ZATCA E-Invoicing (Fatoora)

ZATCA E-Invoicing, officially known as the Fatoora program (sometimes written Fatoorah), is the Kingdom of Saudi Arabia’s national mandatory electronic invoicing system administered by the Zakat, Tax and Customs Authority (ZATCA). Designed to digitize the entire invoicing lifecycle, eliminate paper invoices, combat tax evasion, and strengthen VAT compliance, Fatoora is one of the most consequential tax reforms of the past decade and a cornerstone of Saudi Arabia’s Vision 2030 digital transformation agenda.

Launched in December 2021, ZATCA e-invoicing requires all resident taxable persons registered for Value Added Tax (VAT) in Saudi Arabia to generate, store, transmit, and validate invoices through compliant electronic systems integrated with the Fatoora platform. Non-resident taxpayers remain exempt. The framework applies to B2B, B2G, and B2C transactions across all industries, from retail and hospitality to manufacturing, professional services, healthcare, and contracting.

For multinational employers, payroll providers, HR teams, and finance leaders operating in Saudi Arabia, ZATCA e-invoicing sits alongside other mandatory compliance regimes such as the Wage Protection System (WPS) through Mudad, GOSI contributions, Saudization (Nitaqat), and Qiwa contracts. Together, these systems create an integrated digital compliance ecosystem that every employer in the Kingdom must navigate.

The Two Phases of ZATCA E-Invoicing

ZATCA rolled out Fatoora in two distinct, sequential phases.

Phase 1: Generation Phase

Effective from 4 December 2021, Phase 1 of ZATCA e-invoicing required all VAT-registered persons in Saudi Arabia to generate and store invoices in an electronic, structured format using a compliant solution. The key obligations under Phase 1 included:

• Replacing paper and handwritten invoices with electronic versions
• Producing structured tax invoices and simplified tax invoices
• Mandatory inclusion of fields such as seller name, VAT registration number, invoice timestamp, total VAT amount, and total amount with VAT
• A QR code on simplified tax invoices (typically B2C)
• Electronic storage of all issued invoices in a tamper-proof format

No format such as XML was mandated at this stage, and there was no integration with ZATCA’s systems.

Phase 2: Integration Phase

Phase 2, which began on 1 January 2023, marked a major shift to full real-time integration with ZATCA’s Fatoora platform. Under Phase 2, taxpayers must connect their ERP, accounting, or POS systems directly to the Fatoora platform via APIs.

Phase 2 introduces:

• A clearance model for B2B and B2G invoices, requiring real-time validation by ZATCA before issuance
• A reporting model for B2C simplified invoices, with submission to ZATCA within 24 hours of generation
• Mandatory XML format using UBL 2.1 aligned with EN 16931, or PDF/A-3 with embedded XML
• A cryptographic stamp applied by ZATCA confirming legal validity
• A Universally Unique Identifier (UUID) for each invoice
• A QR code on every invoice
• Digital signatures via XAdES and anti-tampering controls

An invoice issued without a valid Fatoora clearance response has no tax effect, meaning input VAT cannot be claimed by the buyer.

ZATCA E-Invoicing Waves: Who Must Integrate and When

Phase 2 is being implemented through staggered waves based on annual VAT-able turnover thresholds. ZATCA notifies each affected taxpayer directly, typically at least six months before their compliance deadline.

Key recent waves include:

• Wave 23: Businesses with annual VAT-able turnover above SAR 750,000 in 2022, 2023, or 2024 must integrate by 31 March 2026.
• Wave 24: Businesses with annual VAT-able turnover above SAR 375,000 in 2022, 2023, or 2024 must integrate by 30 June 2026.

Earlier waves covered larger taxpayers first, starting with companies exceeding SAR 3 billion in turnover in January 2023, progressively widening the net through 2024 and 2025. As the rollout continues, smaller taxpayers will be brought into the regime, expanding the Fatoora ecosystem across the entire Saudi private sector.

The Two Types of ZATCA E-Invoices

ZATCA recognizes two main invoice types under Fatoora.

Standard Tax Invoice

Used primarily for B2B and B2G transactions. Standard tax invoices follow the clearance model, where the seller submits the invoice to the Fatoora platform for validation in real time. Only after ZATCA applies a cryptographic stamp and returns the cleared XML can the invoice be legally shared with the buyer. Standard invoices are mandatory for transactions of SAR 1,000 or above, intra-GCC sales, exports, and nominal sales where the buyer requires input VAT credit.

Simplified Tax Invoice

Used for B2C transactions and smaller sales below SAR 1,000. Simplified invoices can be delivered to the customer immediately, but must be reported to ZATCA within 24 hours of issuance under Phase 2. A QR code is mandatory and allows consumers to verify the invoice’s authenticity through ZATCA’s app or any compliant reader.

