct VAT treatment, UUID, cryptographic stamp, and QR code.

Test in the simulation environment. ZATCA provides a sandbox environment where businesses can submit test invoices and validate their system’s output before going live.

Ensure your accounting records are clean and current. E-invoicing integration depends on accurate financial data. If your chart of accounts, customer records, or VAT coding are inconsistent, the integration will produce errors. Infinity Horizons’ accounting and bookkeeping solutions provide the structured financial data foundation that successful FATOORA integration requires.

Engage expert advisory support. For businesses without dedicated IT or tax compliance teams, working with an experienced firm in ZATCA Consulting services in Saudi Arabia can significantly reduce the risk of integration errors and missed deadlines. Infinity Horizons’ ZATCA taxation advisory provides end-to-end compliance support, from initial assessment through FATOORA integration and ongoing filing management.

For businesses that also need independent validation of their financial controls and e-invoicing readiness, Infinity Horizons offers audit and assurance services that assess internal processes and strengthen the reliability of invoice data flowing into ZATCA’s platform.

Final Thoughts

ZATCA’s FATOORA system is not a temporary initiative. It is the permanent infrastructure for tax compliance in Saudi Arabia, and its scope will continue to expand until every VAT-registered business is integrated. The businesses that prepare early, invest in compliant systems, and maintain clean financial records will transition smoothly. Those that delay will face penalties, operational disruptions, and a more pressured timeline.

Need support with FATOORA integration or ZATCA compliance? Contact Infinity Horizons to schedule a consultation and get expert guidance on e-invoicing readiness, system integration, and ongoing compliance management in Saudi Arabia.

Frequently Asked Questions (FAQs)

Q1. What is FATOORA and who does it apply to?

FATOORA is Saudi Arabia’s mandatory electronic invoicing system managed by ZATCA. It applies to all VAT-registered businesses in KSA, excluding non-resident taxpayers. The system requires businesses to generate, store, and transmit invoices electronically. Phase 2 additionally requires real-time integration with ZATCA’s platform through secure API connections. Every VAT-registered business will eventually be required to comply, with the rollout proceeding in waves based on annual taxable revenue.

Q2. What is the difference between Phase 1 and Phase 2 of ZATCA e-invoicing?

Phase 1 required businesses to issue and store invoices electronically but did not require a direct connection to ZATCA. Phase 2 requires real-time integration with ZATCA’s FATOORA platform via APIs. B2B invoices must be cleared by ZATCA before reaching the buyer, and B2C invoices must be reported within 24 hours. Phase 2 also requires cryptographic stamping, UUID assignment, and structured XML formatting for every invoice.

Q3. What is the deadline for Wave 24 of FATOORA Phase 2?

Wave 24 requires businesses with annual VAT-taxable revenues exceeding SAR 375,000 during 2022, 2023, or 2024 to complete FATOORA integration by June 30, 2026. This wave brings thousands of SMEs into mandatory Phase 2 scope for the first time. ZATCA notifies affected taxpayers at least six months before the deadline.

Q4. What penalties does ZATCA impose for e-invoicing non-compliance?

Penalties include SAR 5,000 per non-compliant invoice, SAR 10,000 per instance for modifying invoices after issuance, and 5% to 25% of unpaid tax for late VAT filings. ZATCA’s penalty waiver initiative runs through June 30, 2026, but businesses should not rely on future extensions.

Q5. Can SMEs handle e-invoicing compliance without a dedicated IT team?

Yes, with the right support. Many SMEs use systems not natively compatible with Phase 2 requirements. Middleware solutions or system upgrades can bridge the gap. Working with an advisory firm experienced in ZATCA compliance helps SMEs configure their systems and complete integration without building in-house IT capability. Clean accounting records are essential for successful integration.