By Mohamed Abdul Baseeth, Founder — Maas Consult Middle East Co. Updated: 2026
Quick Answer Box
What is ZATCA Phase 2? ZATCA Phase 2 also called the Integration Phase of Saudi Arabia’s e-invoicing mandate requires businesses to connect their invoicing systems directly to the Zakat, Tax and Customs Authority (ZATCA) FATOORAH platform in real time. Unlike Phase 1, which simply required generating structured digital invoices, Phase 2 demands live API integration so that every invoice is either cleared or reported through ZATCA’s central system before or shortly after it is issued.
In short: Your accounting or ERP system must talk to ZATCA automatically, for every invoice, every time.
Key Takeaways
- ZATCA Phase 2 is the integration phase of Saudi Arabia’s e-invoicing (FATOORAH) regulation
- It applies in waves, based on annual revenue thresholds the rollout is ongoing through 2026 and beyond
- Two invoice modes are required: Clearance Mode (for B2B/B2G) and Reporting Mode (for B2C)
- Non-compliance carries penalties up to SAR 50,000 per violation
- Businesses need a ZATCA-compliant ERP or accounting system to integrate with FATOORAH via API
- ERPNext and Odoo both used by Maas Consult are capable of full ZATCA Phase 2 integration
- Early implementation is strongly advised waiting for your wave creates last-minute risk
What Exactly is ZATCA, and Why Does This Matter?
If you run a business in Saudi Arabia, ZATCA is not a name you can afford to ignore.
The Zakat, Tax and Customs Authority commonly known as ZATCA is the Saudi government body responsible for tax collection, zakat assessment, and customs regulation across the Kingdom. It oversees VAT compliance, excise tax, and increasingly, the digitization of all commercial transactions through mandatory e-invoicing.
Saudi Arabia’s e-invoicing initiative, branded FATOORAH (فاتورة), was launched as part of the Kingdom’s Vision 2030 digital transformation agenda. The goal is straightforward: eliminate paper invoices, reduce tax evasion, improve financial data transparency, and bring Saudi businesses into alignment with global digital commerce standards.
The regulation rolled out in two distinct phases and Phase 2 is where most businesses are either currently preparing, currently integrating, or unfortunately still catching up.
ZATCA Phase 1 vs Phase 2: What Changed?
Definition Box: ZATCA Phase 1 (Generation Phase) Phase 1, effective December 4, 2021, required all VAT-registered businesses in Saudi Arabia to stop issuing manual paper invoices and begin generating electronic invoices using compliant software. Invoices had to include a QR code, specific structured data fields, and meet defined XML/PDF-A3 format requirements. However, businesses were not required to connect to ZATCA’s systems in real time.
Phase 1 was essentially the discipline phase ZATCA was getting Saudi businesses to generate invoices the right way. Phase 2 takes that a major step further.
| Feature | Phase 1 (Generation) | Phase 2 (Integration) |
| Effective Date | December 4, 2021 | Waves from January 2023 onward |
| Invoice Format | Electronic (XML/PDF-A3) | Electronic + API-integrated |
| QR Code Required | Yes (B2C only) | Yes (both modes) |
| ZATCA Connection | Not required | Mandatory real-time API integration |
| Clearance Required | No | Yes (B2B/B2G invoices) |
| Reporting Required | No | Yes (B2C invoices) |
| Digital Signature | Required | Required + Cryptographic Stamp |
| Who Validates Invoice? | Business system | ZATCA validates before invoice is valid |
| ERP Integration Needed? | Recommended | Mandatory |
The fundamental shift is this: in Phase 1, your system generated the invoice. In Phase 2, ZATCA must approve or acknowledge it.
The Two Modes of ZATCA Phase 2: Clearance and Reporting
This is the part that confuses most business owners I meet. Understanding the difference between these two modes is the single most important thing you need to grasp before planning your compliance approach.
Clearance Mode (B2B and B2G Invoices)
Definition: Clearance Mode In Clearance Mode, a tax invoice (B2B or B2G) must be submitted to ZATCA’s FATOORAH platform and cleared — meaning ZATCA digitally validates and stamps it — before the invoice can legally be shared with the buyer.