Mandatory Fields and Technical Requirements

Every ZATCA-compliant e-invoice must include a defined set of mandatory data fields and technical features:

• Seller’s commercial name, address, and VAT registration number
• Buyer’s name, address, and VAT registration number (for standard invoices)
• Invoice issuance date and timestamp
• Sequential invoice number
• Description of goods or services
• Pre-tax amount, VAT amount, and total payable amount
• Currency (typically SAR)
• UUID (Universally Unique Identifier)
• QR code (mandatory for simplified invoices, included on all Phase 2 invoices)
• Cryptographic stamp applied by ZATCA
• Anti-tampering hash linking the invoice to previous invoices
• Issuance through a ZATCA-qualified e-invoicing solution

E-invoices must be issued in Arabic, although bilingual invoices including English are permitted. All invoices must be stored electronically in line with the VAT Law, VAT Implementing Regulation, and E-Invoicing Regulation.

Penalties for ZATCA E-Invoicing Non-Compliance

ZATCA applies a graduated penalty framework to encourage compliance:

• Initial inspections typically result in a warning rather than an immediate fine, with a three-month grace period to comply.
• Persistent non-compliance after the grace period attracts fines starting at SAR 1,000 per offence.
• Repeated violations or failures to integrate with the Fatoora platform on the mandated wave deadline can lead to escalating administrative fines, restrictions on input VAT recovery, and additional scrutiny on broader VAT and Zakat obligations.
• Violations discovered after 12 months are typically treated as new offences, restarting with a warning.

Beyond direct penalties, non-compliance with ZATCA e-invoicing can also affect broader business operations, including delays in customs clearance, banking transactions, and government tender eligibility.

How ZATCA E-Invoicing Connects to Payroll and HR Compliance

While ZATCA e-invoicing is primarily a tax and finance regulation, it intersects with payroll and HR in several important ways for multinational employers operating in Saudi Arabia.

• Vendor and contractor payments: Payments to third-party HR vendors, training providers, recruitment agencies, and contractor companies must be supported by ZATCA-compliant invoices, affecting payroll cost capture and tax deductibility.
• Intercompany salary recharges: Cross-entity recharges of expatriate salaries, secondments, or shared service costs between group companies require ZATCA-compliant invoices, with knock-on transfer pricing and Corporate Tax implications.
• Employee benefits administered by suppliers: Health insurance premiums, mobility services, education benefits, and other supplier-paid benefits must be invoiced through ZATCA-compliant channels for proper VAT treatment.
• End-of-service settlements: Payments to specialist providers for gratuity administration, savings schemes, or workforce-transition services flow through the e-invoicing framework.
• Audit-ready cost reporting: Accurate payroll records linked to compliant invoices feed directly into Corporate Tax filings, Zakat returns, transfer pricing documentation, and Saudization cost calculations.
• Integrated compliance ecosystem: ZATCA data is increasingly cross-referenced with WPS payments through Mudad, GOSI contributions, Qiwa contracts, and Nitaqat classifications, making consistency across systems essential.

For employers running mainland, free zone, and offshore operations, mismatches between payroll data and ZATCA-compliant invoices can trigger broader compliance flags across the Saudi regulatory ecosystem.

Common ZATCA E-Invoicing Challenges for Multinational Employers

Even with a clear regulatory framework, employers and finance teams routinely encounter issues such as:

• Late integration with the Fatoora platform missing wave-specific deadlines
• Inconsistent vendor data leading to invoice rejection during clearance
• XML formatting errors and missing mandatory fields in B2B invoices
• Reconciling intercompany salary recharges with transfer pricing rules
• Aligning payroll allowance disbursements with vendor invoice records
• Coordinating ZATCA-compliant accounting systems with payroll software for total cost visibility
• Differentiating standard versus simplified invoice treatment for mixed B2B and B2C activity
• Managing bilingual invoicing requirements across mainland and free zone entities
• Keeping pace with new ZATCA waves, rate changes, and technical updates
• Ensuring that EOR or PEO arrangements operate within ZATCA, WPS, GOSI, and Saudization frameworks simultaneously

How Mercans Helps Employers Stay Aligned with ZATCA E-Invoicing

As a global leader in payroll technology and Employer of Record services, Mercans helps multinational organizations and regional businesses navigate the broader Saudi compliance ecosystem, including the parts of the payroll lifecycle that connect directly with ZATCA e-invoicing.

While Fatoora compliance itself is handled through ZATCA-qualified e-invoicing solutions integrated with the taxpayer’s ERP or accounting system, Mercans provides the payroll, HR, and statutory backbone that ensures consistent, accurate, and audit-ready data flows into those systems. With deep expertise in Saudi labor law, the GOSI framework, Wage Protection System rules through Mudad, Saudization (Nitaqat), Qiwa contracts, and Corporate Tax compliance, Mercans supports employers in the Kingdom with:

• Accurate payroll processing aligned with the Wage Protection System and Mudad
• Automated GOSI, SANED, and occupational hazards contribution management
• Synchronization with Qiwa for employment contracts and Nitaqat reporting
• Clean cost data and vendor reconciliation that supports ZATCA-compliant invoicing
• Multi-currency payroll in SAR with built-in support for the Hijri calendar
• Bilingual payslips and HR documents in Arabic and English
• Integration with leading HCM and ERP platforms including Workday, SAP SuccessFactors, Oracle HCM, UKG, DarwinBox, and Dayforce
• Audit-ready records that simplify Corporate Tax filings and ZATCA-related reviews

Explore Mercans’ Saudi Arabia payroll software at https://mercans.com/payroll-software/saudi-arabia/ and the full KSA payroll service at https://mercans.com/global-payroll/saudi-arabia/.

