alFatoraalFatora
Book a demo

Saudi Arabia · ZATCA

ZATCA Phase 2, from onboarding to clearance

Your systems stay as they are. One integration with alFatora Connect, and we carry Fatoora onboarding, in-Kingdom signing and sealing, submission to the authority — and every update it publishes.

Start nowPrice your volume
ValidateSealQRTransmit

The journey of one invoice — from your system to the authority’s acceptance.

Zakat, Tax and Customs AuthorityFatoora

Compatible with ZATCA Phase 2 e-invoicing requirements

Managed onboarding through the Fatoora portal

The hardest step of e-invoicing is the first one. Here it is a checklist that completes itself — you enter the OTP, we do the rest.

  1. Enter the OTPFrom your establishment’s own Fatoora portal — the only proof of representation we ask for.
  2. We generate the CSRThe key is born inside a certified HSM in the Kingdom and never leaves it.
  3. Compliance CSID and its checksWe obtain the compliance certificate and pass the mandatory checks for every invoice type you issue.
  4. Promotion to productionThe production CSID activates, production keys issue separately from sandbox — and you are ready to invoice.

Multi-branch, multi-device rollouts onboard in bulk: paste the list of OTPs and we onboard the whole fleet and manage its renewals.

Two invoice types, two flows, one platform

Tax invoice (B2B): clearance

Cleared in real time before it is shared with the buyer.

  • Clearance is real-time, and the result reaches your system as one notification
  • Sealed XML and QR payload in the result
  • Corrections are credit or debit notes referencing the original

Simplified tax invoice (B2C): reporting

Sealed instantly at the till — your customer holds a legally issued invoice on the spot — then reported to the authority immediately.

  • Synchronous, fast seal + QR at issuance
  • Reporting starts the moment of sealing — the 24-hour window is safety margin, not a schedule
  • Honest per-invoice status: sealed → awaiting report → reported

EGS units are our job, not your homework

ZATCA counts e-invoicing generation units, not branches. With us, the entire technical fleet — certificates, hash chains, counters — is a managed, invisible layer.

  • Tag each submission with your branch or device reference — that is all you need
  • Fleet size is our engineering decision, driven by your peak issuance
  • No per-unit pricing — the meter is accepted documents only
  • Renewal, revocation and expiry alerts handled for you

Saudi end to end

Keys in the Kingdom

Generated inside certified HSMs on Saudi soil, non-exportable by hardware — even we cannot extract them.

Data in the Kingdom

Sealed documents, the operational database, backups and analytics — all in-Kingdom for their whole lifetime; disaster recovery never leaves it.

A Saudi contract

You contract with a Saudi entity under Saudi law, and buyer data is handled under the Personal Data Protection Law.

Every signature visible to you

No human signing path exists at all, and every signature appears in your console traced to the submission that caused it.

Verified before the authority, checked before go-live

Verified against the authority’s tooling

Our sealing pipeline passes ZATCA’s official validation tooling byte-exact — signature check included.

The authority’s rules, before submission

Every invoice is validated against the e-invoicing rules before it leaves our platform — with clear per-field errors, not opaque codes.

Checked against official registries

VAT number and commercial registration are verified against official sources as the profile is typed — a mistake surfaces here, not on launch day.

Compliant on paper, too

For businesses without print tooling: a template editor where what is yours is customisable — logo, colours, type — while everything the authority mandates is locked and non-removable. A non-compliant design is impossible by construction.

  • Tax invoices as PDF/A-3 with the sealed XML embedded
  • 80mm thermal templates for simplified invoices
  • QR, VAT breakdown and the Arabic-first bilingual layout — locked zones
  • Send-to-buyer by email in the same submission
Your brand zonesLocked by the authority

Priced in riyals, with no monthly fee

Prepaid bundles in Saudi riyals: pick a volume and a validity, and the rate per cleared document falls with both. No monthly fee at any tier — a credit is spent only when the authority clears a document.

  • You pay only for cleared documents, and rejections never count
  • Free, unlimited sandbox
  • One Saudi Credit wallet pooled across your account’s Saudi companies
  • Bank transfer available at launch

Already integrated with someone else?

Switching is a managed migration, not a rebuild: we onboard fresh issuing units under our custody — exactly how the authority expects provider transitions — run in parallel with your current provider until you flip the traffic yourself, and import your document history so your analytics start with continuity. Show us your renewal quotation and we answer it with a preferential first-year offer.

Book a demo

Frequently asked questions

What is ZATCA Phase 2 (the Integration Phase)?

The second phase of ZATCA e-invoicing: invoicing systems connect directly to the authority’s systems, tax invoices are cleared before sharing and simplified invoices are reported within 24 hours. It applies to taxpayers in waves announced by ZATCA.

Do I need to produce UBL or sign anything myself?

No. You send one clean JSON invoice; we produce the required XML, sign it, seal it and submit it. No certificates and no cryptography are ever exposed to you.

What happens if the authority rejects an invoice?

Every rejection is investigated immediately. If the cause is ours we correct and resubmit it ourselves and you only see the final notification; if it is in your data we tell you exactly what to change. Rejected documents are never billed.

Where are my data and keys stored?

Entirely inside Saudi Arabia: keys in certified, non-exportable HSMs; documents, backups and analytics in-Kingdom for the full statutory retention period.

How does pricing work?

Prepaid bundles in riyals: choose a document volume and a validity, and the rate falls with both. Credits burn only on documents the authority accepts, and the sandbox is free without limits.

How long does the integration take?

Sandbox integration starts the same day — the profile validates as you type and test keys issue immediately. Production is one OTP and a checklist that completes itself; the overall timeline is set by your own system’s readiness.

Which Integration Phase wave am I in?

ZATCA announces the Integration Phase in waves and notifies each taxpayer ahead of its enforcement date. We publish every wave announcement as it lands on our ZATCA updates page. If you have received your notification, your date is already fixed — starting early turns the notice period into testing time instead of a scramble.

Start your Integration Phase today

Sandbox keys issue the moment your profile is complete, and production is one OTP away.

Zakat, Tax and Customs AuthorityFatooraCompatible with ZATCA Phase 2
e-invoicing requirementsStart now