Saudi Arabia · ZATCA (Zakat, Tax and Customs Authority)

    Fatoorah Phase 2 — Integration Phase

    Invoicemonk issues ZATCA Phase 2 compliant e-invoices in Saudi Arabia: UBL 2.1 XML signed with your CSID, embedded TLV QR and UUID, cleared through the Fatoorah portal for B2B and reported for B2C. Live since April 2024.

    ArtefactCSIDTransportDirect API integration with the ZATCA Fatoorah portalLive since2024Applies toAll VAT-registered businesses in Saudi Arabia
    What you get

    Built for Saudi Arabia from day one

    What ZATCA Phase 2 requires

    ZATCA Phase 2 (the Integration Phase) requires every VAT-registered business in Saudi Arabia to issue invoices as UBL 2.1 XML, sign them with a Cryptographic Stamp Identifier (CSID) issued by ZATCA, embed a TLV-encoded QR code, and either clear the invoice with ZATCA in real time (B2B Standard Tax Invoices) or report it within 24 hours (B2C Simplified Tax Invoices). The mandate rolled out in waves from January 2023 and now covers every VAT-registered seller.

    How Invoicemonk meets ZATCA Phase 2

    On invoice creation, Invoicemonk renders the UBL 2.1 XML, computes the invoice hash chain, signs the document with your CSID using XAdES, embeds the TLV QR (seller name, VAT number, timestamp, totals, hash) and the UUID, then submits it to the ZATCA Fatoorah portal — clearance for B2B Standard Tax Invoices, reporting for B2C Simplified Tax Invoices. The cleared invoice and ZATCA QR are bound to the PDF/A-3 download for the buyer. CSID onboarding (CSR generation, OTP, certificate retrieval) is handled inside the app.

    Who this applies to

    All VAT-registered persons in Saudi Arabia, regardless of turnover. B2B transactions follow the clearance model; B2C transactions follow the reporting model. Foreign sellers without a Saudi VAT registration are out of scope.

    Cryptographic artefacts, in every jurisdiction we cover

    Invoicemonk issues cryptographically signed structured invoices in every one of the 18 jurisdictions we cover, using the local artefact the tax authority requires:

    • CSID — ZATCA (Saudi Arabia)
    • IRN — GST India (NIC IRP), FIRS Nigeria, GRA Ghana
    • UUID — MyInvois Malaysia
    • QR + Control Unit Number — KRA eTIMS (Kenya)
    • Chave de Acesso — NF-e / NFS-e (Brazil)
    • Fiscal signature — ZIMRA FDMS (Zimbabwe)
    • XAdES digital signatures — Peppol (EU), MTD (UK)
    • ICP-Brasil A1 — Brazilian NF-e / NFS-e signing

    Each mandate page documents the local artefact, signing algorithm, certificate authority, and the spec section that requires it.

    FAQ

    Saudi Arabia e-invoicing, answered

    Saudi Arabia: compliant from day one

    CSID-signed XML cleared through the ZATCA Fatoorah portal in real time.

    Verified against authority specifications — sources reviewed View