Who Must Issue E-Invoices in Saudi Arabia?

If you run a business in Saudi Arabia and deal with VAT, the most important question today isn’t “should I issue an e-invoice?” but “am I actually required to in the first place?” The answer defines your obligations toward the Zakat, Tax and Customs Authority (ZATCA), and the penalties you may face if you fall behind. This guide explains precisely who must comply with e-invoicing, who falls outside its scope, how the groups and thresholds work, and what being “obligated” means in practice.

Last updated: June 23, 2026. Figures and dates verified against Zakat, Tax and Customs Authority sources.

Who Must Issue E-Invoices in Saudi Arabia?

The governing rule is simple and clear. Everyone subject to VAT in Saudi Arabia must comply with e-invoicing. In other words, if you hold an active VAT registration, you’re among those required to issue your invoices electronically per the Authority’s requirements.

This applies to businesses of every size and legal form. Large, mid-sized, and small companies, and VAT-registered sole proprietorships, all fall under the same obligation. Being a small business doesn’t exempt you from e-invoicing as long as you’re VAT-registered.

The obligation also extends to third parties that issue invoices on behalf of a VAT-registered supplier. If a party issues invoices for you, those invoices must meet e-invoicing requirements as if you had issued them yourself. Legal responsibility remains with you as the registered supplier, not with the party handling the technical issuance.

A frequently missed point: the obligation begins from the effective date of your VAT registration, not from the date of your first large sale. Some businesses assume they’re waiting for a “certain volume” of sales after registering; in reality, the very first invoice you issue after registration must be compliant. The legal form of the entity doesn’t change the rule either. Sole proprietorships, limited liability companies, and joint-stock companies are all subject to the same obligation as long as they’re VAT-registered.

The Difference Between B2B, B2G, and B2C Transactions

Much of the confusion around “who is obligated” comes from mixing up the transaction type with the existence of the obligation. Your e-invoicing obligation is tied to your VAT registration, not to who your customer is. But the customer type does determine the required invoice format:

• Business-to-business transactions (B2B): Issue a tax invoice in full, which must be cleared instantly through the Fatoora platform before it’s delivered to the buyer.
• Transactions with a government entity (B2G): follow the same rules with additional fields, such as the additional buyer identifier for government entities.
• Transactions with the end consumer (B2C): Issue a simplified tax invoice delivered to the customer immediately, and reported to the Authority within 24 hours.

Note the key point here. A business that sells to end consumers is not exempt from e-invoicing. It is required to issue a simplified electronic invoice. The difference is that the simplified invoice is reported within 24 hours instead of being cleared instantly — not that it falls outside the system.

Confusing “customer type” with “existence of the obligation” is the most common misunderstanding among obligated businesses. The rule that clears up all confusion: as long as you’re VAT-registered, you must issue an e-invoice for every taxable transaction. What changes based on the customer is only the invoice format and how it’s sent to the Authority. A business that sells to both companies and individuals issues both types: a full tax invoice cleared instantly for its business customers, and a simplified invoice reported within 24 hours for its individual customers. A compliant accounting system selects the correct format automatically based on the customer type recorded on the invoice.

When Does VAT Registration Become Mandatory?

Since the e-invoicing obligation starts with VAT registration, the first step is to know whether your business is required to register for VAT in the first place. The Authority determines this through annual thresholds for taxable revenue:

• Mandatory registration: if your annual taxable revenue reaches or exceeds SAR 375,000, registration is mandatory.
• Optional registration: if your revenue falls between SAR 187,500 and SAR 375,000, registration is optional and the decision is yours.
• Below the optional threshold: if your annual revenue is under SAR 187,500, you’re not eligible to register, and therefore not among those required to e-invoice.

There’s an important exception. A non-resident who makes taxable supplies within the Kingdom must register regardless of the revenue threshold. The annual threshold is a rule for residents; a non-resident’s obligation arises as soon as a taxable supply is made.

Groups and Thresholds: How Was the Obligation Rolled Out?

The Authority didn’t require all businesses to comply at once. It adopted a two-phase rollout, and distributed Phase 2 across successive groups by revenue size. Understanding this breakdown explains why some businesses became obligated before others.

