Saudi Arabia runs one of the most advanced and mature e-invoicing regimes in the world. Under the Zakat, Tax and Customs Authority (ZATCA), every VAT-registered resident business must issue invoices through a compliant electronic system and connect that system directly to the national Fatoora platform. The model is a true Continuous Transaction Controls (CTC) system: standard (B2B and B2G) invoices are cleared by ZATCA in real time before they reach the buyer, while simplified (B2C) invoices are reported to ZATCA within 24 hours of issuance. Unlike the planning-stage regimes of countries such as South Africa, Saudi Arabia’s mandate is fully live and has been since December 2021. The relevant question for most businesses in 2026 is not whether e-invoicing applies, but which integration wave they fall into.
This article walks through the Saudi e-invoicing architecture, the live 2026 integration waves (Wave 23 and Wave 24), the technical requirements, the penalty regime, and how to prepare. Saudi Arabia is the reference case for a fully implemented clearance-and-reporting CTC model in the MENA region.
Before getting into the technical detail, it helps to separate the layers a business in Saudi Arabia operates under. Each has its own legal basis, scope, and timeline:
- Layer 1: VAT and invoicing law. The VAT Law and its Implementing Regulations set out what a tax invoice must contain, the 15% standard VAT rate, the SAR 1,000 threshold separating standard from simplified invoices, and the six-year retention rule. These apply to all taxable persons.
- Layer 2: E-Invoicing Regulation (Fatoora). The dedicated e-invoicing framework issued by ZATCA, mandating that all invoices be generated through a compliant Electronic Generation Solution (EGS) in a structured format with cryptographic controls, QR codes, and UUIDs.
- Layer 3: Generation Phase (Phase 1). In force since 4 December 2021. All resident VAT-registered businesses must generate and store electronic invoices using a compliant system. PDFs and handwritten invoices no longer satisfy the requirement.
- Layer 4: Integration Phase (Phase 2). In force since 1 January 2023, rolled out in waves by turnover. Businesses must integrate their EGS directly with the Fatoora platform for real-time clearance (standard invoices) or 24-hour reporting (simplified invoices). Waves 23 and 24 bring SME-scale businesses into scope during 2026.
Each layer builds on the one before it. A business in an active Integration Phase wave must satisfy all four layers simultaneously: VAT-law invoice content, the Fatoora technical specification, Phase 1 generation rules, and Phase 2 real-time connectivity.
What is E-Invoicing in Saudi Arabia?
E-invoicing in Saudi Arabia means the generation, exchange, clearance or reporting, and storage of invoices in a structured electronic format through a compliant Electronic Generation Solution (EGS). Businesses must issue electronic tax invoices, simplified tax invoices, and electronic credit and debit notes wherever VAT rules require these documents. Paper invoices and PDFs generated outside a compliant system do not satisfy Saudi e-invoicing requirements. The platform is known as Fatoora, and the supervising authority is the Zakat, Tax and Customs Authority (ZATCA).
The model combines two distinct control mechanisms depending on invoice type: real-time clearance for standard invoices (B2B and B2G) and near-real-time reporting for simplified invoices (B2C). This makes it one of the most mature CTC frameworks globally. While Saudi Arabia does not operate a SAF-T regime in the European sense, the Fatoora data stream achieves the same audit-visibility objective by capturing every invoice at the point of issuance rather than through a periodic file.
What is B2B e-invoicing in Saudi Arabia?
B2B e-invoicing applies to transactions between businesses that require a Standard Tax Invoice, required for any supply exceeding SAR 1,000, and strongly advisable for all B2B transactions because only a standard tax invoice entitles the buyer to claim input VAT. Before a B2B standard invoice can be shared with the buyer, it must be transmitted to ZATCA for validation and clearance. ZATCA applies its cryptographic stamp and returns the cleared invoice to the supplier; only then can it be legally issued to the customer.