How it works in practice:
- Your ERP or accounting system generates the invoice in compliant XML format
- The invoice is submitted to ZATCA via API
- ZATCA validates the invoice data and applies a cryptographic clearance stamp
- The cleared invoice is returned to your system
- You then share the cleared invoice with your B2B or government buyer
The entire clearance cycle is designed to happen in seconds. In a well-integrated ERP setup, this is invisible to your sales team — the system handles it automatically.
Real-world scenario: A Riyadh-based IT solutions company issues a SAR 85,000 invoice to a government ministry. Before that invoice is valid, it must pass through ZATCA’s clearance process. If your system is not integrated, you cannot legally issue that invoice.
Reporting Mode (B2C Invoices)
Definition: Reporting Mode In Reporting Mode, simplified tax invoices (B2C) are generated and issued to the end customer first, then reported to ZATCA’s FATOORAH platform within 24 hours of issuance.
How it works in practice:
- Your system generates a simplified invoice for a retail or consumer transaction
- The invoice is issued immediately to the customer (no wait required)
- Within 24 hours, the invoice data is submitted to ZATCA in batch or real-time via API
- ZATCA acknowledges receipt
Real-world scenario: A retail store in Riyadh sells SAR 350 of goods to a walk-in customer. The POS system generates the simplified invoice instantly. In the background, that invoice — along with all others from that day — gets reported to ZATCA by end of business.
Which Businesses Does ZATCA Phase 2 Apply To?
ZATCA is rolling out Phase 2 in waves, targeting businesses based on their annual revenue. If your business is VAT-registered and exceeds a certain revenue threshold, you are in a specific wave and have a compliance deadline.
Wave rollout overview:
| Wave | Annual Taxable Revenue Threshold | Integration Deadline | Status |
| 1 | Above SAR 3 billion | January 1, 2023 | ✅ Completed |
| 2 | SAR 500 million – SAR 3 billion | July 1, 2023 | ✅ Completed |
| 3 | Above SAR 250 million | October 1, 2023 | ✅ Completed |
| 4 | SAR 150 million – SAR 250 million | November 1, 2023 | ✅ Completed |
| 5 | SAR 100 million – SAR 150 million | December 1, 2023 | ✅ Completed |
| 6 | SAR 70 million – SAR 100 million | January 1, 2024 | ✅ Completed |
| 7 | SAR 50 million – SAR 70 million | February 1, 2024 | ✅ Completed |
| 8 | SAR 40 million – SAR 50 million | March 1, 2024 | ✅ Completed |
| 9 | SAR 30 million – SAR 40 million | June 1, 2024 | ✅ Completed |
| 10 | SAR 25 million – SAR 30 million | October 1, 2024 | ✅ Completed |
| 11 | SAR 15 million – SAR 25 million | November 2024 – January 2025 | ✅ Completed |
| 12 | SAR 10 million – SAR 15 million | December 1, 2024 | ✅ Completed |
| 13 | SAR 7 million – SAR 10 million | January 1, 2025 | ✅ Completed |
| 14 | SAR 5 million – SAR 7 million | February 1, 2025 | ✅ Completed |
| 15 | SAR 4 million – SAR 5 million | March 1, 2025 | ✅ Completed |
| 16 | SAR 3 million – SAR 4 million | April 1, 2025 | ✅ Completed |
| 17 | SAR 2.5 million – SAR 3 million | July 31, 2025 | ✅ Completed |
| 18 | SAR 2 million – SAR 2.5 million | August 31, 2025 | ✅ Completed |
| 19 | SAR 1.75 million – SAR 2 million | September 30, 2025 | ✅ Completed |
| 20 | SAR 1.5 million – SAR 1.75 million | October 31, 2025 | ✅ Completed |
| 21 | SAR 1.25 million – SAR 1.5 million | November 30, 2025 | ✅ Completed |
| 22 | SAR 1 million – SAR 1.25 million | December 31, 2025 | ✅ Completed |
| 23 | SAR 750,000 – SAR 1 million | March 31, 2026 | ⏳ In Progress |
| 24 | SAR 375,000 – SAR 750,000 | June 30, 2026 | 🔴 Upcoming |
Important: Even if your revenue wave has not yet been announced, you are still legally required to have been Phase 1 compliant since December 2021. And based on the pace of ZATCA’s rollout, lower-revenue SMEs should not assume they are exempt — they are next.