Phase 1: Generation

Phase 1, the generation phase, became mandatory from December 4, 2021, for all VAT-registered persons. Its requirement is to issue your invoices through a compliant electronic system instead of paper invoices or Word files. At this stage there was no direct link with the Authority — the focus was building the ability to generate electronically and store invoices on the seller’s own system.

Phase 2: Integration and Linking

Phase 2 began — the integration and linking phase — on January 1, 2023, in the form of groups. Each group includes a segment of businesses by annual revenue threshold. Group 1 included businesses whose revenue exceeded SAR 3 billion in 2021, then subsequent groups progressively covered lower revenue tiers.

The core requirement in Phase 2 is that your invoices connect directly to the Fatoora platform. A B2B invoice is cleared instantly before delivery to the buyer, and a simplified B2C invoice is reported within 24 hours. New mandatory fields are also added to every invoice.

Mandatory Fields in Phase 2

Phase 2 adds technical requirements not found in a paper invoice. The most notable:

• Cryptographic stamp: a digital signature based on a PKI certificate from the Authority.
• Universally Unique Identifier (UUID): a unique identification number for every invoice.
• Previous invoice hash: links invoices into a chain that ensures sequence integrity.
• QR code: contains the invoice data and signature.

These fields aren’t written manually. A compliant accounting system generates them automatically per the Phase 2 specification. Here’s where the Zakat, Tax and Customs Authority comes in — approving the specification, while your system’s role is to apply it without any intervention from you.

Who Is Exempt from E-Invoicing?

The exemption here is narrow and often misunderstood. It has nothing to do with customer type, but with the nature of the transaction itself. The following are the cases that don’t fall under the e-invoicing system:

VAT-exempt supplies

Some supplies are exempt from tax by regulation, such as certain financial services and residential rent. The e-invoicing system doesn’t apply to these supplies, because they’re outside the scope of VAT to begin with.

Imports from outside the Kingdom

Purchasing goods or services from outside the Kingdom doesn’t create an e-invoicing obligation on the importer as a buyer. The obligation to issue falls on the VAT-registered seller inside the Kingdom, not on the importing party.

Supplies subject to the reverse charge mechanism

For certain supplies, the reverse charge mechanism applies, where the buyer calculates the tax instead of the seller. In this case, the non-resident seller doesn’t issue a local tax invoice within the system, since the burden of calculating the tax shifts to the resident buyer.

The general rule: as long as a transaction is subject to VAT at the standard or zero rate, e-invoicing is required. The exemption is limited to what is exempt or out of scope by regulation.

What Does Being “Obligated” Actually Mean?

The obligation isn’t just a phrase in a regulation. It comes with clear practical steps the business must carry out. Being “obligated” means you’re required to:

1. Adopt a compliant system: use accounting or invoicing software that meets the Phase 2 specification.
2. Register the compliance certificate: register a Compliance Stamp Identifier (CSID) with the Authority to link your system to the Fatoora platform.
3. Issue invoices in the required format: a full tax invoice for business-to-business transactions, and a simplified invoice for the end consumer.
4. Clear or report on time: instant clearance for B2B invoices, and reporting within 24 hours for B2C invoices.
5. Preserve the chain: keep the invoice hash chain for verification during audits.

Before linking your system directly to the platform, it helps to confirm your readiness. You can use a ZATCA readiness check to review the core requirements before going live. Reviewing the criteria for choosing a certified provider also helps you avoid picking a non-compliant system.

Penalties for E-Invoicing Non-Compliance

The Authority applies a penalty framework for e-invoicing violations, escalating by the type of violation and its frequency. Non-compliance doesn’t just mean a financial fine — it can extend to disrupting your ability to issue compliant invoices, and the resulting halt to your transactions.

The main violations the Authority monitors:

• Failing to issue the e-invoice in the required format, or failing to store it.
• Not including mandatory fields, such as the QR code on a simplified invoice.
• Failing to clear business invoices instantly, or delaying the reporting of end-consumer invoices.
• Deleting or altering invoices in non-compliant ways that break chain integrity.