This clearance model has a sharp practical consequence on the buyer side. If a supplier has passed its Phase 2 integration deadline, the buyer may only accept cleared Phase 2 invoices from that supplier. Accepting a non-compliant or Phase 1 invoice means ZATCA rejects it as a valid tax document, resulting in a total loss of the 15% input VAT deduction for that transaction. Buyer-side diligence is therefore as important as supplier-side compliance.
What is B2G e-invoicing in Saudi Arabia?
B2G e-invoicing follows the same process as B2B. Businesses supplying goods or services to government entities must issue Standard Tax Invoices and obtain ZATCA clearance before sharing the invoice with the public-sector customer. The same technical requirements apply: structured XML, QR code, cryptographic stamp, UUID, and sequential numbering. There is no separate B2G platform or format in Saudi Arabia, the Fatoora clearance flow is identical whether the buyer is a private business or a government body, which is a notable simplification compared with the parallel B2G/B2B regimes seen in much of Europe.
What is B2C e-invoicing in Saudi Arabia?
B2C transactions generally require a Simplified Tax Invoice. Unlike standard invoices, simplified invoices do not require prior clearance. Instead, the business generates the invoice through a compliant system, includes a locally generated QR code, and reports the invoice to ZATCA within 24 hours of issuance. This reporting approach lets consumer transactions complete quickly at the point of sale while still giving ZATCA near-real-time visibility. Simplified invoices are valid for supplies below SAR 1,000, but they do not entitle the recipient to an input VAT deduction, so a business buyer who needs to reclaim VAT must request a standard invoice even for a small purchase.
E-Invoicing in Saudi Arabia 2026 Last Updates
The defining 2026 developments are the two SME-scale integration waves and the expiry of the penalty-waiver initiative:
- Wave 23. Announced by ZATCA on 27 June 2025. Covers resident taxpayers with VAT-subject turnover exceeding SAR 750,000 in 2022, 2023, or 2024. Integration deadline: 31 March 2026.
- Wave 24. Announced on 26 September 2025. Lowers the threshold to SAR 375,000 in 2022, 2023, or 2024, the lowest threshold yet, bringing thousands of small businesses into the Integration Phase for the first time. Integration deadline: 30 June 2026.
- Penalty-waiver initiative expires 30 June 2026. ZATCA’s “Initiative to Cancel Fines and Exempt Taxpayers from Penalties”, which has let businesses correct past errors without financial penalty, permanently expires on 30 June 2026, the same date as the Wave 24 deadline. After that date, ZATCA’s systems shift from educational mode to full enforcement.
The pattern is unmistakable: ZATCA is lowering the turnover threshold wave by wave toward full national coverage. Each wave is announced at least six months before its deadline, giving targeted taxpayers a sandbox-testing and API-configuration window. Businesses below the current threshold should monitor ZATCA announcements rather than assume they are permanently out of scope.
| Why this matters in 202630 June 2026 is the single most important date in the Saudi e-invoicing calendar this year. It is simultaneously the Wave 24 integration deadline and the permanent expiry of the penalty-waiver initiative. From 1 July 2026, a business that is in scope but not integrated faces automated enforcement with no amnesty: progressive fines, rejected input-VAT deductions for its customers, and potential VAT-registration suspension for repeat breaches. The combination means 2026 is the year the Saudi mandate reaches the SME long tail in earnest. Any business with turnover above SAR 375,000 that has not yet integrated should treat this as the priority compliance project of the year. |
E-Invoicing in Saudi Arabia Deadlines and Compliance Roadmap
Saudi Arabia’s e-invoicing programme is among the most advanced in the world; the milestones below are nearly all already in force, with the 2026 waves the only forward-looking items.