ZATCA announces each wave typically 6 months in advance, giving businesses time to prepare. Check the official ZATCA portal at zatca.gov.sa for the latest wave announcements.
What Are the ZATCA Phase 2 Technical Requirements?
This section is critical for business owners, CFOs, and IT teams who need to understand what “integration” actually means technically.
1. Invoice Format Requirements
All invoices must be generated in:
- XML format conforming to the UBL 2.1 (Universal Business Language) standard
- PDF/A-3 format embedding the XML (for human-readable versions)
- Compliant with ZATCA’s technical specifications document (available on zatca.gov.sa)
2. Required Invoice Fields
Every compliant Phase 2 invoice must include:
- Seller’s VAT registration number
- Buyer’s VAT registration number (for B2B)
- Invoice UUID (universally unique identifier)
- Invoice sequential number (within an invoice counter)
- Issue date and time
- Invoice type code (standard, simplified, credit, debit)
- Line-level item description, quantity, unit price
- VAT amount and rate
- Total amounts (excluding VAT, VAT amount, total including VAT)
- Cryptographic stamp (digital signature)
- QR code (mandatory for all invoice types in Phase 2)
- Previous invoice hash (for audit chain integrity)
3. Cryptographic Stamp Requirements
Each invoice must carry a ZATCA-issued cryptographic stamp — essentially a digital signature generated using a certificate that ZATCA issues to your business during the onboarding process. This stamp proves the invoice has not been tampered with.
Your ERP system needs to:
- Store the ZATCA-issued certificate securely
- Apply the cryptographic stamp to each invoice automatically during generation
- Maintain invoice counter and hash chain (for anti-tampering audit trail)
4. FATOORAH API Integration
Your system must communicate with the ZATCA FATOORAH platform via:
- Clearance API — for submitting and receiving clearance on B2B/B2G invoices
- Reporting API — for submitting B2C invoice reports
- Onboarding API — for the initial device registration and certificate issuance process
The APIs use standard HTTPS calls with JSON payloads. Most modern ERP systems — including ERPNext and Odoo — either natively support this or have certified integration modules available.
5. CSID and PCSID Onboarding
Before any invoice can be submitted, your system must complete a technical onboarding process with ZATCA:
- Generate a CSR (Certificate Signing Request) from your system
- Submit the CSR to ZATCA via the Onboarding API or through the FATOORAH portal
- Receive a CCSID (Cryptographic Compliance Solution Identifier) — used for compliance testing
- Complete compliance testing with ZATCA (submit sample invoices, receive validation feedback)
- Receive a PCSID (Production Cryptographic Solution Identifier) — your live integration certificate
- Go live with production API calls
This onboarding process typically takes 5 to 15 business days when done correctly, but can stretch longer if technical issues arise during the testing phase.
Step-by-Step ZATCA Phase 2 Implementation Guide
Based on implementations our team at Maas Consult has completed for Saudi businesses across multiple sectors, here is a realistic step-by-step approach:
Step 1: Assess Your Current Invoicing Setup
- Is your current system generating Phase 1 compliant invoices?
- What ERP or accounting software are you using?
- Is your software vendor ZATCA-certified or do they have a ZATCA integration module?
