E-INVOICING IN SAUDI ARABIA – EVERYTHING YOU NEED TO KNOW FOR YOUR BUSINESS

LATEST UPDATES: 2026 DEADLINES, WAVE 24 & PENALTY RELIEF

Final Wave (Wave 24) – Deadline: 30 June 2026

ZATCA has now announced the final wave (Wave 24) of Phase 2 e-invoicing integration, with a deadline of 30 June 2026.

This wave primarily targets small and micro businesses with annual revenues starting from SAR 375,000, making it the broadest implementation phase to date.

What this means for businesses:

• If your turnover falls within this bracket, integration is mandatory 
• You must ensure your system is connected to ZATCA via the Fatoora platform 
• Delays beyond this deadline may expose your business to compliance risks

The 2026 Fines Exemption Initiative

ZATCA has extended its Fines Exemption Initiative until 30 June 2026, providing businesses with a critical opportunity to regularise their compliance status.

Key highlights:

• Certain e-invoicing penalties may be waived if violations are corrected before the deadline 
• Applies to issues such as: 
  • Non-integration 
  • System non-compliance 
  • Historical invoicing errors 
• Businesses must take corrective action proactively 

This presents a strategic window for businesses to:

• Clean up historical invoicing records 
• Upgrade systems to Phase 2 compliance 
• Complete integration without financial penalties 

Creation Business Consultants can support businesses in reviewing, correcting, and integrating systems before this grace period expires.

WHAT IS E-INVOICING?

E-invoicing is the process of generating invoices in a digital format, so you can issue and store them electronically. ZATCA in KSA has rolled out regulations mandating businesses to adopt an e-invoicing process in two phases, from December 4, 2021.

For KSA VAT taxpayers, e-invoices will resemble the VAT invoices that are generally issued but will be generated through an online system. Note that a paper invoice that is copied or scanned is not considered an e-invoice.

Once issued, an e-invoice cannot be edited. However, you can issue electronic notes (debit and credit notes that are VAT-compliant and issued through an electronic system). These should be issued with reference to the original invoice that was issued. All your invoicing and note-issuing transactions will have to be done through the same e-invoicing system and must be compliant with ZATCA’s regulations. This standardizes the way transactions are made, ensuring that everything is done uniformly, and information is stored securely.

You will have to issue e-invoices for sales made within the country, exports made from KSA to other countries, and goods and services for which you have received advanced payments.

WHY WAS E-INVOICING INTRODUCED TO SAUDI ARABIA?

These regulations are being rolled out so that businesses can work more efficiently and securely. The goal of this move is to integrate your business data with the ZATCA system to increase transparency in transactions undertaken by businesses and improve the level of efficiency by companies and government departments situated in the Kingdom.

Other benefits of e-invoicing for taxpayers:

• A better experience for sellers and buyers.
• Electronic data will be more secure and less error-prone than paper entries. 
• A streamlined electronic invoicing process reduces slip-ups and additional hassles for business owners. Your workload gets reduced, you get paid faster, and you can retrieve documents easily when storing them digitally.
• To comply with the rules, it is essential that every resident taxpayer is prepared for e-invoicing.

WHICH BUSINESSES DOES E-INVOICING APPLY TO?

E-invoicing will be applicable to all taxable individuals residing in Saudi Arabia. These taxable residents refer to any of the following legal individuals:

• Those who trade either within or outside of Saudi Arabia.
•  Entities registered for VAT in Saudi Arabia or are required to be registered for VAT in Saudi Arabia.

Businesses issuing invoices on behalf of a third party will fall under the scope of e-invoicing. Processes for e-invoicing will apply to all VAT-taxable goods and services whether at a standard rate or at zero rate. It is also important to note that e-invoices are required to be issued in Arabic. Your company is permitted to issue invoices in other languages provided that the Arabic e-invoice requirement is fulfilled.

THE TWO PHASES OF E-INVOICING REGULATIONS IN KSA AND IMPLEMENTATION TIMELINE

• PHASE 1: ISSUING AND STORING E-INVOICES

From December 4, 2021, a taxpayer in Saudi Arabia was mandated to issue and store e-invoices and electronic notes instead of physical invoices, credit, and debit notes.

This required a taxpayer in KSA to start using an e-invoicing system that has internet connectivity and is compliant with ZATCA. The e-invoicing system can be an online cash register, e-invoicing software installed on your computer, or a cloud-based e-invoicing solution.

