July 15, 2026
E-invoicing, known locally as FATOORA, is one of the most consequential digital reforms introduced by the Zakat, Tax and Customs Authority in Saudi Arabia. It replaces paper and PDF invoices with structured electronic documents that ZATCA can verify, track, and audit in real time. The framework was rolled out in two distinct stages. Phase 1, called the Generation Phase, went live on 4 December 2021 and required VAT registered businesses to issue and store invoices electronically. Phase 2, the Integration Phase, took effect on 1 January 2023 and is being implemented in successive waves that continue through 2026 and beyond. For finance leaders operating in KSA, Phase 2 is no longer a future project. It is an active compliance obligation being enforced across progressively smaller taxpayer segments.
Phase 1 focused on getting Saudi businesses off paper. Any VAT registered entity had to generate invoices through a compliant electronic system, store them digitally, and include mandatory fields such as the seller VAT number and a QR code for simplified invoices. Phase 2 shifts the goalposts. It requires each business to integrate its invoicing system directly with ZATCA’s FATOORA platform so that invoices are cleared or reported in near real time.
The practical differences are significant. Phase 1 went live on 4 December 2021 and applied to all VAT registered taxpayers in one go, with no direct connection to ZATCA required. Phase 2 began on 1 January 2023 and is being rolled out in successive waves. It mandates invoices in XML format or PDF/A-3 with embedded XML, transmission to ZATCA through an API, and a cryptographic stamp on every standard invoice. Under Phase 2, standard business to business invoices follow a clearance model, while simplified business to consumer invoices follow a reporting model. In short, Phase 1 digitized the invoice while Phase 2 connects it directly to the tax authority.
Phase 2 introduces two distinct invoicing models based on transaction type. For standard tax invoices, typically business to business, taxpayers must follow a clearance model. The invoice is transmitted to ZATCA before it is shared with the buyer, and it only becomes valid once ZATCA applies its cryptographic stamp. For simplified tax invoices, typically business to consumer, taxpayers follow a reporting model. The invoice can be issued to the customer immediately, but must be reported to ZATCA within 24 hours.
Every Phase 2 compliant invoice must include a universally unique identifier (UUID), a cryptographic stamp, a QR code, an invoice hash, and a sequential invoice counter value. Invoices must be stored in XML format or PDF/A-3 with embedded XML, and taxpayers must retain them for at least six years in line with the record retention rules published by ZATCA.
ZATCA has phased Phase 2 in waves based on annual taxable revenue, giving each group at least six months of advance notice before its integration date. The first wave, which went live on 1 January 2023, covered taxpayers with more than SAR 3 billion in taxable revenue during 2021. Each subsequent wave has lowered the revenue threshold, progressively bringing large enterprises, mid market firms, and now smaller VAT registered businesses into scope.
The rollout follows a consistent logic. Thresholds are set against annual taxable revenue in a defined reference year, and each wave receives a minimum six month notification period before it goes live. Thresholds descend with each successive wave, and by 2026 the scope has extended well into the SME segment across KSA.
If your business has not yet received a wave notification, that does not mean Phase 2 is optional. It simply means your integration date has not yet been formally set. Any VAT registered entity in KSA should treat Phase 2 readiness as a scheduled event, not a hypothetical one.
Meeting Phase 2 requires more than an accounting software update. Taxpayers must use an e-invoicing solution that ZATCA has recognized as compliant, or an in-house system that meets ZATCA’s technical specifications. The solution must be capable of:
The onboarding process itself involves generating a Cryptographic Stamp Identifier (CSID), which is renewed periodically. Businesses often underestimate the coordination required between their ERP vendor, tax team, and IT function to sequence this correctly.
Even well resourced finance teams run into recurring issues during Phase 2 rollout. The most frequent include ERP systems that generate technically valid XML but fail ZATCA business rule validations, incorrect mapping of VAT categories to ZATCA codes, delayed CSID renewals that halt invoice clearance, and gaps in Arabic language field requirements. Multi branch businesses often struggle to reconcile centralized invoicing with ZATCA’s device level onboarding logic. Groups with intercompany transactions face additional complexity because each entity must onboard independently, even when they share a single ERP platform.