- How many invoices do you generate per day? (This affects infrastructure sizing)
- What percentage are B2B vs B2C? (This determines your clearance vs reporting split)
Step 2: Select a ZATCA-Compliant Solution
- If you are already on ERPNext or Odoo, verify that the ZATCA Phase 2 module is installed and configured
- If you are on unsupported or legacy software, this is the time to migrate to a compliant ERP
- Evaluate vendors based on: ZATCA certification status, API integration maturity, local support, cost
Step 3: Complete ZATCA Technical Onboarding
- Work with your ERP implementer to generate a CSR
- Submit to ZATCA and obtain your CCSID
- Complete compliance testing with ZATCA’s testing environment
- Resolve any rejection errors from ZATCA’s validator
- Obtain your production PCSID
Step 4: Configure Invoice Templates and Workflows
- Configure invoice templates to meet all required fields
- Set up invoice counter and hash chain
- Configure clearance workflow for B2B invoices (automatic API call on invoice submission)
- Configure reporting workflow for B2C invoices (batch or real-time submission)
Step 5: Staff Training
- Finance team: understanding what ZATCA-cleared invoices look like and how to handle rejections
- Sales team: understanding that B2B invoices require clearance before sharing with customers
- IT team: understanding how to monitor API health, handle certificate renewals, and escalate errors
Step 6: Go-Live and Monitor
- Move to production API
- Monitor the first week of transactions closely for errors or rejections
- Establish a process for handling rejected invoices (corrections and resubmission)
- Set reminders for certificate renewal (PCSID certificates have a defined validity period)
ZATCA Phase 2 Penalties: What Non-Compliance Actually Costs
Many business owners I speak with underestimate the severity of ZATCA’s penalty framework. This is a genuine risk, not a formality.
ZATCA Penalty Framework for E-Invoicing Non-Compliance:
| Violation | Penalty |
| Issuing invoices without compliance with e-invoicing regulations | Up to SAR 50,000 |
| Failure to integrate with ZATCA by your wave deadline | Formal notice + escalating penalties |
| Issuing invoices in incorrect format | Per-invoice penalties |
| Failure to apply digital signature / cryptographic stamp | Per-invoice penalties |
| Failure to report B2C invoices within 24 hours | Reportable violation |
ZATCA typically issues a warning notice before imposing the maximum penalty — but don’t rely on this. The authority has made clear that enforcement is active, and businesses operating beyond their integration deadline without remediation are at risk.
There is also a less-discussed risk: reputational and commercial risk. B2B buyers in Saudi Arabia increasingly request ZATCA-cleared invoices as part of their own internal compliance processes. If your system cannot produce a cleared invoice, you may lose business to competitors who can.
Expert Insight: What We See Going Wrong
From Mohamed Abdul Baseeth, Founder — Maas Consult Middle East Co.:
“After supporting more than 800 businesses through ZATCA compliance, the biggest mistake I see is businesses treating this as an IT project rather than a business process project. The technical integration is achievable most modern ERP systems can handle it. The failures happen when a business hasn’t mapped their invoice workflows properly before integration, when they have legacy data problems, or when they haven’t trained their finance team to understand what a rejected invoice means and what to do about it.
The second mistake is choosing a solution based on price alone. A cheap ERP module that isn’t regularly updated for ZATCA specification changes will create compliance risk six months down the line. Choose a solution with an active development team that monitors ZATCA’s technical bulletins.”
This is something worth sitting with. ZATCA regularly updates its technical specifications — the integration is not a one-time project. Your solution needs to evolve with the regulation.
ZATCA Phase 2 and ERP Systems: What You Need to Know
If you are evaluating ERP systems or wondering whether your current one is Phase 2 capable here is an honest overview of the landscape.
ERPNext and ZATCA Phase 2
ERPNext, the open-source ERP platform, supports ZATCA Phase 2 integration through dedicated modules. ERPNext’s flexibility and open-source architecture actually make it well-suited for ZATCA compliance customization the invoice generation, XML formatting, cryptographic stamping, and API calls to FATOORAH can all be implemented natively.
At Maas Consult, we implement ERPNext for Saudi businesses with full ZATCA Phase 2 integration as a core part of the deployment. For SMEs especially, ERPNext offers a cost-effective path to compliance without the enterprise-level licensing costs of platforms like SAP.
Learn more about our ERPNext implementation services →
Odoo and ZATCA Phase 2
Odoo similarly supports ZATCA Phase 2 through its Saudi Arabia localization module. Odoo’s strength is in its modular architecture — you can integrate ZATCA compliance within the same platform you use for accounting, inventory, sales, and HR. The official Odoo Saudi localization is developed by Odoo S.A. and partner-maintained, with periodic updates as ZATCA specifications evolve.
