ZATCA FATOORA Integration with Accounting Software in Saudi Arabia

ZATCA FATOORA Integration with Accounting Software in Saudi Arabia

March 11, 2026

For businesses operating in the Kingdom of Saudi Arabia, electronic invoicing is no longer on the table, it’s a present compliance requirement. Since the Zakat, Tax and Customs Authority (ZATCA) kick-started their FATOORA e-invoicing mandate, companies have been forced to rethink how their financial systems generate, transmit and archive invoices.

Phase 1 covered generation and storage. Phase 2 is all about Integration Phase; moves further with the integration of real-time clearance and reporting via a direct connection with ZATCA’s platform. This is where accounting software becomes very crucial.

This guide explains what FATOORA integration actually is, what your accounting system needs to be able to support and how to approach compliance without disrupting your day to day financial operations.

What Is ZATCA FATOORA and Why Integration Matters

FATOORA is the national e-invoicing framework of Saudi Arabia, introduced by ZATCA as part of the broader push towards economic transparency, VAT compliance and digital financial infrastructure in Saudi Arabia.

The mandate is applicable to all VAT registered businesses in KSA and its implementation is being rolled out in waves. Phase 2 (Integration Phase) requires businesses to connect their invoicing systems directly to ZATCA’s FATOORA platform via API, that is, your accounting software must be technically equipped to:

  • Generate invoices in ZATCA prescribed XML format (UBL 2.1)
  • Embed QR code and cryptographic stamp
  • Submit B2B invoices for real-time clearance prior to sending to buyers
  • Report B2C invoices to ZATCA within 24 hours of issue
  • Keep a secure tamper-proof archive of all invoices

Businesses that do not comply with Phase 2 requirements are subject to financial penalties and interruption of their invoicing operations. As of 2025, ZATCA is still bringing in waves of taxpayer groups, and most of the mid-to-large enterprises are already within scope.

What FATOORA Integration Requires from Your Accounting System

ZATCA e-invoicing integration is not a plugin, which you turn on overnight. It is a structured technical and compliance process. Here is what your accounting software needs to be able to deliver:

1. API Connectivity with ZATCA’s FATOORA Platform

Your system requires communication with ZATCA’s APIs, specifically for onboarding, clearance (B2B) and reporting (B2C). This requires a Compliance CSID (Cryptographic Stamp Identifier) to be obtained during the onboarding process which is associated with your EGS (E-Generation Solution).

2. UBL 2.1 XML Invoice Format

ZATCA requires a certain XML structure (Universal Business Language 2.1). Standard PDF or Excel invoices do not satisfy this need. Your accounting software must either natively produce UBL 2.1 invoices, or use a middleware layer that converts your existing invoice format.

3. Cryptographic Stamping and QR Code Generation

Each invoice must have a digital signature (cryptographic stamp), and a QR code with TLV (Tag-Length-Value) encoded data. This is a technical requirement that needs to be built into the generation of an invoice, not done manually after the fact.

4. Real-Time Clearance for B2B Transactions

For business to business invoices exceeding the defined threshold, ZATCA calls for clearance prior to the invoice being shared with the buyer. Your accounting software needs to submit the invoice, receive a cleared response and attach the stamp returned, all in one step.

5. Secure Invoice Archiving

ZATCA requires that e-invoices be kept for at least 6 years in the tamper-evident format. Cloud accounting software as used in Saudi Arabia must have compliant archival functionality or integrate with a compliant document management system.

Cloud Accounting Software and ZATCA Readiness in KSA

The migration towards cloud accounting software in Saudi Arabia has taken a big leap forward in 2025, mostly due to FATOORA compliance requirements. Locally hosted legacy systems face a struggle to meet Phase 2 API and real-time processing requirements while modern cloud platforms are better positioned to update continuously as ZATCA is able to refine its specifications.

When considering cloud accounting software for ZATCA compliance, businesses should be sure to check for the following:

  • ZATCA certification: Confirm that the software has earned a valid ZATCA-approved EGS status
  • API integration capability: Can the software connect with ZATCA’s FATOORA APIs without third-party software?
  • Local data residency: Does it meet KSA data localization requirements?
  • Arabic language support: Invoices should support Arabic language content as per ZATCA requirements
  • Audit trail and reporting: Does it produce the audit, VAT reports needed to submit to ZATCA?
  • Multi-branch support: For businesses with multiple branches in Riyadh or with branches in different parts of KSA, the system should support branch level invoice management

Cloud platforms that are natively developed for the Saudi market or have invested heavily in ZATCA readiness typically provide faster onboarding, fewer technical failures during clearance and more reliable compliance updates as regulations evolve.

Step-by-Step: How FATOORA Integration Works in Practice

The integration process has a pre-defined sequence. Here is how it usually unfolds for a business in KSA:

Step 1: Verify Your Timeline for Wave and Onboarding

ZATCA is bringing on board businesses in sequential taxpayer groups. Your ZATCA portal account will display when your business must comply. Missing this date results in penalties, and thus, early preparation is important.

Step 2: Choose a ZATCA-Approved Accounting Solution

Choose a cloud accounting software Saudi Arabia that is either ZATCA certified or has an active integration present with a certified EGS. Verify this certification is up-to-date; ZATCA periodically re-evaluates approved solutions.

Step 3: Register Your EGS and Obtain CSID

Your EGS (the software or device that is generating invoices) must be registered on the FATOORA platform. This creates a Compliance CSID which is then used for API authentication in all clearances and reporting calls that follow.

