VAT/GST· United Arab Emirates

ZATCA FATOORA Phase 2 E-Invoicing: Compliance Checklist for KSA Businesses

ZATCA's FATOORA Phase 2 requires KSA businesses to integrate their invoicing system with the ZATCA API in real time. Here's the compliance checklist for 2026 waves.

7 min read · 11 July 2026

What is ZATCA FATOORA Phase 2?

FATOORA (فاتورة) is Saudi Arabia's e-invoicing system, run by the Zakat, Tax and Customs Authority (ZATCA). Phase 1 (December 2021) required VAT-registered businesses to issue structured electronic invoices instead of paper or unstructured PDFs. Phase 2 (the Integration Phase, rolling out in waves since January 2023) requires each business's invoicing system to integrate directly with ZATCA's API — sending B2B invoices for real-time clearance and reporting B2C simplified invoices within 24 hours.

By 2026 the vast majority of VAT-registered KSA businesses are inside a Phase 2 wave. Non-compliance carries penalties of SAR 5,000–50,000 per violation, and — more disruptively — invoices that fail clearance cannot be legally used to claim input VAT.

How ZATCA assigns Phase 2 waves

ZATCA groups businesses into waves based on the taxable revenue reported in the previous calendar year. Wave 1 (January 2023) covered taxpayers with revenue above SAR 3 billion; each subsequent wave has lowered the threshold. ZATCA notifies businesses of their wave at least 6 months in advance via their ZATCA portal account.

If you have not received a wave notification, log into your ZATCA portal at zatca.gov.sa and check the FATOORA section. Do not wait — the 6-month runway is the minimum you'll need to procure or upgrade an e-invoicing solution, integrate the API and complete the compliance testing environment (CTE) certification.

The Phase 2 technical requirements

Every Phase 2 e-invoice must be issued in structured XML (UBL 2.1 with the KSA-specific extension) or PDF/A-3 embedding the XML. Each invoice carries a cryptographic stamp (CSID) issued by ZATCA, a UUID, a hash chain linking to the previous invoice, and a QR code with base64-encoded TLV metadata.

For B2B (standard) invoices, the flow is clearance-based: your ERP sends the invoice to ZATCA in real time, ZATCA validates and stamps it, and only the stamped version is legally valid for the buyer. For B2C (simplified) invoices, the flow is reporting-based: you can issue the invoice immediately and report it to ZATCA within 24 hours.

Your 8-step compliance checklist

1. Confirm your wave assignment in the ZATCA portal. 2. Select or upgrade to a Phase 2-compliant e-invoicing solution — Zoho Books, Odoo, SAP, Oracle, Microsoft Dynamics and specialist providers like ClearTax and Cygnet all offer certified integrations.

3. Register your solution in the ZATCA sandbox and obtain a Compliance Cryptographic Stamp Identifier (CCSID). 4. Run test invoices through the Compliance Testing Environment (CTE) until all 8 mandatory test cases pass. 5. Onboard to production by exchanging your CCSID for a Production CSID (PCSID).

6. Update your chart of accounts and item master data with correct VAT category codes (S, Z, E, O). 7. Train finance, sales and dispatch teams on the new invoice-issuance flow — clearance latency changes how you invoice at point of sale. 8. Reconcile daily between your ERP outbox and the ZATCA portal to catch any rejected invoices immediately.

Common Phase 2 failure modes

The three failures we see most often on Phase 2 rescue engagements are: (a) hash-chain breaks caused by manual voids or database restores, which invalidate every subsequent invoice until reset; (b) incorrect VAT category codes on zero-rated exports (Z vs O), which triggers ZATCA rejection; and (c) buyer VAT numbers missing or malformed on B2B invoices above SAR 1,000, which blocks the buyer's input VAT claim.

Each of these is fixable, but the longer they run undetected, the harder the reconciliation. Weekly (ideally daily) reconciliation between your ERP and the ZATCA portal is the single highest-value control you can add.

How NovaLedge helps with FATOORA Phase 2

NovaLedge Advisory runs FATOORA Phase 2 implementations end-to-end for KSA businesses — wave-readiness assessment, solution selection, sandbox onboarding, CTE testing, production go-live and post-go-live reconciliation. For businesses already inside a wave, we run rescue engagements to fix hash-chain issues, category-code errors and rejected-invoice backlogs.

See our KSA accounting services page for the full ZATCA-ready service, or use our free KSA VAT calculator to estimate your monthly VAT position while you plan the Phase 2 integration.

Frequently asked questions

Who does ZATCA Phase 2 apply to?
Every VAT-registered business in Saudi Arabia, phased in by wave. ZATCA assigns waves based on prior-year taxable revenue and notifies each business 6 months in advance via the ZATCA portal.
What is the difference between Phase 1 and Phase 2?
Phase 1 required structured electronic invoices instead of paper. Phase 2 requires real-time integration with ZATCA's API — B2B invoices are cleared before issue, B2C invoices are reported within 24 hours.
What are the penalties for FATOORA Phase 2 non-compliance?
SAR 5,000–50,000 per violation depending on severity, plus the practical impact that non-cleared B2B invoices cannot be used by the buyer to claim input VAT — which typically triggers commercial disputes.
Which e-invoicing software is ZATCA-approved?
ZATCA publishes a list of approved solution providers. Zoho Books, Odoo, SAP, Oracle NetSuite, Microsoft Dynamics 365, ClearTax and Cygnet all have certified integrations. Custom in-house ERPs can also be certified through the sandbox and CTE process.
Can I still issue paper invoices under Phase 2?
No — VAT-registered businesses inside a Phase 2 wave must issue every invoice through the compliant e-invoicing system. Paper backups are only allowed for genuine system outages, and must be re-issued through the system when it recovers.

Ready when you are

Need advice tailored to your business?

Book a free 30-minute consultation with a NovaLedge advisor and get answers to your specific situation.