ZATCA E-Invoicing in Saudi Arabia: PoS Compliance Requirements

Understanding ZATCA E-Invoicing Phases#

The Zakat, Tax and Customs Authority (ZATCA) rolled out e-invoicing in two phases. Phase 1 (Generation Phase), effective December 2021, required all VAT-registered businesses to generate electronic invoices and credit/debit notes using a compliant system — no more handwritten or basic Word/Excel invoices. Phase 2 (Integration Phase) began in January 2023 and is being rolled out in waves based on revenue thresholds, with progressively smaller businesses brought into scope over successive waves. Phase 2 requires businesses to integrate their invoicing systems with ZATCA's Fatoora platform so that invoices are transmitted for validation and clearance in near-real-time. For B2B transactions, the invoice must be cleared by ZATCA before it is shared with the buyer. For B2C transactions (simplified tax invoices), the invoice is reported to ZATCA within 24 hours. The technical requirements are specific: invoices must be generated in UBL 2.1 XML format, each invoice must carry a universally unique identifier (UUID), and a cryptographic stamp using a ZATCA-issued digital certificate must be embedded. A QR code containing the seller name, VAT number, timestamp, invoice total, and VAT amount must appear on every simplified invoice. Non-compliance triggers penalties starting at SAR 5,000 for the first offence and escalating to SAR 50,000 for repeat violations, making PoS compliance a financial imperative rather than a bureaucratic formality.

What Your PoS Must Do Differently Under Phase 2#

Most PoS systems sold in Saudi Arabia before 2021 were designed to print receipts and track sales — they were not built to generate structured XML documents, apply cryptographic signatures, or communicate with an external government API. Phase 2 changes the fundamental architecture of what a PoS must do. First, the system must generate invoices in the UBL 2.1 XML schema prescribed by ZATCA, with all mandatory fields populated: seller and buyer details, line items with individual VAT treatment, totals, and the invoice type code distinguishing standard from simplified invoices. Second, the PoS must apply a cryptographic stamp to each invoice using a digital certificate issued by ZATCA through their onboarding portal. This stamp proves the invoice was generated by a registered system and has not been tampered with after issuance. Third, the system must generate a compliant QR code and embed it in the printed or digital invoice. Fourth, for Phase 2, the PoS must transmit the invoice to ZATCA's Fatoora platform via API and handle the response — including clearance approval for B2B invoices or acknowledgement for B2C invoices. If the API returns an error, the PoS must flag the invoice for correction rather than allowing the transaction to proceed with a non-compliant document.

Configuring Tax Treatment for Saudi VAT Scenarios#

Saudi VAT is 15 percent on most goods and services, but ZATCA's e-invoicing schema requires granular tax treatment at the line-item level. Each line on the invoice must specify whether it is subject to standard-rate VAT, zero-rated, exempt, or out of scope, along with the corresponding tax category code from ZATCA's codelist. A convenience store selling bottled water (standard rate), exported goods (zero-rated), and collecting municipality fees (out of scope) needs the PoS to apply different tax treatments within a single transaction. Miscategorising a line item does not just produce an incorrect tax total — it triggers a validation error when the invoice is submitted to ZATCA, which rejects invoices with inconsistent tax calculations. The PoS product catalogue must therefore include a tax-category field for every SKU, and the system must calculate VAT per line item rather than applying a blanket rate to the invoice total. Discount handling adds complexity. ZATCA requires discounts to be reflected at the line-item level and included in the taxable-amount calculation. A buy-two-get-one-free promotion must show the discount on the relevant line item with the VAT calculated on the net amount after discount. Flat invoice-level discounts must be allocated proportionally across line items. AskBiz pre-configures these tax rules for Saudi retailers, so every transaction produces a ZATCA-valid invoice without requiring the cashier to understand XML schemas or tax category codes.

Handling Offline Scenarios and API Failures#

Internet connectivity is not guaranteed in every Saudi retail location, and ZATCA's Fatoora platform experiences occasional downtime. A PoS that cannot process sales when the API is unreachable is a PoS that costs the business money. ZATCA's technical guidelines acknowledge this reality and allow for offline invoice generation with deferred reporting. The PoS must still generate a fully compliant invoice locally — complete with UUID, cryptographic stamp, and QR code — and queue it for transmission when connectivity resumes. The key requirement is that the invoice must not be altered between generation and transmission; the cryptographic stamp ensures integrity. However, the window for deferred reporting is limited. Simplified invoices (B2C) must be reported within 24 hours, and standard invoices (B2B) must be cleared before delivery to the buyer. A PoS that queues invoices offline for days without attempting retransmission risks crossing these deadlines. The system should implement automatic retry logic — attempting to transmit queued invoices every few minutes when connectivity returns — and alert the operator when invoices have been queued beyond a configurable warning threshold. For Saudi retailers in areas with unreliable internet, a dual-connectivity approach using both fixed broadband and mobile data as failover is worth the additional cost given the penalty structure for late reporting.

Preparing for Future ZATCA Waves#

ZATCA continues to expand Phase 2 coverage to smaller revenue brackets. Businesses not yet in scope should prepare now rather than scrambling when their wave arrives. Preparation means three things. First, ensure your PoS vendor has confirmed ZATCA Phase 2 compliance and can demonstrate successful integration with the Fatoora platform — ask for their ZATCA compliance certificate, not just a marketing claim. Second, clean up your product catalogue. Every SKU needs a correct tax category, accurate pricing, and a proper description. ZATCA validation rejects invoices with missing or malformed product data, so catalogue hygiene is a prerequisite for compliance, not a nice-to-have. Third, register for a ZATCA digital certificate through the Fatoora portal and complete the onboarding process, which includes generating a Certificate Signing Request from your PoS and receiving the signed certificate that enables cryptographic stamping. This process can take days to weeks depending on ZATCA processing times, so starting early avoids a last-minute scramble. AskBiz handles ZATCA onboarding as part of its Saudi Arabia setup flow, guiding retailers through certificate registration, product catalogue configuration, and API integration testing so that when their wave arrives, the switch to Phase 2 is a configuration change rather than a system overhaul.