A disciplined readiness program typically covers five workstreams: vendor selection, technical integration, master data cleanup, staff training, and post go-live monitoring. Master data is often the silent risk. VAT numbers, item codes, buyer identifiers, and address fields that were acceptable under Phase 1 will fail ZATCA validation under Phase 2. Businesses that engage experienced ZATCA consultants in KSA early in the process tend to complete integration in a fraction of the time taken by those attempting a purely internal rollout.
For a broader view of tax compliance obligations that intersect with e-invoicing, our team also advises on VAT filings, corporate tax positions, and transfer pricing documentation as part of a single, coordinated engagement.
Infinity Horizons provides end to end ZATCA compliance consulting for businesses at every stage of the Phase 2 journey. Our team combines regulatory fluency with hands on ERP integration experience, and we have supported taxpayers across manufacturing, retail, professional services, and construction sectors in Riyadh, Jeddah, and beyond. With a 100 percent compliance track record and deep expertise in Saudi business laws, we help finance leaders move from wave notification to steady state operation without disrupting daily invoicing. Our services also extend to MISA licensing, Saudization compliance, audit, and accounting, giving clients a single trusted partner across the KSA regulatory landscape.
Ready to plan your Phase 2 rollout? Speak with our team for a tailored readiness assessment or request a compliance scoping call at infinityhorizonsa.com.
Q1. What is Phase 2 of KSA e-invoicing?
Phase 2 of KSA e-invoicing, known as the Integration Phase, requires VAT registered businesses in Saudi Arabia to connect their invoicing systems directly with ZATCA’s FATOORA platform. It went live on 1 January 2023 and is being implemented in waves based on annual taxable revenue. Businesses must issue invoices in XML or PDF/A-3 format with embedded XML, apply a cryptographic stamp, generate a QR code, and either clear standard invoices with ZATCA in real time or report simplified invoices within 24 hours. The framework applies across Riyadh, Jeddah, and every other region of KSA.
Q2. Who needs to comply with Phase 2 in 2026?
By 2026, ZATCA’s wave rollout has extended well beyond large enterprises and now covers a significant portion of mid market and smaller VAT registered businesses in KSA. Every VAT registered taxpayer will eventually fall within Phase 2, and ZATCA notifies each wave at least six months before its go-live date. If your business has not received a notification yet, it should still begin readiness work, because the notification period usually leaves limited time for full ERP integration, master data cleanup, staff training, and end to end testing with the FATOORA platform.
Q3. What happens if a business misses its Phase 2 go-live date?
Failure to comply with Phase 2 on the assigned wave date exposes the business to administrative penalties under Saudi VAT and e-invoicing regulations. Penalties can include fines for non-compliant invoices, incorrect QR codes, missing cryptographic stamps, or failure to transmit invoices to ZATCA. Repeated violations may escalate to higher financial penalties and increased audit scrutiny from ZATCA. Businesses that anticipate delays should engage professional advisors immediately, document their remediation efforts, and communicate proactively with ZATCA rather than attempting a silent catch up.
Q4. Do simplified B2C invoices need real time clearance?
No. Simplified tax invoices issued to consumers follow a reporting model rather than a clearance model. The invoice can be delivered to the customer immediately with a QR code, but the taxpayer must transmit it to ZATCA’s FATOORA platform within 24 hours of issuance. Standard tax invoices for B2B transactions follow the stricter clearance model and are only valid once ZATCA applies its cryptographic stamp. Businesses that handle both B2B and B2C transactions must configure their invoicing systems to route each invoice through the correct workflow automatically.
Q5. Can existing ERP systems be used for Phase 2 compliance?
Yes, provided the ERP or invoicing solution meets ZATCA’s technical specifications and can be integrated with the FATOORA platform through the required APIs. Many global ERP vendors offer certified localization packages for Saudi Arabia. Businesses running older or heavily customized systems often need middleware or a compliant e-invoicing gateway to bridge the gap, along with structured master data remediation to pass ZATCA validation rules. A phased pilot, run in a sandbox environment before the assigned wave date, is the most reliable way to catch integration issues early.
Contact Us