Step 4: Perform Compliance Testing

ZATCA has a sandbox environment to test. Before going live, your accounting system must successfully clear compliance checks for invoice generation, clearance, reporting, and cryptographic stamping.

Step 5: Take It Live and Monitor All the Time

Once live, all invoices that are issued go through the FATOORA clearance or reporting workflow. Your team needs to be able to monitor for API failures, error responses and ZATCA specification updates; all of which can impact compliance status.

Common Challenges Businesses Face During FATOORA Integration

Despite simple official advice, many businesses encounter unnecessary problems during integration. The most common issues are as follows:

  • Outdated ERP or accounting software which does not support the generation of UBL 2.1 XML without extensive custom development
  • Gaps in invoice data fields needed by ZATCA such as missing buyer TIN, incorrect VAT registration number, or missing line-item information
  • API timeouts during high processing hours, resulting in accidentally sending out unpaid invoices to buyers
  • Multi-EGS management in businesses with several locations, each requiring individual CSID registration
  • Lack of adequate staff training for the compliance workflow that leads to manual mistakes invalidating e-invoices

These challenges are manageable when approached systematically but they require both technical expertise and understanding of ZATCA’s regulatory framework, which is why many businesses choose to work with specialist advisors during the integration process.

How Professional Advisory Support Reduces Integration Risk

FATOORA integration is an intersection of tax law and software infrastructure. For most finance teams, this requires capability they do not have in-house.

Infinity Horizons is a VAT-registered business support firm across KSA that helps navigate the entire VATCA e-invoicing compliance process, from wave readiness assessment and EGS selection, to live monitoring and continuous ZATCA advisory. With an excellent track record of compliance and a deep knowledge of Saudi business regulations, the firm offers practical and tailored advice to startups, SMEs and enterprises at all stages of their FATOORA integration.

A formal advisory engagement normally includes:

  • Gap analysis of your existing accounting system with ZATCA Phase 2 requirements
  • Vendor evaluation & selection support for ZATCA approved cloud solutions
  • EGS onboarding and CSID registration assistance
  • Compliance testing monitoring & sign-off preparation
  • Post go-live monitoring, regulation update management

For businesses in Riyadh as well as the Kingdom as a whole evaluating their ZATCA compliance posture, getting the integration right the first time around is significantly more cost effective than remediation after a compliance breach happens.

What to Expect from ZATCA Compliance Through 2026 and Beyond

ZATCA’s FATOORA rollout is not a one-time compliance event. The authority continues to work on the technical specification, extended scope of mandatory e-invoicing and increased auditing activity from registered taxpayers. Businesses should expect:

  • Continued wave-based onboarding through 2026, bringing more groups of taxpayers into Phase 2
  • Tighter audit scrutiny on accuracy of invoice data, validity of QR codes and archival practices
  • Expansion of FATOORA requirements to other types of transaction or business categories
  • Increasing ZATCA enforcement action against non-compliant businesses with penalties linked to both the number of invoices and the value of the transaction

Businesses that use ZATCA e-invoicing ready cloud accounting software with active compliance, monitoring will be in a much better position to absorb these changes without an operational disruption.

Ready to Align Your Accounting System with ZATCA Requirements?

If your business is coming up on its FATOORA compliance wave, or are already in Phase 2, the time to act is before, not after, a ZATCA notification.

Frequently Asked Questions

Q1. What is ZATCA FATOORA e-invoicing and which businesses must comply?

FATOORA is the mandatory e-invoicing system of ZATCA for all VAT-registered businesses in Saudi Arabia. Phase 1 required generating electronic invoices. Phase 2 includes API integration with ZATCA’s platform for real-time clearance and reporting. Compliance is compulsory, non-compliance is subject to financial penalties. ZATCA is onboarding businesses in waves, so the obligation applies based on your taxpayer group’s assigned timeline.

Q2. What are the technical requirements for ZATCA e-invoicing integration with accounting software?

Your accounting system must create invoices in UBL 2.1 XML format, add a cryptographic stamp and QR code, and link to ZATCA’s FATOORA APIs for B2B clearance and B2C reporting. It also has to keep a compliant six-year archive. Most legacy on-premise systems require extensive upgrade or middleware to accommodate these requirements; whereas modern cloud accounting software in Saudi Arabia usually has a native ZATCA integration.

Q3. How do I know if my current accounting software is ZATCA-approved for Phase 2?

Check whether your software vendor has a valid ZATCA EGS certification and it can demonstrate successful API integration with the FATOORA platform. The vendor should be able to offer clearance and reporting functionality for both B2B and B2C types of invoices. If your existing software does not have this, you may have to switch platforms or implement a ZATCA approved middleware layer when your compliance wave starts.

Q4. What happens if my FATOORA integration fails or produces errors during clearance?

If a B2B invoice does not pass ZATCA clearance, then it cannot legally be issued to the buyer. ZATCA returns an error code for what the issue is, which then needs to be processed and resubmitted by your accounting system. Repeated failures or unresolved errors can trigger compliance investigations. Businesses need to have a monitoring process in place to detect failures in the API, data validation errors and changes in the ZATCA specification that impact invoice generation.

Q5. Can foreign companies setting up in Saudi Arabia use their existing accounting software for ZATCA compliance?

Foreign businesses setting up in KSA are subject to the requirements of ZATCA e-invoicing, once VAT-registered, regardless of which accounting systems they use worldwide. International ERP platforms may have ZATCA modules but localization needs to be checked. It is advisable to hire a ZATCA advisory specialist when setting up a business in Saudi Arabia to make sure that your accounting infrastructure is set-up properly from the very first day.