SAP and ZATCA Phase 2
SAP Business One and SAP S/4HANA have ZATCA-certified localization for Saudi Arabia. These are typically suited to mid-sized and larger enterprises given the licensing cost structure.
Microsoft Dynamics and ZATCA Phase 2
Microsoft Dynamics 365 Finance also has Saudi Arabia e-invoicing localization. As with SAP, implementation complexity and cost tend to favor larger organizations.
What If Your Current Software Is Not ZATCA-Compliant?
This is more common than you might expect. Many Saudi SMEs are still running on basic accounting software, Excel-based invoicing, or regional ERP systems that have not been updated for ZATCA Phase 2.
If your current system cannot be made ZATCA-compliant, your options are:
- Upgrade to a ZATCA-compliant version (if your vendor offers one)
- Replace your system with a ZATCA-compliant ERP platform
- Use a ZATCA-certified middleware layer that sits between your system and FATOORAH (higher ongoing cost, lower short-term disruption)
Option 1 is cheapest if available. Options 2 and 3 are realistic depending on your business size, transaction volume, and timeline.
Industry-Specific ZATCA Phase 2 Considerations
The regulation applies universally to VAT-registered businesses, but the implementation nuances differ by industry.
Retail and F&B
Retail businesses have high B2C invoice volumes — the reporting mode is your primary concern. Your POS system must be integrated or you need a certified POS-to-FATOORAH connector. End-of-day batch reporting is common, but real-time reporting is increasingly the standard.
Contracting and Construction
Contracting businesses typically issue high-value B2B invoices — clearance mode is your primary concern. Project-based invoicing creates complexity because invoices may be issued in stages (advance, progress, final). Each invoice must be individually cleared with ZATCA.
Professional Services
Consulting, legal, accounting, and advisory firms primarily issue B2B invoices. Clearance mode applies. The volume is typically lower but the invoice values are higher — errors are more commercially sensitive.
Manufacturing and Distribution
Manufacturers dealing with both B2B buyers and B2C distribution channels must handle both modes. Supply chain transactions, credit notes, and debit notes all require proper ZATCA integration — not just standard invoices.
Healthcare and Pharmaceuticals
ZATCA compliance intersects with MOH (Ministry of Health) regulations for certain healthcare providers. ERP implementations in this sector need to account for both regulatory frameworks simultaneously.
Common ZATCA Phase 2 Implementation Mistakes
These are the mistakes I have seen repeatedly — not in theory, but in actual Saudi business implementations:
- Starting too late. Businesses wait until 2–3 weeks before their wave deadline. A proper ZATCA Phase 2 implementation realistically takes 4–12 weeks depending on system complexity. Starting late means going live under pressure, which increases the chance of errors.
- Relying on a non-certified ERP module. Not every ZATCA “integration” sold in the market has actually been tested and certified by ZATCA. Verify your solution against ZATCA’s published list of compliant solutions.
- Ignoring credit notes and debit notes. Many businesses configure standard invoice compliance but forget that credit notes and debit notes have their own ZATCA requirements and must also be cleared or reported.
- Poor certificate management. Your PCSID certificate has an expiry date. If you don’t renew it proactively, your live integration breaks and you are issuing non-compliant invoices without realizing it.
- Not testing with realistic data. ZATCA’s compliance testing phase exists for a reason. Rushing through testing with simplified sample data and then going live often reveals real-world edge cases that break the integration.
- Treating it as a one-time project. ZATCA regularly updates its technical specifications. An integration that was compliant in 2023 may need updating by 2025. You need a vendor who stays current.
