ZATCA Updates on E-Invoicing: How to Stay Compliant

The rules of e-invoicing in Saudi Arabia keep changing. Ever since the Zakat, Tax and Customs Authority (ZATCA) launched the e-invoicing program, the matter did not stop at a single decision. It became a series of updates: new waves of businesses entering the mandate, technical specifications being revised, mandatory fields being added, and compliance alerts being tightened. A business that thinks it has “finished” the subject the moment it integrated its system once later discovers that it has fallen behind the latest requirement.

This guide explains how ZATCA’s invoicing rules evolve, where official updates are published, and how to keep your business compliant without chasing every decision manually. The core angle here is a single one: staying informed of regulatory changes is not a task that ends, but an ongoing process handled by an accounting system that updates automatically.

Why e-invoicing rules never stop at a certain point

The e-invoicing program in Saudi Arabia was designed in phases, not as a one-time decision. The goal of this gradual approach is simple: to move the entire economy from the paper invoice to a digital invoice that is signed and connected to ZATCA, without the system collapsing under the pressure of converting hundreds of thousands of businesses all at once.

This phased design is the reason behind the recurring updates. Every phase reveals new details that need fine-tuning. And every wave of businesses adds use cases that were not clear before, so ZATCA issues an update to address them. The result: a living regulatory environment that moves as the program grows.

Your business benefits from understanding this logic. Instead of being surprised by every update, you anticipate that change is coming and prepare for it. That is the difference between a business that chases violations and one that stays ahead of them.

The two major phases: generation, then integration and linkage

The program was split into two main phases. The first phase, the generation phase, became mandatory on 4 December 2021. It required every business registered for value-added tax to issue its invoices from an electronic system, not from a word processor or a paper ledger. In this phase, the invoice is stored on the seller’s system, without a direct link to ZATCA.

The second phase, the integration and linkage phase, launched on 1 January 2023 and is still expanding in waves. Here, everything changes: every invoice is now sent to ZATCA’s Fatoora platform. The business-to-business (B2B) invoice is subject to real-time clearance before it reaches the buyer, and the consumer (B2C) invoice is reported to ZATCA within 24 hours of its issuance.

The second phase added technical requirements that did not exist in the first phase: the digital cryptographic stamp, the unique invoice identifier (UUID), the hash value that links each invoice to the one before it, and the QR code that carries the invoice data and its signature. These technical details are exactly what is subject to continuous updating.

How the waves evolve: who is included and when

The wave is the mechanism by which ZATCA brings businesses into the second phase gradually. ZATCA did not mandate all businesses at once; instead, it ordered them by their annual revenue, from the largest to the smallest.

The first wave began with businesses whose revenue exceeded 3 billion Saudi riyals, and they entered the mandate in January 2023. The waves then followed one after another across smaller revenue brackets. Each wave is announced well ahead of its deadline, usually about six months, to give the business time to prepare and integrate its system.

This means the mandate schedule itself is updated. A business that was not included last year may find itself within a new wave this year. For this reason, it is not enough to integrate your system once; you must follow the wave announcements to know exactly when your turn arrives.

How to know your wave precisely

ZATCA notifies each business of the date it enters the wave through a direct official notice, in addition to the general announcements on its website. The golden rule here is: rely on the official notice addressed to your business, not on estimates. Assuming that you are “most likely” in a particular wave leads to either delay or unjustified haste.

When you receive the notice, you confirm your tax registration number and your annual revenue, then you begin the onboarding steps. All of this becomes easier when your accounting system is already ready for the second phase, so you do not start from scratch when your turn arrives. The details of the linkage mechanism are available on the integration with the Zakat, Tax and Customs Authority.

page. Also review how ZATCA set the criteria for Group 24 as a live example of announcing a new wave and the conditions it included.

The types of updates ZATCA issues

ZATCA’s invoicing updates are not of a single type. Understanding them helps you know which update directly affects your business and which does not. Below are the main update categories.

Updating the waves and included brackets

As we explained, new waves are announced periodically to include smaller revenue brackets. This is the update that matters most to businesses that have not yet entered the second phase, because it determines the actual date of their obligation.