| Date | Milestone | Status |
|---|---|---|
| 4 December 2021 | Generation Phase (Phase 1): all resident VAT-registered businesses must generate and store e-invoices | In effect |
| 1 January 2023 | Integration Phase (Phase 2) begins; Wave 1 (turnover above SAR 3 billion) | In effect |
| 2023–2025 | Progressive wave rollout, thresholds lowered step by step | In effect |
| 27 June 2025 | ZATCA announces Wave 23 criteria (turnover over SAR 750,000) | Done |
| 26 September 2025 | ZATCA announces Wave 24 criteria (turnover over SAR 375,000) | Done |
| 31 March 2026 | Wave 23 integration deadline | Planned |
| 30 June 2026 | Wave 24 integration deadline; penalty-waiver initiative expires | Planned |
| From 1 July 2026 | Full enforcement mode for in-scope businesses; no further amnesty | Planned |
Saudi Arabia does not operate a separate e-waybill regime; goods-movement data is not part of the Fatoora mandate. For broader regional and European context, see E-Invoicing in Europe, and for the EU framework shaping global CTC convergence, see VAT in the Digital Age (ViDA).
Is e-Invoicing Mandatory in Saudi Arabia?
The honest answer is: yes, comprehensively, and it has been since 2021. As of May 2026:
- Generation (Phase 1): Mandatory for all resident VAT-registered businesses since 4 December 2021.
- Integration (Phase 2): Mandatory by assigned wave; businesses above SAR 375,000 turnover are in scope by 30 June 2026 (Wave 24).
- B2B / B2G: Standard invoices require real-time ZATCA clearance.
- B2C: Simplified invoices require 24-hour reporting to ZATCA.
- Non-resident taxable persons: Generally outside the mandate.
Unlike most jurisdictions covered in this series, there is no ambiguity about whether e-invoicing applies in Saudi Arabia. The mandate is enacted, live, and enforced. The only question for an individual business is which Phase 2 wave applies to it, which is determined by turnover and notified by ZATCA at least six months in advance.
Saudi Arabia E-Invoicing Requirements
Core technical requirements
- Compliant EGS. Invoices must be generated through a compliant Electronic Generation Solution. ERP systems such as SAP, Oracle, and Microsoft Dynamics can serve as an EGS when configured to ZATCA specifications.
- Structured format. XML, or PDF/A-3 with embedded XML. A human-readable PDF without embedded structured XML does not comply.
- Arabic language. Invoices must be issued in Arabic; bilingual Arabic/English is permitted, but Arabic is mandatory.
- QR code. Mandatory. For simplified invoices the QR code is generated locally by the EGS; for standard invoices the compliant QR is produced during the clearance process.
- Cryptographic stamp and CSID. Cryptographic stamps ensure authenticity and integrity, anchored to a Cryptographic Stamp Identifier (CSID) obtained during onboarding. These controls replace traditional handwritten or basic digital signatures in the Saudi framework.
- UUID and sequential numbering. Every invoice must carry a UUID (unique universal identifier) and a sequential invoice number.
- Archiving. Electronic invoices and related documents must be retained for six years in the taxpayer’s own systems, within Saudi Arabia.
Clearance vs. reporting: a side-by-side view
The two invoice types follow fundamentally different ZATCA flows. The table below summarises the distinction, which is the single most important operational concept in the Saudi model.
| Aspect | Standard Tax Invoice (B2B / B2G) | Simplified Tax Invoice (B2C) |
|---|---|---|
| ZATCA flow | Real-time clearance before issuance | Reporting within 24 hours of issuance |
| When valid | After ZATCA cryptographic stamp | At issuance; reported afterward |
| QR code source | Generated during clearance | Generated locally by the EGS |
| Threshold | Required above SAR 1,000 | Allowed below SAR 1,000 |
| Input VAT | Entitles buyer to input VAT deduction | Does not entitle input VAT deduction |
| Typical use | Business and government buyers | Consumers / point of sale |
| Format | XML or PDF/A-3 with embedded XML | XML or PDF/A-3 with embedded XML |
When Will E-invoices in Saudi Arabia Become Mandatory?