ZATCA Phase 2 Compliance Checklist
Use this checklist to assess your current readiness:
Legal and Registration
- Business is VAT-registered with ZATCA
- Know your wave number and compliance deadline
- Company commercial registration number is current
Technical Infrastructure
- ERP or accounting software is ZATCA Phase 2 certified
- Invoice generation produces UBL 2.1 compliant XML
- System supports PDF/A-3 format with embedded XML
- Digital signature (cryptographic stamp) is implemented
- Invoice counter and hash chain are configured correctly
ZATCA Onboarding
- CSR has been generated and submitted
- CCSID received and compliance testing completed
- Compliance testing passed with zero critical errors
- PCSID received for production use
- Certificate validity date tracked with renewal reminder
Workflow Configuration
- B2B invoices follow clearance workflow (cleared before delivery)
- B2C invoices follow reporting workflow (reported within 24 hours)
- Credit notes and debit notes configured for compliance
- Rejection handling process is defined and tested
Training and Monitoring
- Finance team trained on cleared vs uncleared invoices
- Sales team understands clearance process for B2B
- IT team knows how to monitor API health and handle errors
- ZATCA portal access is set up for manual monitoring
ROI and Cost Considerations
The honest answer on cost: implementing ZATCA Phase 2 integration is not free, but the cost of non-compliance is higher.
Typical implementation cost ranges for Saudi SMEs:
| Approach | Estimated Cost Range (SAR) | Suitable For |
| ERPNext + ZATCA integration (new deployment) | 15,000 – 45,000 | SMEs without existing ERP |
| Odoo + ZATCA integration (new deployment) | 20,000 – 60,000 | SMEs needing broader ERP functionality |
| ZATCA module add-on to existing ERP | 5,000 – 20,000 | Businesses already on compatible ERP |
| SAP/Microsoft Dynamics ZATCA localization | 50,000 – 200,000+ | Mid-market and enterprise |
Note: These are rough indicative ranges. Actual costs depend on invoice volume, number of branches, integration complexity, and customization requirements.
ROI considerations beyond compliance:
Many businesses that implement a full ERP alongside their ZATCA integration discover additional benefits:
- Reduced invoice processing time (automated generation vs manual)
- Fewer VAT reconciliation errors
- Faster accounts receivable — cleared invoices are dispute-resistant
- Better financial visibility for management reporting
In our experience at Maas Consult, businesses that were previously on paper or basic accounting software and moved to ERPNext or Odoo for ZATCA compliance often report broader efficiency gains that pay back the implementation cost within the first year.
Case Study Example: Small Professional Services Firm, Riyadh
A management consultancy in Riyadh with 12 employees and approximately SAR 4 million in annual B2B revenue was approaching their ZATCA Phase 2 wave deadline. They were running invoices on a basic accounting software that had no ZATCA Phase 2 capability and their vendor had no roadmap to add it.
Challenge: Replace invoicing system, achieve ZATCA compliance, and maintain business continuity — all within 8 weeks.
Solution: Maas Consult deployed ERPNext with full ZATCA Phase 2 integration. The implementation included:
- ERPNext setup with Saudi Arabia localization
- ZATCA onboarding and PCSID issuance
- Configuration of clearance workflow for all B2B invoices
- Migration of customer master data and open invoices
- Finance team training (2 sessions)
Result: Business was live and compliant 6 weeks after project start. First production invoice cleared successfully through ZATCA on day one of go-live. The firm also gained real-time financial dashboards and automated VAT reporting as additional benefits of the ERP deployment.
This example is representative of similar implementations. Timelines and outcomes vary by business complexity.
Frequently Asked Questions
What is ZATCA Phase 2 in simple terms?
ZATCA Phase 2 is the second stage of Saudi Arabia’s e-invoicing law (FATOORAH). It requires businesses to connect their invoicing software directly to ZATCA’s system so that invoices are automatically verified by the tax authority in real time. Think of it as ZATCA being a silent co-signer on every invoice your business issues.
When is the ZATCA Phase 2 deadline?
There is no single deadline — ZATCA Phase 2 is rolling out in waves based on annual revenue. Large businesses (SAR 3 billion+) had to comply from January 2023. The rollout continues through 2025 and 2026 for smaller revenue brackets. Check zatca.gov.sa or consult a ZATCA compliance specialist to confirm your specific wave.
What is the difference between clearance mode and reporting mode?
Clearance mode applies to B2B and B2G invoices — ZATCA must approve the invoice before you can give it to your customer. Reporting mode applies to B2C invoices — you can give the invoice to your customer immediately, but you must report it to ZATCA within 24 hours.