The actual fine amount is determined by the penalty schedule in effect at the time of the violation. So don’t base your decisions on a fixed number — check the Authority’s applicable fine schedule instead. What matters most is that correct implementation from the start avoids this system entirely.

The Authority typically treats a first violation with awareness and warning before escalating, but repeat violations raise the penalty level. That’s why the best policy isn’t waiting for a warning, but building a clean issuance process that doesn’t produce violations in the first place. When your system handles signing, clearance, and reporting automatically, most causes of a fine disappear before they appear.

E-Invoicing and the VAT Return: A Direct Relationship

Your e-invoicing obligation is inseparable from your periodic VAT return. Every valid invoice is automatically recorded under output tax, and every purchase invoice under input tax. When your invoices are electronic and compliant, preparing your return data becomes more accurate and faster, because the numbers come from one organized source instead of error-prone manual collection. Incomplete or rejected invoices, on the other hand, leave gaps in the return that are hard to justify during an audit.

A Practical Step-by-Step Compliance Roadmap

Knowing you’re obligated is one thing; implementing the obligation in the real world is another. Here’s the practical path any business follows from the moment of VAT registration to issuing its first Phase 2-compliant invoice.

First: Confirm your VAT registration

Review your annual taxable revenue. If it reaches SAR 375,000, registration is mandatory; if it exceeds SAR 187,500, you have the option to register voluntarily. As soon as your VAT registration certificate is issued, your e-invoicing obligation begins immediately — so don’t delay the next step.

Second: Identify your Phase 2 group

If you fall under Phase 2, your group determines the date by which you must be ready for direct integration. Don’t rely on your own estimate. Follow the official notification the Authority sends you, since it fixes your exact compliance date. Businesses that wait “until the date gets close” are often caught off guard by how tight the technical timeline is.

Third: Choose a compliant system and test it

Choose accounting software that genuinely meets the Phase 2 specification — not one that merely issues PDF invoices. Confirm the system can automatically generate the cryptographic stamp, the unique identifier, and the QR code. Then test issuance in a sandbox environment before going live, so you catch any issue without affecting your real data.

Fourth: Register the compliance certificate and link your system

Register a Compliance Stamp Identifier (CSID) with the Authority, then link your system to the Fatoora platform. After this step, your invoices are cleared or reported automatically. Keep a copy of your integration details — you’ll need them for any future certificate update.

Fifth: Issue and monitor

After linking, issue your invoices in the required format for each transaction type, and monitor clearance and reporting status regularly. An invoice rejected by the platform isn’t considered valid, so track rejections and resolve them immediately before they pile up.

Common Mistakes Businesses Make

Many fines don’t come from an intent to violate, but from misunderstanding the rule. Here are the most common mistakes we see, and how to avoid them:

• Believing that selling to the end consumer exempts you from the system: in reality, you’re required to issue a simplified e-invoice reported within 24 hours. The exemption applies to exempt supplies, not customer type.
• Delaying the system choice until the last minute: integration and sandbox testing take time. Whoever waits for the deadline to approach risks missing their group’s obligation.
• Using a system that only issues PDF: a PDF file is not a compliant e-invoice. Phase 2 requires a structured format with mandatory fields and a cryptographic stamp.
• Editing or deleting invoices manually: any tampering with the hash chain breaks sequence integrity and is flagged during audits. Correction is done via a proper credit or debit note, not by deletion.
• Ignoring rejections from the platform: a rejected invoice isn’t approved. Ignoring it means you have transactions without valid invoices.

What Does the Obligation Mean for Each Category of Obligated Business?

The obligation is one at its core, but its practical impact differs by the nature and size of the business. Here’s what it means for each category.

The small and mid-sized business owner

If you’re VAT-registered, you’re obligated — even if your team is small and without a dedicated accountant. Your priority is to choose a system that fully handles the technical side, so you’re not distracted from running your business by cryptographic-stamp and clearance details. A good system makes the obligation almost imperceptible in your daily work.

