Getting Ready for ZATCA Phase 2 E-Invoicing

Note: This article is general guidance only and is not legal, tax, or accounting advice. Always confirm your specific obligations and timelines with ZATCA's official guidance and a qualified professional.

What ZATCA Phase 2 Is

Saudi Arabia's Zakat, Tax and Customs Authority (ZATCA) has been rolling out electronic invoicing (Fatoorah) in stages. Phase 1, the Generation Phase, introduced the requirement to generate and store structured electronic invoices and to stop using handwritten or simple PDF invoices. Phase 2 — the Integration Phase — goes further: businesses must integrate their invoicing systems with ZATCA's platform so that invoices are validated and either cleared or reported through it.

The distinction between the two phases matters. Phase 1 was largely about how invoices look and are stored — you could comply with a compliant e-invoicing application generating the right format. Phase 2 is about connecting your system to the government's system so that invoices pass through ZATCA before or shortly after they reach your customer. That shift from a standalone requirement to a live integration is the heart of Phase 2, and it is why it takes more preparation than Phase 1 did.

In practice, Phase 2 introduces requirements around invoice format, cryptographic stamping, UUIDs, QR codes, and direct integration with ZATCA's APIs. Businesses are brought into Phase 2 in waves, with each wave defined by criteria such as revenue thresholds and notified of its specific compliance date.

Two Invoice Flows: Clearance and Reporting

A core concept in Phase 2 is that not all invoices are handled the same way:

• Standard tax invoices (typically business-to-business and business-to-government) generally go through clearance: the invoice is sent to ZATCA and must be validated and cleared before it is considered a legal invoice you can share with the buyer.
• Simplified tax invoices (typically business-to-consumer, point-of-sale style) generally go through reporting: the invoice is issued to the customer immediately, and the details are reported to ZATCA within a defined window afterwards.

Understanding which of your invoices fall into which flow is one of the first practical things to sort out, because it changes how your system must behave at the moment of sale. The specifics of thresholds and definitions are set by ZATCA, so treat this as orientation rather than a definitive rule for your business.

Who Needs to Pay Attention

ZATCA notifies businesses of the wave they fall into based on criteria such as revenue thresholds. If your business is in scope, you will receive notice of your integration deadline, typically with several months of lead time. Because waves are ongoing and the qualifying thresholds have been lowered over successive waves, more businesses come into scope over time — so it is worth confirming your status early rather than assuming you have time. Check the official ZATCA notifications directly, and do not rely on what was true for a peer last year.

What Phase 2 Typically Requires

While the official documentation is the authority on specifics, Phase 2 generally involves:

• Compliant invoice formats. Invoices must be issued in the required structured format (such as XML, or PDF/A-3 with embedded XML for human-readable copies).
• Cryptographic stamps and UUIDs. Each invoice carries a universally unique identifier and a cryptographic stamp that ties the invoice to your registered solution and protects it from tampering.
• A previous-invoice hash. Invoices are chained together so that each references the one before it, making the sequence tamper-evident.
• QR codes. Invoices include a QR code carrying mandated fields so the invoice can be verified.
• Integration with ZATCA. Your system connects to ZATCA's APIs for clearance (for standard tax invoices) or reporting (for simplified invoices), which also means onboarding your solution and obtaining the necessary cryptographic certificates.

How to Prepare

A calm, staged approach beats a last-minute scramble. The businesses that struggle are almost always the ones that treated the deadline as distant until it was weeks away:

1. Confirm your wave and deadline. Check ZATCA's official notifications for your specific date, and note that the date is a hard one.
2. Review your current invoicing process. Map where invoices are created today — your accounting system, a point-of-sale, spreadsheets, a custom tool — and whether each of those can meet Phase 2 requirements. Many businesses discover invoices are being created in more places than they realised.
3. Choose a compliant solution. Either upgrade your existing system to a version that supports ZATCA integration or move to one that supports it natively. Confirm the solution is suitable for Phase 2, not only Phase 1.
4. Onboard and obtain certificates. Register your solution with ZATCA and complete the cryptographic onboarding steps so it can communicate with the platform.
5. Test before the deadline. Validate that invoices clear or report correctly well ahead of your compliance date, using ZATCA's testing environment where available. Do not let your first real clearance attempt be on a live customer invoice.
6. Train your finance team. Make sure the people issuing invoices understand the new flow, what a cleared invoice looks like, and what to do if clearance fails.

