ZATCA Phase 2: Complete Compliance Roadmap for Saudi Businesses
ZATCA Phase 2 (Integration Phase) requires businesses to connect their ERP systems directly to ZATCA servers for real-time invoice validation. This guide covers everything from technical requirements to choosing the right system.
What Changed in Phase 2?
Phase 1 (Generation Phase) only required businesses to generate e-invoices in a specific format. Phase 2 takes it further — your system must integrate directly with ZATCA servers, apply Cryptographic Stamps to every invoice, and report transactions in near-real-time. Each invoice gets a QR code that ZATCA can verify instantly.
Technical Requirements
Your ERP must support: API integration with ZATCA Fatoora portal, Cryptographic Stamp Device (CSD) generation, UUID for each invoice, QR code generation with TLV encoding, XML invoice format per ZATCA UBL 2.1 standards, and certificate-based authentication. Manual compliance is practically impossible at scale.
Who Must Comply and When?
ZATCA is rolling out Phase 2 in waves based on annual revenue. The largest enterprises were onboarded first. By 2026, businesses with revenue above SAR 5 million are expected to be fully integrated. Check ZATCA official announcements for your wave assignment.
Penalties for Non-Compliance
Violations include: issuing invoices without Cryptographic Stamps (SAR 10,000+), failure to integrate with ZATCA systems, incorrect invoice format, and missing mandatory fields. Penalties accumulate per invoice and can be devastating for high-volume businesses.
Automating ZATCA Phase 2 with Cloud ERP
The most efficient path to compliance is a cloud ERP with native ZATCA integration. This means your system handles CSD generation, Cryptographic Stamping, QR codes, and real-time reporting automatically. When ZATCA updates requirements, your system updates too — no IT intervention needed.
Get ZATCA Phase 2 ready in 3 minutes — Start free trial
Start Free Trial