All elements and mandatory fields of the tax invoice must be included while issuing an e-invoice, such as the seller’s name and VAT registration number, the time the invoice is being issued, the VAT total, and the overall value of the invoice inclusive of VAT.

• PHASE 2: INTEGRATING WITH THE ZATCA SYSTEM

Since January 1, 2023, this phase was implemented in different stages for targeted taxpayer groups. It is now required to integrate your e-invoicing solution with ZATCA’s system to send the e-invoices generated to the portal for verification and validation.

Update:
Phase 2 rollout is now nearing completion, with Wave 24 (June 30, 2026) being the final integration deadline for the remaining taxpayer groups.

The timeline for businesses to comply with e-invoicing procedures is introduced via two phases.

REQUIREMENTS FOR E-INVOICING

The two types of invoices that can be issued by your business are as follows:

• ELECTRONIC INVOICE (STANDARD INVOICE)

An electronic invoice is issued for most B2B and B2G transactions. This type of document is used for claiming input VAT deduction by consumers. Standard e-invoices are shared by the companies with the consumers in an agreed format. The standard e-invoice is then issued to the buyers after being cryptographically stamped and cleared by ZATCA in the future (integration with the ZATCA portal is applicable after the implementation of the integration phase starting from January 2023).

Standard electronic invoices contain fields as per VAT legislation which include information about the seller and buyer, transactions, details of products/services, and other technical fields that are to be generated by the electronic invoicing solution.

• SIMPLIFIED ELECTRONIC INVOICE

Simplified electronic invoices are designed for most B2C transactions that are instant and do not require the buyer to use the invoice for input VAT deduction.

During the generation phase, it is sufficient for individuals that are subject to the e-invoicing regulation to share the simplified invoices with customers and require no further action afterward. In the integration phase, simplified e-invoices need to be reported to the authority within 24 hours of issuance.

The credit/debit note types follow the type of invoice that they are issued for e.g., a standard electronic note is issued for a standard e-invoice and a simplified electronic note is issued for a simplified e-invoice.

In phase 1, all you will have to do is share the simplified e-invoices with your customers. However, in phase 2, these invoices will have to be reported to ZATCA within 24 hours of issuing them.

Technical File Format & Mandatory Fields (Phase 2 Update)

With Phase 2 implementation, ZATCA has introduced strict technical specifications:

File format requirements:

• XML format (structured e-invoice data) 
• PDF/A-3 format with embedded XML 

Mandatory technical fields include:

• UUID (Universally Unique Identifier) 
• Cryptographic Stamp 
• Invoice Hash 
• Sequential Invoice Number 
• QR Code (mandatory for simplified invoices) 

These are critical for system validation and must be generated automatically by your e-invoicing solution.

Sample E-Invoice (Illustrative Layout)

A compliant invoice should include:

• Seller details (name, VAT number) 
• Buyer details (for B2B transactions) 
• Invoice timestamp 
• VAT breakdown 
• QR Code (for simplified invoices) 
• UUID & cryptographic stamp (embedded in system layer) 

(Tip: Businesses should ensure their system automatically positions and generates these fields correctly.)

E-INVOICE TYPE AND TRANSACTION TYPE

Find below the breakdown of the transaction type and the type of e-invoice needed to be issued respectively:

HOW DOES THE E-INVOICING PROCESS WORK IN KSA?

Standard E-invoice (B2B / B2G)

Generation → ZATCA Clearance (Real-time) → Buyer

• The invoice is generated in the system 
• Sent to ZATCA for real-time clearance 
• The approved invoice is then shared with the buyer 

Simplified E-invoice (B2C)

Generation → Buyer → ZATCA Reporting (within 24 hours)

• Invoice issued to the customer 
• Reported to ZATCA within 24 hours 

These two models form the core of Phase 2 compliance and are critical to understand when selecting or upgrading your invoicing system.

FATOORA PORTAL & DEVICE ONBOARDING

With Phase 2 fully underway, many businesses face operational challenges when integrating with the Fatoora Portal.

Onboarding Your Devices To Fatoora

To successfully integrate:

• Register your e-invoicing solution with ZATCA 
• Generate compliance certificates 
• Configure API integration 
• Link each invoicing device/system to the portal 
• Perform testing (sandbox environment) before going live 

Common Integration Errors In Phase 2

Businesses frequently encounter:

• Incorrect XML structure 
• Failure in cryptographic stamp generation 
• API connectivity issues 
• Invalid QR code formatting 
• Missing mandatory fields (UUID, hash) 

Recommendation:
Work with experienced consultants to avoid delays and ensure smooth onboarding.