Updating the technical specifications

ZATCA revises the technical specifications of the electronic invoice from time to time. It may add a new mandatory field, adjust the format of certain data, or tighten the validation rules. Your accounting system handles these updates behind the scenes, provided it is a system that is continuously updated.

A real-world example: ZATCA added requirements related to the additional seller identifier and tightened the validation of identity IDs on invoices, to the point where the system now alerts the user immediately when an incorrect format is entered before the invoice is sent. Incorrect identifier formats were among the most common causes of warnings, so the update came to catch the error early.

Updating the format of documents and attachments

Some updates touch the shape of the document itself. A recent example: the tax XML file is now automatically embedded within a PDF document as an attachment under the PDF/A-3 standard, so the user no longer needs to download two separate files. This type of improvement simplifies the accountant’s life without changing the essence of the invoice or the way it is sent to the Fatoora platform.

Updating compliance rules and alerts

From time to time, ZATCA launches new compliance requirements, such as strengthening compliance for government-entity invoices (B2G). The accounting system responds by adding smart alerts that guide the user before approving the document, to reduce the likelihood of a violation.

Where official updates are published

Following the right source protects you from rumors and outdated information. Official updates are issued from specific channels, and any information outside them needs verification.

• ZATCA’s official website: the first destination for every new decision, wave announcement, or updated guideline.
• The help center and guidelines: it contains the detailed guides, frequently asked questions, and technical specifications for e-invoicing.
• Direct official notices: you receive an official communication with the date you enter the wave or with any requirement that specifically concerns your business.
• The awareness kit and introductory videos: simplified materials that explain the new requirements in practical language.

Alongside the official channels, your accounting system provider helps you translate the technical update into practical steps. Instead of reading a complex technical specification, you find the update applied within the system with a simplified explanation of what changed.

For a practical example, see the article technical integration with the Fatoora platform which explains the integration steps from a practical standpoint.

Why falling behind on updates is costly

Postponing the follow-up of updates may seem like a simple matter, but it costs the business on more than one level. An invoice that does not match the latest specification may be rejected in ZATCA’s validation, disrupting the sales and collection cycle.

Likewise, non-compliance with the new requirements exposes the business to warnings that may develop into fines. And the more missed updates accumulate, the harder and costlier it becomes to catch up, because you are addressing a gap of several updates at once instead of one update in its time.

There is another dimension related to reputation. A business that issues non-compliant invoices confuses its customers and suppliers, especially in business transactions that require real-time clearance from ZATCA. A rejected invoice means a delay in receiving what is due.

For the penalty dimension and the mitigation mechanisms, review the details of the fine-exemption initiatives that ZATCA offers from time to time to encourage businesses to regularize their status.

How to keep your business continuously compliant

Staying informed does not mean the accountant sits reading every technical decision themselves. It means building a system of work that captures the update and applies it. Here are the practical steps.

1. Adopt an accounting system that updates automatically

The most important decision your business makes is choosing a cloud accounting system that handles compliance on your behalf. When ZATCA issues a new specification, the system provider applies it in the background, so you find your invoices compliant without changing anything in the way you work. This is the core of the idea: compliance is a continuous feature within the system, not a manual task that keeps recurring.

2. Follow ZATCA’s official channels

Set aside regular time to review the official website and the help center. You do not need daily follow-up, but a monthly review, or a review whenever any notice arrives, is enough to stay in the picture.

3. Check your business’s notices directly

The official notice addressed to your business is the most accurate source for the date of your obligation. Make sure the contact details registered with ZATCA are up to date, so that communications reach you on time.

4. Test before activation through the simulation environment

Before your invoices move to the live environment, test them in a safe simulation environment. This reveals any configuration error without affecting your real invoices or your linkage with ZATCA. The advantages of full integration are explained on the integration and linkages.

page.

5. Train your team on the changing requirements

The system applies the technical update, but your team needs to understand what changed in the daily way of working. A short training session with every substantive update ensures everyone issues invoices correctly from day one.

