ZATCA Phase 2 Explained: The Complete Guide to Saudi Arabia's E-Invoicing Integration

Saudi Arabia does not do half measures with tax reform, and its e-invoicing program proves it. What began in 2021 as a simple move from paper invoices to structured electronic ones has grown into one of the most detailed digital tax systems in the region. That system is now known as ZATCA Phase 2, and if your business operates in Saudi Arabia, it is not something you can put off any longer.

This guide covers what ZATCA Phase 2 means in practice, who falls under it, the current waves and deadlines, the technical rules your software must meet, and how a business actually gets compliant without turning its accounting team upside down.

What Is ZATCA Phase 2?

The Zakat Tax and Customs Authority, known as ZATCA, runs Saudi Arabia's national e-invoicing program under the name Fatoora. The program has two stages. Phase 1, the Generation Phase, started on 4 December 2021. It required VAT-registered businesses to stop using handwritten or plain PDF invoices and switch to electronic invoices that included the correct data fields and a QR code.

ZATCA Phase 2, the Integration Phase, is where the real work starts. Since 1 January 2023, businesses in scope must connect their invoicing or ERP systems directly to ZATCA's Fatoora platform, so every invoice gets checked or reported close to real time. This is not a one-time upgrade you install and forget. It is a live connection between your accounting software and a government tax system, and it needs to work correctly on every invoice you issue, not just most of them.

This is also where Saudi Arabia e-invoicing stops being a back-office task and starts touching sales, finance, and IT all at once. A missed field in an invoice can now stop that invoice from clearing, which is a very different problem from a typo on a paper receipt.

Why ZATCA Phase 2 Matters Beyond Compliance

It is easy to treat ZATCA Phase 2 as paperwork the government forced on you. That view misses the actual upside. Once your invoicing system talks directly to Fatoora, you stop chasing missing invoice copies, stop reconciling numbers by hand at month end, and stop worrying whether a customer's finance team received the right document. Every invoice already exists in a structured, verified format the moment it goes out.

For businesses tied into the wider ZATCA ecosystem through Odoo, SAP, or a custom ERP, this also opens the door to cleaner reporting. Once invoices flow through ERP e-invoicing integration, VAT calculations, credit note tracking, and audit trails line up automatically instead of living in three different spreadsheets owned by three different people.

ZATCA Phase 1 vs Phase 2: What Actually Changed

People often ask about ZATCA Phase 1 vs Phase 2 as if they are two versions of the same thing. They are not. Phase 1 was about format. Phase 2 is about connection. Here is the short version.

Point	Phase 1 (Generation)	Phase 2 (Integration)
Start date	4 December 2021	1 January 2023, rolled out in waves
What it required	Generate and store electronic invoices instead of paper or plain PDF	Connect invoicing systems directly to the Fatoora platform
Validation	No outside check needed	Real-time clearance or 24-hour reporting through ZATCA
Who it covers	All VAT-registered resident businesses	Businesses added wave by wave, based on taxable turnover

 

ZATCA Phase 2 Waves and Deadlines to Track in 2026

ZATCA is not rolling out ZATCA Phase 2 to every business at once. It works through numbered waves, each one based on a company's taxable turnover in 2022, 2023, or 2024. ZATCA notifies each targeted taxpayer directly, generally at least six months before that business has to go live.

●       Wave 23: businesses with taxable turnover above SAR 750,000 in 2022, 2023, or 2024 needed to complete integration by 31 March 2026.

●       Wave 24: the threshold dropped to SAR 375,000, making it the largest wave so far and pulling thousands of small and mid-size businesses into scope, with a deadline of 30 June 2026.

●       Each wave decision is issued by the ZATCA Governor and published in the Official Gazette, so the dates are not informal guidance. They are binding regulatory deadlines.

If your business has not received a wave notification yet, that does not mean you are exempt. It usually means your wave has not been called. Waves are announced by ZATCA Governor decisions and gazetted publicly, so a new wave with a lower threshold can arrive with only a few months of runway. Checking your 2022 through 2024 taxable revenue against the published thresholds is the fastest way to know where you stand, and this is exactly the kind of gap our team at Altapete Solutions helps clients close before a deadline sneaks up on them.

The Technical Side: ZATCA Phase 2 Requirements

Once a business enters ZATCA Phase 2, its invoices have to meet a specific technical standard, not just a visual one. Here is what ZATCA checks for.

●       XML invoice format based on UBL 2.1, or a PDF/A-3 file with the XML embedded inside it. A plain PDF, scanned image, or Word file does not count anymore.

●       A cryptographic stamp on every invoice, which proves the document came from a genuine, ZATCA-onboarded system and was not altered afterward.

●       A digital signature and a unique invoice UUID attached to each document, so every invoice can be traced back individually.

●       A QR code that carries the cryptographic stamp, letting anyone scan and verify the invoice on the spot.

●       Real-time invoice reporting for simplified B2C invoices within 24 hours, and invoice clearance for standard B2B invoices before the invoice can legally reach the buyer.

●       The same rules apply to an electronic tax invoice, credit note, and debit note, so the original sales invoice is far from the only document covered.

