What Is ZATCA E-Invoicing?
ZATCA, the Zakat, Tax and Customs Authority of Saudi Arabia, introduced mandatory electronic invoicing requirements to modernize the tax system, reduce fraud, and improve transparency. E-invoicing applies to all VAT-registered businesses in the Kingdom and is being rolled out in phases.
Understanding the Two Phases
Phase 1: Generation Phase
Phase 1 required businesses to generate and store electronic invoices using a compliant system. Paper invoices and manually written invoices are no longer acceptable. This phase has been in effect since December 4, 2021.
Phase 2: Integration Phase
Phase 2, also called the integration phase, requires businesses to connect their e-invoicing systems directly with the ZATCA FATOORA platform. Invoices must be validated and cleared in near real-time. ZATCA is rolling out Phase 2 in waves, with different groups of taxpayers being onboarded on scheduled dates.
Key Requirements for Phase 2
Businesses must ensure their POS or ERP system meets the following technical requirements:
- UUID Generation: Each invoice must have a universally unique identifier
- Invoice Hash: A cryptographic hash chain linking sequential invoices
- QR Code: Every invoice must include a QR code containing specific data fields
- Digital Signature: Invoices must be digitally signed using a ZATCA-issued cryptographic stamp
- XML Format: Invoices must be generated in the UBL 2.1 XML format
- Real-Time Reporting: Standard tax invoices (B2B) must be cleared through ZATCA before being shared with the buyer
- Simplified Invoices: B2C simplified invoices must be reported within 24 hours
Penalties for Non-Compliance
ZATCA enforces strict penalties for businesses that fail to comply:
- First violation: Warning notice
- Subsequent violations: Fines starting from SAR 5,000 and increasing based on the nature and frequency of violations
- Persistent non-compliance: Can result in fines up to SAR 50,000 per violation
Non-compliance also risks business reputation damage and potential supply chain disruptions, as compliant businesses may prefer to work only with other compliant partners.
How BitPro Handles ZATCA Phase 2
BitPro POS has built ZATCA Phase 2 compliance directly into the core system. Here is how BitPro ensures your business stays compliant:
Automatic QR Code Generation
Every invoice generated through BitPro automatically includes a compliant QR code with all required data fields including seller name, VAT number, timestamp, invoice total, and VAT amount.
FATOORA Platform Integration
BitPro connects directly to the ZATCA FATOORA portal for real-time invoice clearance (B2B) and reporting (B2C). No manual uploads or third-party tools are needed.
Digital Signing
BitPro handles the cryptographic signing of invoices using your ZATCA-issued compliance certificate. The system manages certificate renewal and key storage securely.
Invoice Hash Chain
The system automatically generates and maintains the sequential hash chain across all invoices, ensuring tamper-proof invoice records.
UBL 2.1 XML Compliance
All invoices are generated in the required XML format behind the scenes while presenting a user-friendly interface to your staff.
Step-by-Step Compliance Checklist
Follow this checklist to ensure your business is fully prepared for ZATCA Phase 2:
- Verify your wave group: Check the ZATCA website to confirm when your business is required to integrate
- Update your POS system: Ensure you are using a ZATCA Phase 2 certified system like BitPro POS
- Register on FATOORA: Complete your registration on the ZATCA FATOORA platform
- Obtain your compliance certificate: Generate and install your cryptographic stamp identifier (CSID)
- Configure your system: Set up your VAT number, business details, and ZATCA credentials in your POS
- Run test invoices: Generate test invoices and verify they pass ZATCA validation
- Go live: Begin issuing compliant invoices through the integrated system
- Monitor compliance: Regularly check your ZATCA portal for any rejected invoices or notifications
Frequently Asked Questions
Does ZATCA Phase 2 apply to all businesses?
Phase 2 applies to all VAT-registered taxpayers in Saudi Arabia. ZATCA is onboarding businesses in waves based on annual revenue thresholds.
Can I use my existing POS system?
Only if your POS system has been updated to meet Phase 2 technical requirements. Many older systems require upgrades or replacement.
What happens during internet outages?
BitPro POS works offline and queues invoices for submission once connectivity is restored, ensuring your business operations are never interrupted.
Is Phase 2 compliance a one-time setup?
The initial setup is done once, but you should keep your system updated to accommodate any future ZATCA requirement changes.