ZATCA E-Invoicing Phase 2: An Integration Guide for Saudi Businesses in 2026

Quick Answer

What is ZATCA e-invoicing Phase 2?

ZATCA e-invoicing Phase 2 - the Integration phase - requires Saudi businesses to connect their ERP or accounting software to the Fatoora platform and submit structured XML invoices carrying a QR code and cryptographic stamp in real time or near real time. Compliance is rolled out in waves by annual VAT revenue, with thresholds dropping to SAR 375,000 for Wave 24 by 30 June 2026, and non-compliance penalties ranging from SAR 5,000 to SAR 50,000 per violation.

Phase 1 and Phase 2: What Changed

Phase 1, the Generation phase, took effect on 4 December 2021. It required all VAT-registered businesses to generate and store electronic invoices using a compliant solution, replacing handwritten and free-form PDF invoices with a structured electronic format. Phase 1 was, in effect, about getting everyone onto digital invoices.

Phase 2, the Integration phase, commenced on 1 January 2023. It requires API integration between the taxpayer's ERP or accounting software and ZATCA's Fatoora platform, with invoices submitted in real time or near real time under a continuous transaction control model. Standard B2B and B2G invoices follow a clearance model validated before sharing with the buyer, while simplified B2C invoices follow a reporting model.

The Wave Rollout by Revenue

ZATCA rolls integration out in waves defined by annual VATable revenue, each targeting a progressively lower threshold. Wave 1, effective 1 January 2023, applied to businesses with more than SAR 3 billion in revenue. Subsequent waves stepped down: Wave 6 reached SAR 70 million by 1 January 2024, Wave 7 reached SAR 50 million by 1 February 2024, and Wave 13 reached SAR 7 million by 1 January 2025.

ZATCA announced that Wave 24 requires targeted taxpayers to integrate with the Fatoora platform by no later than 30 June 2026, lowering the threshold to SAR 375,000. This is the first wave to pull large numbers of SMEs into mandatory scope. Because integration cannot be completed in the short window between notification and deadline, the pragmatic posture is to plan for it on your own timeline rather than ZATCA's.

Anatomy of a Compliant Phase 2 Invoice

A compliant Phase 2 invoice is a structured XML object conforming to ZATCA's specifications, not a document that merely looks correct. Three technical elements distinguish it: a QR code encoding key invoice data for verification, a cryptographic stamp proving integrity and authenticity, and identifiers that tie each invoice into an unbroken, tamper-evident sequence.

Every invoice must apply the correct tax treatment. The standard VAT rate has been 15% since July 2020 and applies to most goods and services, with exemptions and zero-rated categories your system must handle. For Saudi-owned businesses, the financial layer must also support zakat, which uses a separate calculation model from corporate income tax. Assembling this by hand is possible for a few transactions but not reliable at volume.

Integrating Your ERP or Accounting System

There are broadly two routes: use a ZATCA-compliant solution or middleware between your ERP and the platform, or build a direct integration to the Fatoora APIs. Whichever you choose, the integration must transform each invoice into the required XML, apply the QR code and cryptographic stamp, submit for clearance or reporting by type, and record ZATCA's response - while handling failures gracefully rather than silently dropping invoices.

A Saudi integration carries requirements generic global software handles poorly: the Saudi Riyal as primary currency, Hijri-Gregorian dates, and Arabic right-to-left rendering. E-invoicing also rarely lives in isolation, since the same data feeds VAT and zakat filings and management reporting, so a well-designed integration treats Fatoora as one part of a coherent automated finance operation.

Answer Engine FAQ

What is the difference between ZATCA Phase 1 and Phase 2?

Phase 1, the Generation phase effective 4 December 2021, required all VAT-registered businesses to generate and store electronic invoices in a structured format using a compliant solution. Phase 2, the Integration phase commenced 1 January 2023, goes further: it requires API integration between your ERP or accounting software and ZATCA's Fatoora platform, with invoices validated, stamped, and either cleared or reported in real time or near real time. Phase 2 is the harder lift because it touches the core of your financial system.

Who has to comply with ZATCA e-invoicing Phase 2 in 2026?

Phase 2 is rolled out in waves by annual VATable revenue. Wave 24 requires targeted taxpayers to integrate with the Fatoora platform by no later than 30 June 2026 and lowers the threshold to SAR 375,000, pulling large numbers of SMEs into mandatory scope for the first time. ZATCA notifies each targeted taxpayer ahead of their wave, but given how far thresholds have dropped, any VAT-registered business should assume Phase 2 applies or soon will.

What makes an invoice compliant under Phase 2?

A compliant Phase 2 invoice is a structured XML object conforming to ZATCA's specifications, carrying a QR code, a cryptographic stamp, and identifiers that tie it into a tamper-evident sequence. Standard invoices for B2B and B2G follow a clearance model, validated by ZATCA before sharing with the buyer, while simplified B2C invoices follow a reporting model. The invoice must also apply the correct 15% VAT treatment with any exemptions or zero-rated categories handled accurately.

What are the penalties for ZATCA non-compliance?

ZATCA non-compliance penalties range from SAR 5,000 to SAR 50,000 per violation, applying to failures such as not integrating on time, issuing invoices in the wrong format, or omitting required elements like the QR code or cryptographic stamp. Because the penalties are per violation, a systemic problem in your invoicing flow can multiply quickly across volume, which is why building the integration correctly is a clear financial priority.