Every Saudi ERPNext system we run comes with the Fatoora integration built in, at no extra charge. You generate a one-time code in ZATCA's Fatoora portal; we do the rest — the certificate request, ZATCA's compliance checks, going live, and watching every invoice after that.
Wave 25 businesses must be connected by 1 February 2027.
ZATCA brings businesses in by waves, set by VAT-taxable revenue. Enter your highest yearly revenue from 2022 to 2025 to see where you stand, and by when.
What ZATCA has announced
A guide built on the wave criteria ZATCA had published by October 2026, not a ruling. Your official date is the one in ZATCA's notice to you.
— until the deadline
Wave 25 covers every business whose VAT-taxable revenue went above SAR 187,500 in any year from 2022 to 2025. There is time if you start early: every unit that issues invoices passes ZATCA's compliance checks before it goes live.
Wave 25. Connect your system by 1 February 2027.
It depends on who it's for. A standard tax invoice to a business is cleared by Fatoora before the buyer receives it; a simplified invoice to a consumer is handed over at once and reported within 24 hours. Your system knows which is which, and acts on its own.
Your accountant submits it as today — no new step.
The system builds the XML ZATCA requires, applies the cryptographic stamp and adds the QR code.
ZATCA validates and clears it before it goes anywhere.
Only a cleared invoice reaches your customer.
The system sends it to Fatoora in the background.
At the till, with its QR code, the moment they pay.
Connecting is a chain of technical steps with ZATCA. One of them needs you; the rest are ours, and we tell you as each one is done.
In the Fatoora portal, generate a one-time code for each unit that issues invoices: the system, and each POS terminal. A code lasts an hour, so we agree the time first.
The system creates the unit's keys and sends the certificate request (CSR) with your code, and ZATCA issues a compliance certificate.
Sample invoices, credit notes and debit notes go through ZATCA's own checks until every one passes.
ZATCA issues the production certificate. From the next invoice on, tax invoices are cleared and simplified ones reported, automatically.
We renew each unit's certificate before it expires, and connect every branch or POS terminal you add the same way.
Phase 2 isn't an add-on we sell you. It's in every Saudi system we run, with everything ZATCA requires and everything you'll need once you're connected.
It does if your VAT-taxable revenue went above SAR 187,500 in any year from 2022 to 2025: that is Wave 25, which must be connected by 1 February 2027. Above SAR 375,000 in 2022, 2023 or 2024 puts you in Wave 24 or earlier, whose window closed on 30 June 2026. No wave after 25 has been announced yet, and ZATCA notifies each business at least six months before its date.
Phase 1 (generation) has applied to every VAT taxpayer since 4 December 2021: invoices from a compliant electronic system, with the required fields and a QR code on simplified invoices. Phase 2 (integration) has been rolling out in waves since 1 January 2023: your system connects to ZATCA's Fatoora platform and issues invoices as XML with a cryptographic stamp, a QR code and extra fields.
A standard tax invoice (to a business or a government body) goes to Fatoora to be cleared before the buyer receives it. A simplified invoice (to a consumer) is handed over at once and reported within 24 hours. Your system picks the route for each invoice automatically.
Almost one thing: sign in to the Fatoora portal and generate a one-time code (OTP) for each unit that issues invoices. We send you the steps and tell you how many codes you need; then we handle the certificate request, the compliance checks and going live. When a certificate is renewed or a unit is added, we ask you for a fresh code.
The system or device that issues invoices — your ERPNext system itself, or a POS terminal in a branch. Each unit has its own one-time code and its own certificate with ZATCA.
Not once it has been cleared or reported. It's corrected with a credit or debit note, which goes to ZATCA too. Your accountant creates it from the original invoice, inside the system.
Yes. POS sales are simplified invoices, and they must be reported. Each POS terminal is an invoicing unit we connect the same way as the system, and its invoices are reported automatically.
Invoices queue and are resubmitted automatically when Fatoora is back, and you can see each invoice's status in your system. We follow up on any that stay stuck.
ZATCA starts with a warning and a period to put things right; fines for repeated violations can reach SAR 50,000. Either way the fix is the same: connect your system now. For the official detail, see ZATCA's website.
ZATCA doesn't approve e-invoicing providers. It publishes a guiding list of providers, which it describes as not legally binding on taxpayers and not an approval by ZATCA. What we can say precisely: the integration in your system is built to ZATCA's published Phase 2 technical requirements, and each of your invoicing units passes ZATCA's own compliance checks during onboarding.
