Skip to content
Back to BlogBusiness

ZATCA Phase 2 in 2026: What Saudi Businesses Must Know (And What to Do About It)

ZATCA Phase 2 is rolling out in waves across Saudi Arabia. Here's a plain-language guide to what it means for your business and how to prepare without panic.

SD
Shams Digital
Software Development Company20264 min read

If you run a business in Saudi Arabia, you've likely heard the term ZATCA Phase 2 thrown around — often with more panic than clarity. This article explains what it actually means, who it affects, and what you should do about it in plain language.

What is ZATCA Phase 2?

ZATCA (Zakat, Tax and Customs Authority) introduced e-invoicing in two phases:

  • Phase 1 — Generation Phase (since December 2021): All VAT-registered businesses must issue electronic invoices with specific formatting, Arabic language support, and a QR code.
  • Phase 2 — Integration Phase (rolling out in waves since 2023): Businesses must now connect their invoicing systems directly to ZATCA's Fatoora platform in real-time, with cryptographic signatures and XML-formatted invoices.

Phase 2 is being rolled out in waves based on annual VAT revenue. Each wave gives businesses 6 months notice before compliance becomes mandatory.

Who Does Phase 2 Affect?

ZATCA announces waves periodically. Recent waves have covered businesses with annual VAT revenue above specific thresholds — and the threshold keeps lowering with each new wave.

Pro Tip

If your business is VAT-registered and your revenue crosses ZATCA's latest wave threshold, you'll receive a notice from ZATCA with a 6-month window to integrate.

What Happens If You Don't Comply?

Non-compliance penalties are serious:

  • Fines starting from SAR 1,000 per violation
  • Business suspension in severe cases
  • Inability to issue valid tax invoices (which affects your customers too)

The 5 Things Phase 2 Requires

  1. UUID — unique identifier per invoice
  2. Cryptographic stamp — digital signature proving the invoice hasn't been tampered with
  3. Invoice hash — linking each invoice to the previous one
  4. XML format — structured data format ZATCA can read automatically
  5. Real-time clearance or reporting — invoices submitted to ZATCA via API

How to Prepare — Without Panic

Step 1: Check Your Current Invoicing

Are you on Phase 1 already? If you're still issuing PDF or Word invoices without QR codes, you're not even Phase 1 compliant. Fix this first.

Step 2: Identify Your Software Gap

Most off-the-shelf accounting software sold in KSA now claims ZATCA compliance — but "compliance" for Phase 1 and Phase 2 are very different. Confirm specifically what your vendor supports.

Step 3: Plan Integration Early

If you're likely to hit the next wave threshold, don't wait for the ZATCA notice. 6 months sounds like a lot until you realize it includes testing, onboarding, and training staff.

Step 4: Choose Your Approach

You have three realistic options:

  • Off-the-shelf ZATCA-certified software (Rewaa, Foodics, PosBytz, etc.) — fast but subscription-based
  • Custom-built system — higher upfront cost, full ownership, tailored to your workflow (especially worth it if you're moving off Excel and paper-based invoicing anyway)
  • Hybrid — integrate ZATCA API into your existing internal systems

Watch Out

Beware vendors claiming "instant Phase 2 compliance" without explaining the integration testing process. ZATCA requires technical validation — no shortcuts.

The Real Cost of Waiting

Businesses that wait until the last month of their 6-month window consistently report:

  • Rushed, buggy implementations
  • Staff not trained properly
  • Invoice errors in the first weeks causing customer complaints
  • Emergency consulting fees 3–4x higher than planned projects

Starting early isn't just smart — it's significantly cheaper.

Bottom Line

ZATCA Phase 2 isn't going away. The threshold will keep lowering until every VAT-registered business in Saudi Arabia is integrated. The businesses that plan calmly will sail through. The ones that wait for the last-minute panic will pay 3x more and stress 10x more.

If you're not sure where you stand, a quick 30-minute audit with a technical team can tell you whether you're at risk and what your realistic path forward looks like.

At Shams Digital, we help Saudi businesses build ZATCA-ready invoicing into their existing workflows — without forcing subscription models they don't want. Software built like infrastructure: once, properly, yours forever.

SD

Written by Shams Digital Team

Software development company based in Jubail, Saudi Arabia. We build web apps, mobile apps, ERP systems, and AI solutions.

Let's Talk

Ready to Build Something Amazing?

Talk to our team in Jubail — free consultation, no commitment.