Finance
Compliance & ZATCA
KSA e-invoicing (Fatoora) Phase 1 and Phase 2 compliance.
What ZATCA e-invoicing is
In the Kingdom of Saudi Arabia, the Zakat, Tax and Customs Authority (ZATCA) mandates electronic invoicing, known as Fatoora. VAT-registered businesses must issue invoices in a defined electronic format rather than as free-form PDFs or paper. GrivaOne generates these e-invoices for you as part of the normal sales cycle.
Phase 1 — Generation
Phase 1 requires that every tax invoice is generated and stored electronically and carries the required fields. For simplified (B2C) invoices this includes a QR code encoding the seller name, VAT number, timestamp, invoice total and VAT amount. GrivaOne produces the QR code automatically on each finalised invoice.
Phase 2 — Integration
Phase 2 connects your system directly to ZATCA. Invoices are produced as structured UBL XML, cryptographically signed, and either cleared or reported through ZATCA's platform depending on the invoice type.
| Invoice type | Model | When |
|---|---|---|
| Standard (B2B) | Clearance | Cleared by ZATCA before being sent to the buyer |
| Simplified (B2C) | Reporting | Reported to ZATCA within 24 hours of issue |
Onboarding
Before Phase 2 invoices can flow, each device or solution unit is onboarded with ZATCA:
- Generate a certificate signing request (CSR) for the company.
- Enter the one-time password (OTP) from the ZATCA (Fatoora) portal to obtain a compliance certificate.
- Pass the compliance checks, then request the production certificate (CSID) used to sign live invoices.
Onboarding uses real ZATCA credentials
Day-to-day
Once onboarding is complete, compliance is invisible in normal use: finalise an invoice and GrivaOne signs it, submits it for clearance or reporting, embeds the ZATCA QR and stamp, and stores the returned status. You can review each invoice's clearance/reporting status from the invoice itself.
VAT reporting is separate but related