Which businesses are required to comply with ZATCA Phase 2?
All VAT-registered businesses in Saudi Arabia are required to comply with Phase 2. The only variable is when — determined by your annual revenue wave. Higher-revenue businesses integrated first; lower-revenue SMEs follow in subsequent waves.
What happens if I miss my ZATCA Phase 2 deadline?
ZATCA can impose penalties of up to SAR 50,000 per violation. More immediately, you may be unable to issue legally valid B2B invoices, which can affect your ability to collect payment from corporate clients. ZATCA typically issues warning notices before maximum penalties, but enforcement is active.
Can a business handle ZATCA Phase 2 without an ERP?
Technically possible but impractical at scale. Some businesses use ZATCA-certified standalone invoicing software rather than a full ERP. However, for businesses with meaningful invoice volumes, an ERP with built-in ZATCA integration is significantly more efficient and less error-prone than standalone invoicing tools.
Is ERPNext compliant with ZATCA Phase 2?
Yes, ERPNext supports ZATCA Phase 2 compliance through its Saudi Arabia localization. Correct implementation and configuration by a qualified implementer is essential — the capability exists in the platform, but it must be set up properly to be functional and legally compliant.
How long does ZATCA Phase 2 implementation take?
For a straightforward SME implementation with a ZATCA-compliant ERP, expect 4–8 weeks from project start to go-live. Larger or more complex businesses may require 3–6 months. ZATCA’s onboarding and testing process alone can take 2–3 weeks.
What is a PCSID in ZATCA Phase 2?
PCSID stands for Production Cryptographic Solution Identifier. It is the digital certificate issued by ZATCA to your business system that authorizes your production API integration. You cannot submit live invoices to ZATCA without a valid PCSID. It has an expiry date and must be renewed proactively.
Does ZATCA Phase 2 apply to credit notes and debit notes?
Yes. Credit notes and debit notes issued in reference to Phase 2-covered invoices must also comply with ZATCA Phase 2 requirements — they must be cleared or reported through the FATOORAH platform accordingly. This is a commonly missed detail during implementation.
Can a foreign company operating in Saudi Arabia be subject to ZATCA Phase 2?
If a foreign company is VAT-registered in Saudi Arabia (for example, through a branch office or permanent establishment), it is subject to the same ZATCA Phase 2 requirements as Saudi-registered businesses.
What is the FATOORAH portal?
FATOORAH (فاتورة) is ZATCA’s e-invoicing platform — both the brand name for Saudi Arabia’s e-invoicing initiative and the technical portal through which businesses onboard, test, and connect their systems. API calls for invoice clearance and reporting go to FATOORAH’s endpoints.
Conclusion
ZATCA Phase 2 is not going away, and the compliance wave is heading toward every VAT-registered business in Saudi Arabia regardless of size. The businesses that will navigate it most smoothly are those that treat it as a business improvement opportunity — not just a regulatory checkbox.
The mandate forces you to have a proper, integrated invoicing system. Once that system is in place, the downstream benefits — faster invoicing, cleaner VAT reconciliation, better cash flow visibility, dispute-resistant cleared invoices — are real and meaningful.
If you are unsure where your business stands, the most practical first step is a straightforward compliance assessment: where are you today, what wave are you in, and what does implementation actually look like for your specific situation?
That is exactly the conversation our team at Maas Consult is set up to have.
Work With Maas Consult on ZATCA Phase 2
Maas Consult Middle East Co. has supported over 800 businesses in achieving ZATCA e-invoicing compliance across Saudi Arabia. We implement ERPNext and Odoo with full Phase 2 integration as a core part of every Saudi Arabia deployment.
Whether you are approaching your wave deadline, replacing a non-compliant system, or starting a fresh ERP implementation, we can assess your situation and build a realistic path to compliance.
Request a ZATCA Phase 2 Compliance Assessment →
Explore our ERP and Compliance Services →© 2026 Maas Consult Middle East Co. | Riyadh, Saudi ArabiaThis article is provided for informational purposes. Regulations may be updated — always verify current requirements at zatca.gov.sa or consult a qualified compliance specialist.