For most businesses, e-invoicing is already mandatory. The Generation Phase has applied to all resident VAT-registered businesses since 4 December 2021. The remaining question is the Integration Phase deadline, which is set wave by wave according to turnover:
- Wave 23 (turnover over SAR 750,000): 31 March 2026.
- Wave 24 (turnover over SAR 375,000): 30 June 2026.
Businesses below the SAR 375,000 threshold are not yet in the Integration Phase but remain subject to the Generation Phase, and should expect future waves to lower the threshold further toward full national coverage. ZATCA notifies each wave’s targeted taxpayers at least six months before the deadline, so a business that monitors ZATCA announcements will always have a preparation window. Waiting for the notification before acting, however, compresses that window and is treated by ZATCA itself as a risk rather than a strategy.
Who is Obliged to Use e-Invoicing in Saudi Arabia?
The following are within scope of the e-invoicing mandate:
- Resident VAT-registered businesses issuing tax invoices, simplified tax invoices, or credit and debit notes.
- Resident taxable persons carrying out VAT-subject transactions.
- Third parties issuing invoices on behalf of resident taxpayers, for example, billing service providers acting for a resident principal.
- Businesses in B2B, B2C, or B2G transactions that require tax invoices under Saudi VAT law.
Non-resident taxable persons are generally outside the mandate. Certain transaction categories, such as imports and reverse-charge transactions, receive different treatment under the regulations and should be assessed case by case. The Integration Phase obligation is sequenced by turnover wave, so the practical question for any in-scope resident business is not whether but when, determined by its assigned wave.
How to Generate e-Invoices in Saudi Arabia?
The onboarding prerequisites
Before issuing compliant invoices under the Integration Phase, a business must:
- Deploy a compliant EGS. Configure an ERP, POS, or dedicated e-invoicing solution to ZATCA technical specifications.
- Onboard with Fatoora and obtain a CSID. Register the EGS with the Fatoora platform and obtain the Cryptographic Stamp Identifier that anchors the invoice cryptographic stamps.
- Establish API connectivity. Set up the real-time API handshake between the EGS and Fatoora for clearance and reporting.
The technical workflow
- Generate the invoice in the compliant EGS in XML or PDF/A-3 with embedded XML, in Arabic.
- Apply the cryptographic stamp, UUID, sequential number, and QR code logic.
- For a Standard Tax Invoice (B2B/B2G): submit to ZATCA for clearance, receive the cleared and stamped invoice, then deliver it to the buyer.
- For a Simplified Tax Invoice (B2C): issue immediately with the locally generated QR code, then report to ZATCA within 24 hours.
- Archive the invoice and related documents for six years within Saudi Arabia.
RTC supports ZATCA-compliant e-invoicing, including Fatoora onboarding, CSID management, real-time clearance for standard invoices, and 24-hour reporting for simplified invoices, integrating with ERP systems such as SAP, Oracle, and Microsoft Dynamics.
Saudi Arabia e-Invoicing Implementation Checklist
A practical preparation checklist for businesses operating in Saudi Arabia, sequenced by priority:
- Confirm your wave. Check whether VAT-subject turnover exceeded SAR 750,000 (Wave 23, deadline 31 March 2026) or SAR 375,000 (Wave 24, deadline 30 June 2026) in 2022, 2023, or 2024.
- Assess EGS readiness. Verify that the ERP, POS, or accounting system can act as a compliant EGS or can be made compliant through a connector or middleware.
- Validate XML generation. Confirm the system outputs ZATCA-compliant XML or PDF/A-3 with embedded XML, in Arabic, with all mandatory fields.
- Onboard with Fatoora and obtain the CSID. Complete platform onboarding and secure the Cryptographic Stamp Identifier before go-live.
- Prepare API connectivity. Establish and test the real-time API handshake with the Fatoora platform.
- Configure QR and cryptographic stamp. Set up QR code generation (clearance-side for standard, local for simplified) and cryptographic stamping.
