July 9, 2026
Saudi Arabia has moved decisively toward a fully digital tax ecosystem, and electronic invoicing sits at the centre of that shift. For any business issuing tax invoices in the Kingdom, the days of paper receipts and manually generated PDFs are gone. The Zakat, Tax and Customs Authority (ZATCA) now requires structured, digitally signed invoices that integrate directly with its national platform, Fatoora.
This guide explains what e-invoicing means under Saudi law, how the system works in practice, which businesses fall within scope, and what happens if compliance slips. It is written for founders, finance managers, and CFOs who need a clear operational picture rather than a legal restatement. If your company issues VAT invoices in Riyadh, Jeddah, or anywhere across KSA, the rules below apply to you today.
E-invoicing, known locally as Fatoora, is the mandatory issuance and storage of tax invoices in a structured electronic format. Paper invoices, scanned PDFs, and manually typed spreadsheets no longer qualify as compliant tax documents. Every invoice must be created through a compliant electronic system, stored in a specific XML or PDF/A-3 format with embedded XML, and, in the current integration phase, transmitted to ZATCA in real time or near real time.
The framework was introduced through resolutions issued by ZATCA in 2020 and 2021, with rollout phased so businesses could adapt their systems. It applies to all resident taxpayers registered for VAT, as well as third parties that issue invoices on their behalf. The ZATCA official portal publishes the technical specifications, XML schemas, and API documentation that vendors and in-house teams must follow.
The commercial logic is straightforward: reduce tax evasion, close the VAT gap, standardise data, and give the tax authority direct visibility into transaction flows across the Saudi economy.
ZATCA structured the rollout into two clearly defined phases, and understanding the distinction is essential for anyone operating in the Kingdom.
This phase went live on 4 December 2021 and applied to all VAT-registered residents at once. Businesses were required to stop issuing handwritten or Word-based invoices and begin using compliant systems capable of producing tax invoices with a QR code, buyer and seller details in Arabic, and specific mandatory fields. Storage in electronic form became compulsory, and any tampering or deletion functionality in the invoicing software had to be removed.
The integration phase began on 1 January 2023 and continues to roll out in waves. In this phase, taxpayers must connect their e-invoicing systems directly to the Fatoora platform through APIs. Each business is notified by ZATCA of its specific onboarding wave, typically based on annual revenue thresholds. Waves have progressively lowered the revenue threshold, and by 2026 the vast majority of active VAT-registered entities across KSA are integrated or scheduled for integration.
Under Phase 2, two invoice types behave differently. Standard tax invoices, issued for B2B and B2G transactions, must be cleared by ZATCA in real time before being shared with the buyer. Simplified tax invoices, typically B2C, are reported to ZATCA within 24 hours of issuance. Both types require a cryptographic stamp, a UUID, a hash of the previous invoice, and a QR code that encodes the ZATCA response.
The rules apply to every resident taxable person in Saudi Arabia registered for VAT, along with any customer or third party issuing an invoice on the seller’s behalf. Non-resident businesses are outside the direct scope, but their Saudi customers may need to self-account through the reverse charge mechanism.
Sectors under close monitoring include:
Small businesses below the VAT registration threshold of SAR 375,000 in annual taxable supplies are not required to issue e-invoices, though voluntary registrants must comply once registered.
A compliant invoicing system must meet a specific set of technical conditions defined by ZATCA. These include:
Businesses also need to declare their invoicing solution and register each active device or API endpoint through the Fatoora portal. Vendors selling ERP or point-of-sale software must publish a compliance declaration confirming that their product meets the mandatory and prohibited functionality lists.
The compliance burden is heavier than many companies expect. Selecting the right vendor, mapping master data to the ZATCA schema, and testing sandbox integration typically takes six to twelve weeks for a mid-sized business. Guidance from experienced advisors reduces rework and protects the business from failed clearance attempts once live.
ZATCA takes enforcement seriously. Penalties for e-invoicing violations were formalised through the VAT Implementing Regulations and subsequent guidance, and they apply cumulatively based on the type and repetition of the breach.
Common infractions and their consequences include failure to issue e-invoices or credit and debit notes electronically, which attracts penalties starting at SAR 5,000 per violation. Deletion or amendment of an issued invoice can trigger fines and possible criminal liability. Failure to include the QR code or mandatory fields brings escalating fines based on repeat occurrences, and failure to store invoices in the required format is governed by a separate penalty schedule.
ZATCA has previously operated grace periods for first-time offenders, but that leniency is not guaranteed. Repeated breaches can trigger audits, back-tax assessments, and reputational risk with government tenders. Independent analysis from PwC Saudi Arabia tax guidance offers a useful summary of enforcement trends.
Infinity Horizons has worked with businesses across Riyadh, Jeddah, and the Eastern Province to design and implement Fatoora-ready invoicing workflows. Our zatca taxation advisory services in Saudi Arabia cover system selection, master data cleansing, API onboarding, staff training, and post-go-live health checks.
Clients benefit from a 100% compliance track record and a hands-on approach that combines tax knowledge with operational detail. A fresh MISA-licensed entity setting up finance operations from scratch and an established group migrating a legacy ERP each require a differently scoped engagement, and our team calibrates the plan to your wave, sector, and transaction profile.
Explore our full ZATCA taxation advisory services or connect with our accounting and bookkeeping team to map your compliance roadmap.
It is the mandatory electronic invoicing framework operated by the Zakat, Tax and Customs Authority in Saudi Arabia, known publicly as Fatoora. It was introduced to standardise tax documentation, reduce shadow economy activity, close the VAT compliance gap, and give the government real-time visibility into commercial transactions. Every VAT-registered resident in the Kingdom must issue invoices through a compliant electronic system, apply cryptographic stamps, and either clear or report each invoice through the ZATCA platform depending on transaction type.
Phase 1, the generation phase, became mandatory on 4 December 2021 for all VAT-registered residents. Phase 2, the integration phase, started on 1 January 2023 and continues in waves determined by annual revenue. By 2026, the majority of VAT-registered businesses across KSA have been onboarded or notified of upcoming integration dates.
Standard tax invoices apply to B2B and B2G transactions and must be cleared by ZATCA in real time before delivery to the buyer. Simplified tax invoices apply to B2C retail transactions and must be reported to ZATCA within 24 hours of issuance. Both require QR codes and cryptographic stamps, and both are covered by the same penalty regime for missing fields or format errors.
Penalties begin at SAR 5,000 per violation for failure to issue e-invoices and escalate for repeat offences. Additional fines apply for missing QR codes, tampered records, or non-compliant storage. Serious or repeated breaches can lead to audits, back-tax assessments, and criminal proceedings depending on intent.
Businesses below the SAR 375,000 VAT registration threshold are not required to register or issue e-invoices. Voluntary registrants must comply once they enter the VAT system, regardless of turnover, and the same rules apply to any third party issuing invoices on the seller’s behalf.
Contact Us