How Qoyod helps you keep pace with invoicing updates

• Qoyod is a cloud accounting system compliant with the second phase of e-invoicing, designed to handle compliance on your behalf and to keep pace with every new requirement ZATCA issues. Here is specifically what it offers on this subject: Automatic signing, stamping, and linkage:
• every invoice you issue is signed, stamped, and given a unique identifier (UUID) and a QR code, and is sent to the Fatoora platform for real-time clearance in business invoices or for reporting within 24 hours in consumer invoices. Linkage certificate (CSID) management:
• Qoyod manages the cryptographic-stamp certificate automatically, so you do not deal manually with the technical details of the linkage with ZATCA. Automatic application of new specifications:
• when ZATCA updates its specifications, Qoyod applies the change in the background. A recent example: embedding the XML file within a PDF document under the PDF/A-3 standard became automatic for businesses activated on the second phase. Smart compliance alerts:
• the system alerts you immediately when an identity ID is entered in an incorrect format before the invoice is sent, and displays an alert to strengthen compliance in government-entity invoices, which reduces warnings from ZATCA. Safe simulation environment:
• you test your configurations and invoices in a trial environment before moving to the live environment, without any risk to your real linkage. Automatic VAT calculation:

the system calculates the tax on every transaction, separates taxable, zero-rated, and exempt transactions, and prepares the tax return summary.

Talk to sales

A practical example: how a single technical update travels from announcement to your invoice

Let us trace the journey of a single update to see how it actually reaches your invoice. Take the update on validating identity IDs on invoices as an example. The story begins with an observation at ZATCA: incorrect identity-ID formats were among the most common causes of invoice rejection in validation.

The first step is for ZATCA to announce the requirement and publish it in its technical guides. This is where the accounting system provider’s role begins. The provider reads the specification, understands the correct format required, then programs the system to validate it at the moment of entry.

The second step is for the system to apply the update in the background. Your business does not need to download anything or change its configuration. Simply put, when an identity ID is entered in an incorrect format, an instant alert appears explaining the correct format before the invoice is sent.

The third step is the practical impact on your business: the success rate of your invoices in ZATCA’s validation rises, and warnings drop. The invoice that would have been rejected now passes on the first try. This entire journey, from ZATCA’s announcement to your invoice, passes without requiring any manual effort from you, provided your system is continuously updated.

The same reasoning applies to other updates. When ZATCA added the embedding of the XML file within a PDF document under the PDF/A-3 standard, neither the shape of the invoice nor the way it is sent to the Fatoora platform changed. All that happened was that the user no longer needed to download two separate files, as the system now merges them automatically for businesses activated on the second phase.

The lesson from this example is clear: a technical update that is complex on paper becomes a simple experience when the system takes care of applying it. Your role remains understanding what changed in the way you work, not programming compliance yourself.

Considerations for different sectors and business cases

ZATCA’s updates do not affect all businesses in the same way. Your business’s size and the nature of its activity determine which update matters most to you and when it reaches you.

Large and medium businesses

Businesses with high revenue entered the second phase in the first waves, so they deal more with technical-specification updates. The large volume of their invoices makes any format error costly, because it recurs across a huge number of invoices. For this reason, they need a system that applies updates the moment they are issued.

Small and emerging businesses

Smaller businesses entered within later waves. The most important update that concerns them is the wave announcement itself, because it determines when their actual obligation begins. This category benefits greatly from a system that is ready for the second phase in advance, so it does not start from scratch when its turn arrives.

Businesses that deal with government entities

Businesses that issue invoices to government entities (B2G) are subject to additional compliance rules. ZATCA launched special alerts to strengthen compliance in these invoices, so the system guides the user before approving the document to reduce the likelihood of a violation.

