ZATCA Phase 2 Is Already Here — Is Your Saudi Business Ready?
If you run a VAT-registered business in Saudi Arabia, ZATCA Phase 2 is not something coming in the future. It is happening right now, and the compliance window for your business may already be open. Thousands of businesses across Riyadh, Jeddah, Dammam, Khobar, and the wider Kingdom are being enrolled in waves — and operating without Phase 2 compliance exposes your business to financial penalties that cannot be reversed after the fact.
This article explains exactly what ZATCA Phase 2 requires, how it differs from Phase 1, and what your business needs to do to become fully compliant today.
What Is ZATCA and What Is Fatoorah?
ZATCA stands for the Zakat, Tax and Customs Authority — the Saudi government body responsible for tax collection, customs regulation, and financial compliance across the Kingdom. Fatoorah is ZATCA’s official e-invoicing initiative, which mandates that all VAT-registered businesses in Saudi Arabia issue, store, and report invoices electronically through ZATCA-approved systems.
Fatoorah was introduced in two phases. Understanding the difference between them is essential for every Saudi business owner.
Phase 1 vs Phase 2 — The Critical Difference
Phase 1 of ZATCA e-invoicing went live in December 2021. It required all VAT-registered businesses in Saudi Arabia to stop issuing handwritten or manually produced invoices and switch to electronic invoices generated by a compliant software system. Phase 1 was about generating electronic invoices — your system produced them, stored them, and issued them to customers.
Phase 2 goes significantly further. Phase 2 is called the Integration Phase because it requires your invoicing system to integrate directly and in real time with ZATCA’s central Fatoorah portal. Every invoice your business issues must be cryptographically stamped, formatted in XML, and either cleared by ZATCA before delivery to your customer (for standard B2B invoices) or reported to ZATCA within 24 hours (for simplified B2C invoices).
This means your POS system, restaurant management system, or ERP software must have a live, active connection to ZATCA’s servers every time you issue an invoice. A system that simply generates a PDF invoice — even one with a QR code — is not Phase 2 compliant.
What Does ZATCA Phase 2 Technically Require?
To be fully compliant with ZATCA Phase 2 in Saudi Arabia, your invoicing system must meet specific technical standards. Your software must generate invoices in UBL 2.1 XML format. Every invoice must carry a cryptographic stamp that is unique to your business and verifiable by ZATCA. Standard tax invoices issued to other VAT-registered businesses must be cleared by ZATCA before being sent to the buyer. Simplified tax invoices issued to individual consumers must be reported to ZATCA within 24 hours of issuance. Your system must be registered on the Fatoorah portal with a valid Cryptographic Stamp Identifier (CSID). All invoices must include a QR code that meets ZATCA’s technical specification. Your system must store invoices securely for a minimum of six years as required by Saudi law.
If any of these requirements are not met, your business is not Phase 2 compliant — regardless of whether you are currently using an electronic invoicing system.
When Will Phase 2 Apply to My Business in Saudi Arabia?
ZATCA is enrolling businesses in waves, starting with the largest taxpayers and progressively moving to smaller businesses across all sectors in Saudi Arabia. Each wave is announced by ZATCA with a 6-month advance notice period, giving businesses time to prepare before their compliance deadline arrives.
If you have not yet received a notification from ZATCA about your Phase 2 wave, it does not mean you are exempt. It means your notification has not arrived yet. Businesses in Riyadh, Jeddah, Dammam, and across KSA that prepare now — before their wave notification — avoid the stress, rush costs, and risk of last-minute compliance failures.
What Are the Penalties for ZATCA Non-Compliance in Saudi Arabia?
ZATCA enforces compliance through a structured penalty framework. Businesses that fail to comply with e-invoicing requirements face fines starting at SAR 1,000 per violation for minor infractions, rising significantly for repeated or serious violations. ZATCA also has the authority to conduct field audits of businesses suspected of non-compliance and to share non-compliance data with other Saudi government authorities including the Ministry of Commerce and the General Authority for Zakat and Tax.
Beyond financial penalties, non-compliance with ZATCA Phase 2 can affect your ability to participate in government tenders, renew commercial registrations, and work with corporate clients in Saudi Arabia who require ZATCA compliance from their suppliers.
Which Future Gates Solutions Are ZATCA Phase 2 Certified?
Every Future Gates solution is fully certified for both ZATCA Phase 1 and Phase 2 compliance. Imdady POS — our point-of-sale system for retail, service, and hospitality businesses across Saudi Arabia — handles cryptographic stamping, XML invoice generation, and real-time Fatoorah integration automatically in the background. Your team issues invoices exactly as they always have, and the system handles full ZATCA compliance without any additional steps.
Imdady RMS — our restaurant management system for F&B businesses in KSA — integrates ZATCA Phase 2 compliance directly into the order and billing workflow, covering dine-in, pickup, and delivery invoicing across all transaction types including tobacco VAT.
FGNext ERP — our enterprise resource planning solution for larger Saudi businesses, contracting companies, and multi-branch operations — provides complete ZATCA Phase 2 integration across all business units, with automatic invoice clearance and reporting built into every financial transaction.
Your invoices are handled automatically, in the background, every single time. You focus on running your business — we handle ZATCA compliance.
How to Check If Your Business Is ZATCA Phase 2 Compliant Right Now
The fastest way to check your compliance status is to contact Future Gates for a free ZATCA compliance assessment. Our team will review your current invoicing system, identify any gaps against ZATCA Phase 2 requirements, and provide a clear action plan to bring your business into full compliance — before your wave deadline arrives.
We serve businesses across Saudi Arabia including Riyadh, Jeddah, Dammam, Khobar, Mecca, Medina, Tabuk, Abha, and Al Khobar.
Do not wait for your ZATCA wave notification to start preparing. Contact Future Gates today and check your compliance now.