E-INVOICING PENALTIES FOR NON-COMPLIANCE

Penalties for non-compliance are determined by the type of offense and the number of times it is committed. As a result, initial offenses are more likely to be treated leniently, whereas recurring offenses will be subject to harsher sanctions. Penalties for non-compliance are listed below.

If ZATCA inspectors discover a violation during a field visit in your company, a warning will be issued before facing any penalties. ZATCA aims to raise awareness instead of penalising companies for their first infringement. Your business will then have three months to comply with the law and make any required changes to your systems.

If noncompliance persists after the initial inspection, you will be subject to a penalty of SAR 1,000. In such cases that your company fails to comply with the requirements and does not make the necessary modifications within three months of receiving the notice, the penalty fee will gradually increase.

Fines for each additional repetition time will be as follows:

• 5,000 SAR for the third time.
• 10,000 SAR for the fourth time.
• 40,000 SAR for the fifth time.
• If the same violation is repeated 12 months after its discovery, it is considered a new violation. The process will begin again starting with a warning without a fine.

GUIDELINES FOR E-INVOICING COMPLIANCE

Below are the guidelines that your company needs to be aware of to ensure your organisation is prepared for e-invoicing in Saudi Arabia:

• Businesses should ensure integration of their e-invoicing system to ZATCA portal to be notified 6 months in advance before it affects their business.
• Businesses must ensure the system can be securely connected through Application Programming Interface (API) and create a Universally Unique Identifier (UUID) and a digital signature.
• The E-invoicing system should also be able to distinguish between an electronic invoice, a hash, and a cryptographic stamp with a sequential number and anti-tampering capabilities. It is important to note that these features are not required in phase 1 but must all be present in phase 2.
• The e-invoicing provisions will apply to all taxable goods and services that are subject to VAT (whether standard or zero rates).
• All KSA VAT-registered business owners (except non-resident taxable people) who make sales within and outside KSA must adopt the e-invoicing process. If you are a third party in KSA issuing a tax invoice on behalf of a taxable person, you will have to adopt the e-invoicing process too.
• E-invoicing is mandatory for all B2B, B2G, and B2C transactions.
• The invoices must be in Arabic. You may opt to translate them or add another language, but it is mandatory to issue the e-invoice in Arabic.

DO’S AND DON’TS FOR TAXPAYERS

Do’s

• If you are a taxpayer in KSA, you must select an e-invoicing system, or find an invoicing provider to configure their system to offer e-invoicing solutions in compliance with ZATCA.
• In most businesses, there may be more than one person managing the accounts. Ensure that all your finance staff are well-trained in using the e-invoicing system, so they can be prepared to run transactions smoothly.

Don’ts

• Don’t issue handwritten or manual invoices.
• While you are looking for an e-invoicing system, don’t opt for a system that:
  • Allows anonymous access.
  • Has no user management capabilities.
  • Permits e-invoices and associated notes to be edited or tampered with.
  • Allows multiple e-invoice sequences to be created.
  • Permits time changes or exporting the stamping key.
• Don’t modify invoices—instead, issue a debit/credit note and link it to the original invoice.
• Don’t delete any e-invoices once they are issued, as they will be needed for future reference.

HOW CREATION BUSINESS CONSULTANTS CAN HELP

Navigating Phase 2 e-invoicing requirements can be technically complex, particularly with evolving ZATCA regulations and tight deadlines.

Creation Business Consultants supports businesses with:

• End-to-end e-invoicing implementation 
• Fatoora portal onboarding & API integration 
• System selection and compliance checks 
• Invoice format validation (XML & PDF/A-3) 
• Resolution of integration errors 
• Historical data clean-up under the Fines Exemption Initiative 
• Ongoing compliance monitoring 

Act now before the June 30, 2026, deadline to avoid penalties and operational disruption.

TAKEAWAY

As a good practice, it is suggested that your company design a system that follows ZATCA’s recommendations from the onset, ensuring all technical requirements are met for future integration.

With the final Phase 2 deadline approaching and penalty waivers available until June 30, 2026, businesses must act proactively to ensure full compliance. Creation Business Consultants liaise with government departments to get the most up-to-date laws and government procedures.

Scott Cairns,
Managing Director