Businesses Operating in Saudi Arabia
How do businesses achieve ZATCA Phase 2 e-invoicing compliance in Saudi Arabia?
ZATCA Phase 2 (Integration Phase) requires Saudi VAT-registered businesses to integrate their e-invoicing systems with ZATCA's Fatoora platform for invoice clearance (B2B) or reporting (B2C and B2G). Clearance means ZATCA cryptographically signs the invoice before it can be issued to the buyer. Phase 2 rollout is by waves based on VAT revenue; new waves are announced quarterly.
What are the technical requirements for ZATCA Phase 2 integration?
ZATCA Phase 2 requires specific technical capabilities:
- CSID: Cryptographic Stamp Identifier obtained by registering the e-invoicing solution with ZATCA
- QR code: Phase 2 QR code encoding ZATCA digital signature data included on every invoice
- API connectivity: Real-time API connection to ZATCA Fatoora platform for clearance requests
- XML format: Invoices must be in UBL 2.1 XML conforming to ZATCA specifications
- Hash chaining: Each invoice includes a hash of the previous invoice for tamper detection
- UUID: Unique identifier assigned to each invoice
Frequently Asked Questions
- What is the difference between ZATCA clearance and reporting?
- ZATCA clearance applies to B2B invoices: the invoice XML is submitted to ZATCA before delivery to the buyer, ZATCA validates and cryptographically stamps it, and only the stamped invoice can be issued to the buyer. Reporting applies to B2C, exports, and certain other invoices: the invoice is issued first and reported to ZATCA within 24 hours. Clearance provides real-time ZATCA validation; reporting is near-real-time post-issuance.
- How long does ZATCA Phase 2 onboarding take?
- ZATCA Phase 2 onboarding requires completing the CCSID (Compliance CSID) process and then the PCSID (Production CSID) process, plus integration testing. The full process typically takes 2-4 weeks if technical systems are already prepared. Businesses should allow at least 3 months from notification of their wave date to allow time for system configuration, testing, and resolving integration issues.