For companies expanding into Saudi Arabia without establishing a local entity, Mercans’ Employer of Record solution handles employment compliance, payroll, and statutory contributions while keeping HR data consistent with the broader ZATCA, WPS, GOSI, and Qiwa ecosystem. Learn more in Mercans’ guide on Saudi Arabia Payroll Outsourcing and the resource on how EOR in Saudi Arabia solves sponsorship challenges.

The latest statutory developments affecting Saudi compliance, including ZATCA’s ongoing Phase 2 rollout and the 2026 GOSI structure, are tracked in Mercans’ regulatory alert: Saudi Arabia: GOSI Contribution Rates & Saned Unemployment Fund 2026.

Frequently Asked Questions About ZATCA E-Invoicing (Fatoora)

What is ZATCA e-invoicing (Fatoora)?

ZATCA e-invoicing, officially known as Fatoora, is Saudi Arabia’s mandatory electronic invoicing system run by the Zakat, Tax and Customs Authority. It requires all VAT-registered residents to generate, store, and transmit invoices electronically, with B2B and B2G invoices subject to real-time clearance and B2C invoices reported to ZATCA within 24 hours.

Who must comply with ZATCA e-invoicing?

All resident taxable persons registered for VAT in the Kingdom of Saudi Arabia must comply with ZATCA e-invoicing. This includes individuals, partnerships, companies, sole proprietorships, and free zone businesses. Non-resident taxpayers are exempt from issuing Fatoora-compliant invoices.

What is the difference between Phase 1 and Phase 2 of ZATCA e-invoicing?

Phase 1 (Generation Phase), effective from 4 December 2021, required businesses to generate and store electronic invoices in a structured format with mandatory fields. Phase 2 (Integration Phase), effective from 1 January 2023 and rolling out in waves, requires real-time integration with the Fatoora platform, XML or PDF/A-3 format, cryptographic stamping, and clearance for B2B invoices.

What are the current ZATCA e-invoicing waves for 2026?

Wave 23 requires businesses with annual VAT-able turnover above SAR 750,000 in 2022, 2023, or 2024 to integrate with the Fatoora platform by 31 March 2026. Wave 24 extends the mandate to businesses with annual turnover above SAR 375,000, with an integration deadline of 30 June 2026. Additional waves are expected as ZATCA continues to widen the scope.

What are the two types of ZATCA e-invoices?

ZATCA recognizes Standard Tax Invoices (typically B2B and B2G, subject to real-time clearance) and Simplified Tax Invoices (typically B2C, reported within 24 hours of issuance). Standard invoices allow buyers to claim input VAT, while simplified invoices include a mandatory QR code for end-consumer verification.

What format must ZATCA e-invoices follow?

Phase 2 e-invoices must be issued in XML format using UBL 2.1 aligned with EN 16931, or as PDF/A-3 documents with embedded XML. Each invoice must include mandatory fields, a UUID, a QR code, a cryptographic stamp applied by ZATCA, a digital signature using XAdES, and anti-tampering hashes linking it to previous invoices.

What happens if a business fails to comply with ZATCA e-invoicing?

Non-compliance can result in administrative warnings during initial inspections, followed by fines starting at SAR 1,000 per offence for persistent violations. Failure to integrate with Fatoora on the mandated wave deadline can also affect input VAT recovery, expose the business to broader VAT audits, and disrupt commercial operations.

How does ZATCA e-invoicing connect to payroll and HR compliance?

ZATCA e-invoicing intersects with payroll and HR through vendor payments (recruitment, training, insurance), intercompany salary recharges, contractor payments, employee benefit invoicing, and end-of-service service providers. Accurate payroll data and clean vendor records feed directly into ZATCA-compliant invoicing, Corporate Tax filings, and Saudization reporting.

Are free zone companies in Saudi Arabia subject to ZATCA e-invoicing?

Yes. ZATCA e-invoicing applies to all VAT-registered resident taxpayers in Saudi Arabia, including companies operating from special economic zones such as the King Abdullah Economic City (KAEC) and other Saudi free zones. Specific VAT and Zakat treatments may vary, but the underlying e-invoicing obligation continues to apply.

How does Mercans help businesses operating under ZATCA in Saudi Arabia?

Mercans manages the payroll and HR backbone that surrounds ZATCA e-invoicing, including WPS-compliant salary processing through Mudad, GOSI and SANED contributions, Saudization tracking, Qiwa-aligned employment contracts, and audit-ready payroll records that integrate cleanly with ZATCA-compliant accounting systems. Companies can get started at the Mercans Saudi Arabia payroll page or explore Mercans payroll software for KSA.