The accountant and accounting firm

If you manage accounting for several clients, you’re dealing with businesses across different groups and thresholds. You need a system that separates each client’s data, manages compliance certificates independently, and gives you clear visibility into each business’s invoice status. A common mistake here is unifying settings across clients whose obligations differ.

Point-of-sale and retail businesses

If most of your sales go to the end consumer through a point of sale, the challenge is issuing a compliant simplified invoice at the moment of payment and sending it to the Authority within 24 hours without slowing down the cashier. A POS system integrated with accounting handles this automatically, so the customer is in front of you for only a few seconds while the Authority’s requirements are completed in the background.

How Qoyod Helps You Comply with E-Invoicing

If you’re among those required to e-invoice, the challenge isn’t knowing the rule, but applying it accurately to every invoice without errors. Here, Qoyod, compliant with Phase 2, handles the technical work on your behalf:

• Phase 1 and Phase 2 compliance: Qoyod issues every invoice signed and cryptographically stamped, with the UUID and QR code, with no manual setup.
• Direct integration with the Fatoora platform: instant clearance for business invoices, and reporting within 24 hours for end-consumer invoices, via direct integration with the Authority.
• Sandbox environment: a safe testing environment that lets you trial compliance before going live, so you confirm your readiness without risking your real data.
• Automatic compliance certificate management: Qoyod manages the Compliance Stamp Identifier (CSID) and preserves the invoice hash chain for audit verification.
• Government entity support: entering the additional buyer identifier (BT-29) for invoices directed to government entities.
• Integrated point of sale: Qoyod’s POS system issues compliant simplified invoices at the moment of sale, automatically reported to the Authority.

All of this works within a single system, so you don’t switch between separate tools for invoicing, accounting, and inventory. And Qoyod’s technical support is available 24/7 to help you through the linking and registration steps.

Start your free trial and meet e-invoicing requirements

Frequently Asked Questions About Who Must Comply with E-Invoicing

Are small businesses required to issue e-invoices?

Yes, if they’re VAT-registered. The obligation is tied to VAT registration, not business size. A registered small business is obligated exactly like a large one.

Am I exempt from e-invoicing because I only sell to the end consumer?

No. Selling to end consumers doesn’t exempt you. You’re required to issue a simplified electronic tax invoice reported to the Authority within 24 hours. The difference is in the invoice format and transmission method, not in whether the obligation exists.

What’s the annual threshold that requires me to register for VAT?

If your annual taxable revenue reaches or exceeds SAR 375,000, registration is mandatory. Between SAR 187,500 and SAR 375,000 it’s optional. And once registered, your e-invoicing obligation begins.

How do I know my group under Phase 2?

The group is determined by annual revenue thresholds, and the Authority announces each segment individually with roughly six months’ notice. Confirm your group through the official notification directed to you by the Authority, not by assumption.

Do government entity (B2G) requirements differ?

B2G transactions follow the same rules with additional fields, most notably the additional buyer identifier (BT-29). Compliant systems enter these fields automatically when invoicing government entities.

Does Qoyod file the VAT return on my behalf?

Qoyod generates your VAT return data (output tax, input tax, and net tax due), but you submit the return and pay the tax through the Authority’s portal yourself. Invoicing and linking are automatic; final submission remains your responsibility toward the Authority.

Key Terms in This Guide

• Clearance: the Authority’s instant approval of a business invoice before it’s delivered to the buyer.
• Reporting: sending the simplified end-consumer invoice to the Authority within 24 hours of issuance.
• Cryptographic stamp: a digital signature proving the invoice was issued by an approved system and hasn’t been altered.
• Fatoora platform: the Authority’s platform that receives invoices for clearance or reporting.
• Reverse charge: a mechanism where the burden of calculating the tax shifts from the seller to the resident buyer.

Conclusion

Those required to e-invoice are everyone subject to VAT in Saudi Arabia, regardless of business size or customer type. The customer type determines the invoice format (a full invoice cleared instantly for businesses, and a simplified invoice reported within 24 hours for the end consumer), but it doesn’t remove the obligation. The exemption is limited to exempt supplies and what is outside the scope of VAT. The earlier and more accurately you implement the system, the more you spare your business from fines and ensure your transactions continue.