None of this is optional formatting. ZATCA's system will simply reject an invoice that does not carry a valid stamp, UUID, or schema, which is why invoice validation needs to happen inside your software before the invoice ever reaches the customer.

How ZATCA Phase 2 Integration Actually Works, Step by Step

Getting compliant is a process, not a single switch you flip. Businesses that go through it smoothly tend to follow roughly the same order.

1.      Confirm your wave by checking your taxable turnover for 2022, 2023, and 2024 against the published thresholds.

2.      Audit your current accounting or ERP software to see if it can generate XML invoices and connect through an API.

3.      Choose a ZATCA compliant software or ZATCA integration solution that is accredited for ERP e-invoicing integration, rather than trying to build a workaround.

4.      Complete onboarding with ZATCA's production environment, which includes issuing a compliance certificate for your system.

5.      Run test invoices through API-based integration before going live, so clearance and reporting errors get caught early, not on a real customer invoice.

6.      Train your accounting staff on the 24-hour reporting rule for simplified invoices and the real-time clearance rule for standard ones.

Businesses running Odoo, SAP, or another ERP often assume their existing system already handles this. Sometimes it does. More often, it needs a dedicated ZATCA integration module built and certified for the Saudi market, which is a common gap our engineers at Altapete Solutions get called in to fix.

Common Mistakes Businesses Make During Integration

Most integration problems are not really technical. They are timing and planning problems that show up as technical errors later.

●       Waiting for the official ZATCA notification before starting any preparation, instead of checking turnover thresholds early.

●       Assuming a general accounting package is automatically ZATCA compliant software without confirming it holds current Fatoora accreditation.

●       Treating the QR code and cryptographic stamp as a design detail rather than a security requirement, which causes rejected invoices during testing.

●       Skipping a proper test phase and discovering invoice validation errors only after going live with real customer invoices.

●       Forgetting that credit notes, debit notes, and B2C simplified invoices follow the same rules as the main sales invoice.

Penalties, Waivers, and Why Waiting Is a Bad Bet       

ZATCA has run a penalty waiver initiative that gives businesses room to register late, correct past filings, and complete integration without an automatic fine. That waiver has been extended more than once, most recently through 30 June 2026, alongside the Wave 24 deadline.

Once a wave deadline passes without integration, the waiver stops applying to that business. At that point, non-compliance can mean financial penalties, disrupted invoicing, and closer scrutiny during any future audit. For a business that depends on smooth, on-time invoicing, that kind of disruption costs far more than the integration project itself would have.

There is also a practical angle most owners do not think about until it happens: an invoice that fails ZATCA compliance checks can stop a sale from closing on paper, even if the goods or service already changed hands. Cash flow, not just the fine itself, is what actually gets disrupted when integration is left too late.

Source: Flick Network, ZATCA Wave 24 Compliance Guide

How Altapete Solutions Supports ZATCA Phase 2 Compliance

This is exactly the kind of work Altapete Solutions handles for businesses across Saudi Arabia and Pakistan. As an Odoo and SAP implementation partner, our team builds and certifies the connection between your ERP and ZATCA's Fatoora platform through our dedicated ZATCA Integration service, covering everything from wave assessment to XML schema mapping and live testing.

If tax filing and Saudi VAT compliance are part of the concern too, our Taxation & Zakat Advisory team works alongside the integration project, so the invoices your system generates and the VAT returns your accountants file actually match. Businesses that want the full picture, including case studies from other Saudi clients, can browse our blog or get in touch directly for a wave assessment.

Frequently Asked Questions

What is ZATCA Phase 2? It is the Integration Phase of Saudi Arabia's e-invoicing program, requiring VAT-registered businesses to connect their invoicing systems directly to ZATCA's Fatoora platform for real-time clearance or reporting.

Who needs to comply with ZATCA Phase 2 integration? Any resident, VAT-registered business whose taxable turnover crosses the threshold set for its assigned wave. ZATCA notifies each business directly ahead of its deadline.

What is the difference between ZATCA Phase 1 and Phase 2? Phase 1 required electronic invoice generation and storage. Phase 2 requires that same invoice to connect live to ZATCA for validation, using XML, a cryptographic stamp, and a UUID.

Does ZATCA Phase 2 apply to credit notes and debit notes? Yes. Credit notes and debit notes follow the same integration, format, and validation rules as standard electronic tax invoices.

What happens if a business misses its wave deadline? The penalty waiver no longer applies, and the business becomes exposed to fines, invoicing disruption, and closer audit attention until it completes integration.

Can a small business handle ZATCA Phase 2 without hiring a full IT team? Yes, in most cases. A ZATCA integration solution built by an accredited partner connects to your existing ERP or accounting software, so a small or mid-size business usually needs a short setup and testing project rather than an in-house development team.

ZATCA Phase 2 is not a passing regulation. It is the direction Saudi Arabia's whole tax system is heading, and every wave brings smaller businesses into scope. Checking your wave status now, well before your deadline lands in your inbox, is the difference between a calm software update and a rushed scramble against a government clock.