ZATCA E-Invoicing (FATOORA): Saudi Arabia Guide

ZATCA e-invoicing in one sentence

ZATCA e-invoicing — the FATOORA programme — is Saudi Arabia's mandatory system for issuing structured electronic invoices and clearing or reporting them through the tax authority's platform. It runs on the Kingdom's own national infrastructure, not Peppol, and it has expanded from simple invoice generation into full real-time integration for a growing population of taxpayers.

If continuous transaction controls (CTC) are new to you, the Oman Fawtara 5-corner model is a useful companion — a neighbouring GCC CTC regime built on different rails. This guide focuses on the Saudi specifics.

Who runs it, and what it's called

E-invoicing in Saudi Arabia is administered by ZATCA — the Zakat, Tax and Customs Authority — under the brand FATOORA (Fatoorah, Arabic for "invoice"). It applies to resident VAT-registered businesses and is delivered in two phases.

Phase 1 vs Phase 2

Phase 1 — the Generation phase (from 4 December 2021)

Every resident VAT-registered taxpayer must generate and store electronic invoices in a structured, tamper-resistant form, instead of handwritten or simple PDF invoices. Simplified (B2C) invoices must carry a QR code. There is no direct connection to ZATCA at this stage — the obligation is to produce compliant invoices and keep them.

Phase 2 — the Integration phase (from 1 January 2023)

Phase 2 adds direct integration between the taxpayer's system and ZATCA's FATOORA platform. It is rolled out in waves defined by annual revenue thresholds — ZATCA announces each wave and notifies affected taxpayers, typically at least six months ahead. The scope widens over time as lower revenue bands are brought in, so the number of businesses integrated keeps growing.

The clearance and reporting models

Phase 2 is where Saudi Arabia's CTC model becomes concrete, and it splits by invoice type:

Invoice type	Used for	ZATCA model	Timing
Standard tax invoice	B2B, B2G	Clearance	Cleared by ZATCA before it is shared with the buyer
Simplified tax invoice	B2C	Reporting	Reported to ZATCA within 24 hours of issuance

This is the crucial distinction. A standard invoice is not valid until ZATCA has cleared it — the authority sits in the transaction. A simplified invoice is issued to the consumer immediately and reported shortly after. Getting this routing wrong is a common implementation failure.

What a compliant invoice contains

ZATCA specifies both the format and the security features. A Phase 2 invoice is XML (built on a UBL 2.1-based implementation standard, or PDF/A-3 with embedded XML) and must carry:

A UUID and the mandatory VAT fields.
A cryptographic stamp and the previous-invoice hash (PIH), chaining invoices together.
A QR code encoding the required elements.

Because these are hard rules enforced by the platform, the discipline is the same as any CTC regime: validate before submission. The general failure modes are catalogued in invoice validation errors you can prevent.

ZATCA is not Peppol — and why that matters

Unlike Oman (PINT OM over Peppol) or the EU (BIS Billing 3.0 over Peppol), ZATCA runs its own platform and its own format. There is no four-corner network, no SMP/SML discovery, no AS4 transport — the taxpayer integrates directly with FATOORA. For the distinction between network and format in general, see Peppol vs PINT.

The practical consequence for any business operating across the GCC: you cannot standardise on one national platform. A Saudi entity needs FATOORA; an Omani entity needs PINT OM; a UAE entity needs PINT-AE. This is exactly the case for a single integration that abstracts every mandate — the model set out in the multi-country e-invoicing API.

Choosing a provider

ZATCA lets taxpayers use any solution that meets the e-invoicing requirements, and publishes an indicative directory of qualified solution providers. The selection criteria are broadly the same as anywhere — compliance, integration quality, security and support — and are covered in how to choose a Peppol Access Point (the principles transfer even though ZATCA itself isn't Peppol). To see where Saudi Arabia sits in the wider wave of 2026 mandates, use the e-invoicing mandates 2026 tracker.

A readiness checklist

[ ] Confirm your wave and integration date (ZATCA notifies affected taxpayers).
[ ] Produce XML invoices to ZATCA's implementation standard.
[ ] Route standard invoices for clearance, simplified for 24-hour reporting.
[ ] Implement the cryptographic stamp, PIH chaining, UUID and QR code.
[ ] Validate every invoice before submission; block on errors.
[ ] Persist ZATCA responses and identifiers against each source invoice for audit.

How GoRoute helps

GoRoute (POP000991) is a certified Peppol Access Point and SMP whose value across the GCC is a single integration that abstracts each country's mandate — Peppol-based regimes like Oman's PINT OM (live in production today) and UAE PINT-AE, and non-Peppol platforms like Saudi Arabia's FATOORA — behind one REST API with validation before submission. If you're planning a GCC-wide rollout rather than a Saudi-only project, that's the architecture to build toward. Book a demo or read the multi-country e-invoicing API.

Sources: ZATCA E-Invoicing (FATOORA); ZATCA roll-out phases; ZATCA solution providers directory.

Frequently asked questions

What is ZATCA e-invoicing?

ZATCA e-invoicing — branded FATOORA (Fatoorah) — is Saudi Arabia's mandatory electronic invoicing system, run by the Zakat, Tax and Customs Authority. All resident VAT-registered businesses must issue structured electronic invoices, and larger taxpayers must integrate their systems directly with ZATCA's platform for clearance and reporting.

What is the difference between ZATCA Phase 1 and Phase 2?

Phase 1 (the Generation phase, mandatory from 4 December 2021) requires all resident VAT-registered taxpayers to generate and store compliant electronic invoices, with QR codes on simplified invoices. Phase 2 (the Integration phase, from 1 January 2023) adds direct integration with ZATCA's FATOORA platform, rolled out in waves by annual revenue, for clearance of standard invoices and reporting of simplified ones.

What is the difference between a standard and a simplified invoice under ZATCA?

A standard tax invoice is used for B2B and B2G transactions and must be cleared by ZATCA before it is shared with the buyer (the clearance model). A simplified tax invoice is used for B2C transactions and is reported to ZATCA within 24 hours of issuance (the reporting model). Both must carry a QR code, cryptographic stamp and required fields.

Is ZATCA e-invoicing based on Peppol?

No. ZATCA runs its own national platform (FATOORA) and its own format — an XML implementation based on UBL 2.1 with Saudi-specific rules, cryptographic stamps and QR codes — not the Peppol four-corner network. A multi-country provider abstracts both Peppol and non-Peppol mandates like ZATCA behind one integration.

Who has to comply with ZATCA Phase 2?

Phase 2 applies to resident VAT-registered taxpayers, brought in through waves defined by annual taxable revenue thresholds. ZATCA announces each wave and notifies the taxpayers in it, typically at least six months before their integration date, so the population in scope keeps expanding over time.

What are the technical requirements for a ZATCA-compliant invoice?

A compliant invoice is XML (or PDF/A-3 with embedded XML) built to ZATCA's implementation standard, carrying a UUID, a cryptographic stamp, the previous-invoice hash, a QR code and all mandatory VAT fields. Standard invoices are submitted for clearance; simplified invoices are reported within 24 hours.

Can I use any e-invoicing provider for ZATCA?

Yes — ZATCA lets taxpayers use any solution that meets the e-invoicing requirements, and publishes an indicative list of qualified solution providers. What matters is that the solution produces compliant invoices and integrates correctly with FATOORA for clearance and reporting.