Multi-branch or multi-currency businesses

Businesses that operate in foreign currencies or across multiple branches need greater attention to format updates. For example, when issuing an invoice in a foreign currency, the system calculates the amounts reported to ZATCA based on the exchange rate saved at the time of creation, without affecting the invoice amounts in the foreign currency. Following these details ensures the accuracy of the tax return. Whatever your sector, the unified rule is one: a cloud accounting system that updates automatically protects your business from compliance gaps, no matter how your case differs. To dive deeper into the basics of registration, see the article on.

registering for the electronic invoice

The difference between one-time compliance and continuous compliance

Many businesses treat e-invoicing as a project with a beginning and an end: we integrate the system, we finish, we move on to something else. This perception is the source of the problem. Compliance is not an event, but a permanent state that needs maintenance.

A business that adopts a “continuous compliance” mindset chooses a system that updates automatically, follows the official channels regularly, and trains its team with every change. The result: it is not surprised by any requirement, and gaps do not accumulate on it.

A business that adopts a “one-time compliance” mindset, by contrast, integrates its system and forgets it, until it hits a rejected invoice or a warning from ZATCA. At that point it discovers that it has fallen behind on several updates, so it pays the cost of catching up all at once. The smarter choice is clear: make compliance a feature built into your system, not a burden that keeps recurring. Learn more about.

Qoyod’s compliance with the second phase of e-invoicing

Terms that recur in ZATCA updates

• Understanding the basic terms makes reading any update easier. Here are the most frequently recurring ones: Fatoora platform:
• the official platform to which invoices are sent for clearance or reporting. Clearance:
• specific to business (B2B) invoices, where the invoice is approved by ZATCA before it reaches the buyer. Reporting:
• specific to consumer (B2C) invoices, where the invoice is reported to ZATCA within 24 hours of its issuance. Unique identifier (UUID):
• a number that identifies each invoice in a non-repeating way. Cryptographic stamp:

a digital signature that proves the invoice was issued from an approved system and has not been altered. Zakat, Tax and Customs Authority (ZATCA) For more on the definitions, review the the tax invoiceentry in the glossary of terms, and the entry on value-added tax.

Frequently asked questions

Do e-invoicing requirements actually change, or do they stay fixed?

They change continuously. The program was designed in phases and waves, and ZATCA revises the technical specifications and adds new compliance requirements from time to time. This is why compliance needs ongoing follow-up, not a one-time integration.

How do I know the date my business enters a second-phase wave?

ZATCA notifies you with a direct official notice, in addition to its general announcements. Rely on the notice addressed specifically to your business, and make sure the contact details registered with you are up to date so that communications reach you on time.

Where do I follow ZATCA’s official updates?

Through ZATCA’s official website, the help center and guidelines, the direct notices, and the awareness kit. Any information from outside these channels needs verification before you rely on it.

What happens if I fall behind on applying a new update?

Your invoices may be rejected in ZATCA’s validation, disrupting the collection cycle, and you may be exposed to warnings that develop into fines. And the more missed updates accumulate, the harder and costlier it becomes to catch up.

Does Qoyod apply ZATCA updates automatically?

Yes. Qoyod is a cloud system compliant with the second phase; it applies the new specifications in the background and manages the linkage certificate (CSID) automatically, so your invoices stay compliant without any manual intervention from you.

Do I need a technical expert to keep up with the changes?

No, if you adopt an accounting system that updates automatically. The system handles the technical side, and your role remains following the official notices and training your team with every substantive change in the way of working.

A practical summary

The rules of e-invoicing in Saudi Arabia keep evolving: new waves, updated technical specifications, added mandatory fields, and stricter compliance alerts. Staying informed is not a task that ends, but an ongoing process.

The smartest way to stay compliant is to adopt a cloud accounting system that applies updates automatically, along with regular follow-up of ZATCA’s official channels, checking your business’s direct notices, and training the team with every change. In this way, keeping pace with regulatory changes turns from a burden that chases you into a feature that works in the background.

Remember that the ultimate goal of every update ZATCA issues is a more transparent economy and trustworthy invoices. A business that treats these updates as an opportunity to organize its work, rather than as a burden, comes out stronger. A compliant system reduces your errors, speeds up your collection, and gives you an accurate picture of your tax position at any moment.

Start from the most important decision: choose an accounting system that handles compliance on your behalf. After that, following ZATCA’s decisions becomes a simple habit, not a tiring race behind every new update.