Common Pitfalls When Preparing

Most Phase 2 problems are not exotic technical failures — they are predictable preparation gaps. The ones we see most often:

• Discovering invoices in unexpected places. A business assumes everything flows through its accounting system, then finds the sales team raising ad-hoc invoices in a spreadsheet and the shop floor using a standalone point-of-sale. Every source of invoices has to be in scope, or some invoices will quietly fail to comply.
• Confusing "supports ZATCA" with "configured for ZATCA." A solution that is technically capable still has to be set up correctly — organisation details, tax registration number, certificates, and templates all have to be right. A misconfigured system can produce invoices that look perfect on screen yet fail validation.
• Testing too late. Leaving the first real clearance attempt to a live customer invoice on deadline day is how a routine requirement becomes a crisis. Use the testing environment well ahead of time.
• Treating it as a one-off project. Phase 2 is not "switch it on and forget." Certificates, formats, and obligations evolve, and your finance team needs to know what to do when a clearance fails on a normal working day.
• Assuming last year's rules still apply. Because waves and thresholds have changed over time, what was true for a peer or for your own business previously may no longer hold. Confirm your current status directly.

What "Ready" Actually Looks Like

It helps to have a concrete picture of the finished state. A Phase 2-ready business can issue a standard tax invoice and have it cleared by ZATCA before sharing it with the buyer, and can issue a simplified invoice to a consumer immediately while reporting it within the required window. Its invoices carry the mandated QR codes, UUIDs, cryptographic stamps, and previous-invoice hashes without anyone having to think about it, because the system handles them. Its finance team knows the difference between a cleared invoice and a rejected one, and has a clear step to take when clearance fails. And it reached that state by testing in a safe environment well before the deadline — not by finding out on a live invoice.

That is the goal: compliance as a quiet, routine part of issuing an invoice, rather than a manual scramble around each one.

Zoho Books and ZATCA Readiness

If you use or are considering Zoho Books, it offers features designed to support ZATCA e-invoicing requirements, including compliant invoice generation, QR codes, and the cryptographic elements Phase 2 calls for. The capability being present, however, is not the same as it being configured correctly for your business. Configuring it properly — with the right tax settings, invoice templates, organisation details, and integration credentials — is essential to get the benefit, and a misconfigured setup can produce invoices that look fine but fail validation.

For a practical walkthrough of using Zoho for e-invoicing, see our guide to ZATCA e-invoicing with Zoho. If you are setting up Zoho from scratch in the Kingdom, our broader Zoho implementation guidance covers how compliance fits into the wider rollout.

How Techies Can Help

Techies is a Zoho Authorized Partner, and we help Saudi businesses configure Zoho Books for e-invoicing and prepare their invoicing processes for ZATCA Phase 2. We focus on getting the setup right — formats, settings, certificates, and integration — so your team can issue compliant invoices with confidence and pass clearance and reporting reliably. Our broader Zoho services cover implementation and ongoing support.

The Bottom Line

ZATCA Phase 2 is a system-integration milestone, not just a paperwork change. Confirm your wave, review where invoices are really created, understand whether each flow needs clearance or reporting, move to a compliant solution early, complete onboarding, and test well before your deadline. Preparing ahead of time turns a regulatory requirement into a routine part of how you operate rather than a crisis.

As a reminder, this article is general guidance only and is not legal, tax, or accounting advice. Always verify the specifics — thresholds, deadlines, formats, and your own obligations — with ZATCA's official guidance and a qualified professional before acting.

---

Want help getting Zoho Books ready for ZATCA? Get in touch.