Skip to content
ISO 27001 CERTIFIED
HomeSaudi Arabia / ZATCA Phase 2 integration for Saudi businesses
Saudi Arabia · ZATCA Fatoora

ZATCA Phase 2 integration for Saudi businesses

We connect the ERP, POS or custom systems you already run to the ZATCA Fatoora platform: structured XML, cryptographic stamp, UUID, QR, clearance and reporting, as applicable to the invoice type and the current ZATCA specification, tested in the sandbox and supported after go-live.

ZATCA integration is an engineering job, not a software purchase. Phase 2 requires your invoicing system to generate invoices in the approved structured XML format, stamp them cryptographically, chain them by hash, carry a UUID and QR code, and either clear them with the Fatoora platform in real time (standard, B2B invoices) or report them within the allowed window (simplified, B2C invoices), as applicable to the invoice type and the current ZATCA specification. Most Saudi businesses already have a system that produces invoices; the work is getting correct data out of it and into ZATCA’s API.

PluginZ Solutions does exactly that. We are not an accredited solution reseller with a product to push: we build or integrate the compliant invoicing component for the systems you have, whether that is a packaged ERP, a retail POS, or software written for you years ago. Our own bilingual ERP platform, Ops360, carries the same invoicing logic in production.

As of September 2026, Wave 25 brings businesses with VAT-subject revenue above SAR 187,500 in any year from 2022 to 2025 into the integration phase, with a deadline of 1 February 2027. That is a wide net, and the sandbox testing takes longer than most teams expect, so starting now is the sensible move.

Scope

What we deliver in Saudi Arabia

Wave and readiness assessment

We confirm which integration wave and deadline apply to you, then assess your ERP, POS and custom systems for the fields, sequencing and document types ZATCA requires.

Compliant invoice generation

Structured XML for standard and simplified invoices, credit notes and debit notes, with UUID, invoice counter, previous invoice hash, cryptographic stamp and QR generated inside your system, as applicable to the invoice type and the current ZATCA specification.

Fatoora platform integration

Device onboarding with the compliance and production CSIDs, clearance API calls for standard invoices, reporting API calls for simplified invoices, and handling of warnings, rejections and retries.

Sandbox testing and edge cases

Full test runs in the ZATCA sandbox including credit notes, partial returns, multi-currency, prepayments and zero-rated lines, before anything touches production.

POS and multi-branch setups

Per-device onboarding, offline queuing for simplified invoices with reporting within the window, and branch-level reconciliation for retail and hospitality groups.

Go-live and ongoing support

Production cut-over, monitoring of rejections, certificate renewals, and support for ZATCA rule changes under a retainer with named engineers.

ZATCA Phase 2 status

Wave 25 pulled most Saudi businesses into scope

ZATCA rolls out the integration phase in waves by revenue. Each wave requires direct integration with the Fatoora platform rather than just a compliant invoice format. Earlier waves are live and enforced; the newest wave reaches down to businesses that most people would call small, which means the technical work is no longer optional for the bulk of the VAT-registered market.

Wave 25 criterion: VAT-subject revenue above SAR 187,500 in any year from 2022 to 2025
Wave 25 integration deadline: 1 February 2027
Standard (B2B) invoices: clearance through the Fatoora API before issue
Simplified (B2C) invoices: reporting to Fatoora within the allowed window
Structured XML, UUID, hash chain, cryptographic stamp and QR code, as applicable to the invoice type and the current ZATCA specification

Status as of September 2026. ZATCA announces new integration waves regularly and criteria can change; we verify the exact wave, deadline and technical requirements that apply to you before any work is scoped.

Read the Wave 25 deadline guide
How a ZATCA project runs

Assess, integrate, test in the sandbox, go live

Assessment in days, not months

A short paid assessment confirms your wave, maps your systems and produces a fixed-scope integration proposal.

Fixed scope and price

Integration is quoted per system and per document type, with milestone payments tied to sandbox sign-off and production go-live.

No rip-and-replace

We keep the ERP or POS you have wherever it can produce compliant data. Replacing a working system to meet a deadline is the expensive option.

Arabic and English invoices

Bilingual invoice layouts and QR presentation handled as standard, including the Arabic fields ZATCA expects.

Working hours aligned with Riyadh

Sandbox runs, cut-overs and support inside your business day; Cairo is zero to one hour behind Riyadh, depending on daylight saving time, so working hours overlap strongly.

Secure by design

Certificates, private keys and API credentials handled by a team certified to ISO/IEC 27001:2022, with the same care we apply to banking integrations.

FAQ

Questions about this service in Saudi Arabia

ZATCA assigns waves by VAT-subject revenue. As of September 2026, Wave 25 covers businesses whose revenue exceeded SAR 187,500 in any year from 2022 to 2025, with an integration deadline of 1 February 2027. Earlier waves with higher thresholds are already live and enforced. Confirming your wave and deadline is the first step of every engagement, because ZATCA announces new waves regularly.

Let's talk

Ready to check your ZATCA readiness?

Book a 30-minute call. We confirm your wave, review your systems and come back with next steps and an assessment outline, usually within one business day.