- Review master data quality. Clean VAT numbers, UUIDs, sequential numbering, and tax mappings, since errors surface immediately at clearance.
- Implement clearance and reporting workflows. Separate the standard-invoice clearance path from the simplified-invoice 24-hour reporting path in the finance process.
- Establish six-year archiving. Confirm invoices and related documents are retained for six years within Saudi Arabia.
- Test end-to-end before go-live. Run sandbox testing through the six-month notification window rather than waiting until the deadline.
- Use the penalty-waiver window. Correct any historical non-compliance before the initiative expires on 30 June 2026.
- Monitor future wave announcements. Track ZATCA announcements for further threshold reductions.
FAQs About E-Invoicing in Saudi Arabia
What is the standard format for e-Invoices in Saudi Arabia?
Saudi Arabia requires invoices in XML format, or PDF/A-3 with embedded XML, in Arabic. The XML must conform to ZATCA technical specifications and carry a UUID, sequential number, cryptographic stamp, and QR code. A human-readable PDF without embedded structured XML does not comply.
How does e-invoicing benefit businesses in Saudi Arabia?
E-invoicing automates invoice processing, reduces manual data entry, strengthens audit readiness, accelerates VAT validation, and reduces fraud exposure. Because clearance happens in real time, errors are caught at issuance rather than at a later audit, which lowers the risk of rejected input-VAT deductions and downstream disputes.
Can small businesses benefit from e-invoicing in Saudi Arabia?
Yes. Wave 24 brings businesses with turnover above SAR 375,000 into the Integration Phase from 30 June 2026, the largest expansion into the SME segment so far. Smaller businesses gain the same automation, error-reduction, and VAT-compliance benefits as larger ones, and many ERP and POS vendors offer pre-certified ZATCA connectors that make onboarding straightforward.
Are there any exemptions to the e-invoicing requirements in Saudi Arabia?
Non-resident taxable persons are generally excluded from the mandate. Certain transaction categories, such as imports and reverse-charge transactions, receive different treatment under the regulations. Businesses below the current Integration Phase turnover threshold remain subject to the Generation Phase but are not yet required to integrate with Fatoora in real time.
How can businesses in Saudi Arabia prepare for the e-invoicing transition?
Confirm the applicable wave, assess EGS readiness, validate XML generation, onboard with Fatoora and obtain the CSID, establish and test API connectivity, configure QR and cryptographic stamping, and run end-to-end testing in the sandbox before the deadline. Businesses with historical non-compliance should use the penalty-waiver initiative before it expires on 30 June 2026.
What software solutions are available for e-invoicing in Saudi Arabia?
Businesses can use ERP systems such as SAP, Oracle, and Microsoft Dynamics, or specialised compliance platforms that integrate with the Fatoora platform. The key requirement is compliance with ZATCA technical specifications, structured XML, cryptographic stamp, CSID, QR code, UUID, and real-time API connectivity. RTC provides ZATCA-compliant e-invoicing supporting Fatoora onboarding, clearance, and reporting across major ERP environments.
Are there penalties for non-compliance with e-invoicing regulations in Saudi Arabia?
Yes, and they are enforced. ZATCA applies a progressive penalty structure: violations typically escalate through a warning and then fines of SAR 1,000, SAR 5,000, and SAR 10,000 for repeat offences within a 12-month period, reaching up to SAR 40,000 for persistent breaches. Specific violations carry their own ranges: failure to issue or retain e-invoices starts around SAR 5,000 and can reach SAR 50,000; deleting or amending an invoice after issuance starts at SAR 10,000; missing QR codes on simplified invoices can attract up to SAR 10,000 per invoice; and the most severe breaches can reach SAR 100,000. Beyond fines, non-compliance has a commercial cost: a buyer cannot claim the 15% input VAT deduction on a non-compliant invoice, and persistent violations can lead to temporary VAT-registration suspension. The penalty-waiver initiative that has softened enforcement expires permanently on 30 June 2026.