Saudi FATOORA Phase 2: Integration Waves Explained (2026)

Saudi Arabia runs the most advanced e-invoicing regime in the Arab world. The Zakat, Tax and Customs Authority (ZATCA) split the FATOORA program into two phases: Phase 1 (generation), in force since 4 December 2021, ended handwritten and plain-Word invoices for all VAT-registered businesses. Phase 2 (integration) connects taxpayers' invoicing systems directly to ZATCA's platform — and it is being rolled out in waves based on annual VAT-liable revenue. Understanding which wave you fall into is now a core compliance question.

This guide is about Phase 2 integration waves. For what a Phase 1 invoice must carry, see ZATCA Phase 1 invoicing in Saudi Arabia.

Phase 1 vs Phase 2 in one minute

• Phase 1 (generation): invoices must be created electronically with mandatory fields and a QR code on simplified invoices. No connection to ZATCA required.
• Phase 2 (integration): your system must integrate with the FATOORA platform via API. Standard (B2B) tax invoices go through clearance — ZATCA cryptographically stamps them in real time before you deliver them to the customer. Simplified (B2C) invoices are reported to ZATCA within 24 hours of issuance.

Phase 2 also tightens the technical format: invoices must be produced in XML or PDF/A-3 with embedded XML, carry a UUID, a cryptographic stamp, a hash chained to the previous invoice, and an anti-tampering counter.

The wave system

ZATCA began bringing businesses into Phase 2 in January 2023 with the largest taxpayers, and each wave since has moved further down the revenue scale toward smaller businesses. Every wave has a revenue threshold and a reference year, both set by ZATCA in that wave's announcement, and ZATCA notifies the businesses in a wave at least six months before their integration date.

This article deliberately does not list the thresholds. Each new wave lowers the figure, so any number printed here goes out of date, and a business that reads an old one can wrongly conclude it is not yet in scope. Two things settle your position instead:

• A notification from ZATCA. If a wave includes you, ZATCA notifies you, with your integration date.
• ZATCA's own announcements. The current list of waves, with their thresholds and reference years, is on ZATCA's e-invoicing page. Check your status directly with ZATCA rather than relying on a third-party summary, this one included.

What integration actually requires

• A compliant solution: your invoicing software must be able to generate XML invoices, apply the cryptographic stamp, and call ZATCA's clearance and reporting APIs.
• Onboarding: you obtain a cryptographic stamp identifier for each device or solution unit through the FATOORA portal.
• Clearance workflow for B2B: a standard tax invoice is only valid once ZATCA clears it — build the round-trip into your billing process so customers are not kept waiting.
• Reporting workflow for B2C: simplified invoices must reach ZATCA within 24 hours, which in practice means an automated nightly job at minimum.

How small businesses should prepare

• Know your number. Your VAT-liable revenue for the reference years determines your wave. Pull it from your filed VAT returns, not from memory.
• Choose software before the letter arrives. Six months sounds generous; ERP migrations routinely take longer. If your current tool cannot produce compliant XML, start switching now.
• Clean your master data. Clearance rejects invoices with malformed VAT numbers, missing buyer IDs on B2B invoices, or broken sequential numbering. For the fields a Saudi tax invoice must carry, see ZATCA Phase 1 invoicing in Saudi Arabia.
• Test the arithmetic. Line-level VAT at 15% must reconcile to invoice totals to the halala — rounding errors are a leading cause of rejection. The free VAT calculator helps you verify amounts quickly.
• Keep issuing correct documents meanwhile. Until your wave date, Phase 1 rules still apply in full, including QR codes on simplified invoices. You can produce clean, itemized invoices with the ZATCA Phase 1 QR code in the Xuvilo invoice generator; use it in Arabic, since ZATCA requires Arabic on tax invoices.

Penalties and the pragmatic reality

ZATCA has historically favored education first — warning letters and grace periods before fines — but non-integration after your wave deadline, missing stamps, or failure to report simplified invoices can all attract penalties that escalate with repetition. The authority also runs periodic penalty-waiver initiatives; verify the current enforcement posture with ZATCA.

The direction of travel is unmistakable: every VAT-registered business in the Kingdom will eventually integrate. The businesses that treat their wave date as a project deadline — software chosen, data cleaned, APIs tested — sail through. The ones that wait for the notification letter to start shopping do not.

More from Xuvilo

Try our free tools: invoice generator, quotation generator, receipt generator, and 18 business calculators. For more guides, head back to the Xuvilo Blog.