ZATCA E-Invoicing Phase 2: The Complete Guide for Businesses

The complete guide: your safe path to Phase 2 of e-invoicing in Saudi Arabia (2025)

Feeling anxious about terms like “integration,” “XML” or “Wave 16”? You're not alone. Thousands of business owners, from small shops to large enterprises, are in the same state of anticipation. Change is always unsettling, especially when it involves your money, your business's reputation and your relationship with the Zakat, Tax and Customs Authority (ZATCA).

In this extensive, detailed guide from Kashierapp, we won't just list dry regulations. We'll walk you through it step by step, demystify Phase 2 and explain in simple, human terms how to turn this “technical challenge” into an opportunity to put your business in order, and how Kashierapp can be the partner that lifts this heavy burden off your shoulders, so you can focus on what you do best: growing your business.

The story from the beginning: why all this change?

Before we talk about fines and dates, let's understand the “why.” Since the beginning of 2023, Saudi Arabia has been going through a historic transformation of its financial system. The goal isn't to complicate merchants' lives; quite the opposite. The goal is to create a fair, clean business environment.

In the past, paper or handwritten invoices were a back door for manipulation, the shadow economy and unfair competition. The compliant merchant paid tax, while the tax-evading competitor next door sold for less because he paid nothing! Phase 1 (Generation and storage) came along to abolish paper ledgers. Now Phase 2 (Integration) makes the process “live and direct.” It aims to connect every sale made anywhere in Saudi Arabia to a single, unified central platform, to make sure everyone plays by the same rules.

So what is the essence of “Phase 2”?

Put very simply: your cashier device becomes a fluent “conversation partner” for ZATCA's systems. In Phase 1, you only had to issue an e-invoice and store it on your device. Now your device must be able to connect to the internet and send that invoice to ZATCA's platform (the Fatoora platform) in a complex technical format, so it can be cleared or recorded.

The roadmap and key dates (2025 updates)

The question on everyone's mind: “When is it my turn?” ZATCA has been very smart in rolling out the system: it didn't apply it to everyone at once, to avoid disrupting the market. It started with billion-riyal companies and worked its way down.

Here is the detailed, precise timeline, especially if you own a small or medium-sized business, because 2025 is your year:

We've already passed the large waves, and now we're at the heart of the waves that reach the backbone of the market:

1. Previous waves (for context): These covered companies with revenues above SAR 3 billion, then SAR 500 million, all the way down to SAR 10 million at the end of 2024. These businesses are already required to comply.

2. The big, very important surprise (Wave 16):

   • Who? Every business whose taxable revenue exceeded just SAR 350,000 (in 2022 or 2023).

   • What does this mean? It means most stores, large grocery stores, restaurants and small service businesses now fall within the mandate.

   • When does integration start? From April 1, 2025.

   • Our advice: Don't underestimate this figure. SAR 350,000 in annual revenue (not profit) is a figure most businesses reach easily. Review your sales right away!

3. Wave 18:

   • Who? Businesses whose revenue exceeded SAR 2 million (in 2022 or 2023).

   • When does integration start? Before August 31, 2025.

How do you know if you're targeted? ZATCA doesn't leave you guessing. It will notify you by email or text message at least 6 months before your mandatory date. But waiting for that message is a risk. Start preparing now with Kashierapp so you're ready ahead of everyone else.

What do they require from you technically? (A simple explanation of complex requirements)

When you read the regulations, you'll come across technical terms that might give you a headache, such as XML, UUID and Hash Chain. Let us at Kashierapp simplify them for you. Our system handles them on your behalf, but you have every right to understand them:

1. The language invoices speak (XML)

Imagine sending a message to a friend who speaks only one particular language. ZATCA doesn't read invoice “images” or Word files. It reads a technical language called XML.

• What's required: Your system must convert the invoice the customer sees into an XML file in the background and send it to ZATCA.

• The solution: With Kashierapp, you see a normal invoice, and the system handles the “translation” behind the scenes.

2. The PDF/A-3 format (smart embedding)

Because people can't easily read XML, ZATCA requires a hybrid format called PDF/A-3.

• What is it? A regular PDF file you can read with your own eyes, with the digital XML file embedded inside it.

• The benefit: The customer reads the invoice, while companies' systems read the embedded code.

3. The digital signature (your business's fingerprint)

How does ZATCA make sure an invoice was really issued by you, and not by a “hacker” or a competitor using your name?

• Through a “digital signature”: an encrypted code added to the invoice that proves your identity.

4. Hash chain: protection against tampering

This is the “lock” that prevents tampering.

• How does it work? Every invoice you issue contains part of the data from the invoice before it. Invoice no. 5 contains the fingerprint of invoice no. 4.

• The result: If you try to delete invoice no. 4, the system will immediately detect that the chain is broken at invoice no. 5. This makes tampering with sales technically impossible.

5. The QR code

In Phase 2, the QR code isn't decoration, and it isn't there to open your website. It contains encrypted data summarizing the invoice, and ZATCA's inspector app is the only one that can read its details and verify it instantly.

Simplified invoice vs. tax invoice: which one do you issue?

In Phase 2, the world splits into two halves, and each half is handled in a fundamentally different way:

Type 1: the simplified tax invoice (B2C)

• The scenario: A customer walks into your store, buys an item, pays and leaves.

• For whom? End consumers (individuals).

• The procedure: You issue the invoice immediately and hand it to the customer. There's no need to wait for real-time approval from ZATCA.

• Integration: Your system must send these invoices to ZATCA within 24 hours of issuing them.

• Key condition: It must contain a QR code.

Type 2: the tax invoice (B2B)

• The scenario: You sell goods to another company or to a government entity.

• For whom? Businesses and organizations (the buyer's VAT registration number must be recorded).

• The procedure (very important): Here the “clearance” system applies. You may not hand the invoice to the buyer until it has been sent to the platform and received ZATCA's “stamp” and approval.

• Integration: It happens instantly (in real time).

The nightmare of fines, and how to avoid them smartly

Let's be frank: fines are the biggest worry. ZATCA doesn't take them lightly, because this is about market fairness and public funds. Here are the “painful” details of the fines, so you know the size of the risk and how Kashierapp helps you avoid it:

Fines for direct e-invoicing violations:

1. Not issuing invoices electronically:

   • Still using handwritten invoices? The fine starts at SAR 5,000 and increases with repeat violations.

2. Not storing invoices:

   • Lost your data? Hard drive failed? Not having an electronic archive exposes you to a fine starting at SAR 5,000. (That's why cloud storage in Kashierapp is a necessity, not a luxury.)

3. Tampering with invoices (deleting and editing):

   • Deleted an invoice after issuing it? The fine is SAR 10,000. The law doesn't allow deletion; it only allows a proper “return.”

4. QR code problems:

   • Issuing a simplified invoice without a valid QR code: a warning first, then a fine of SAR 10,000.

5. Not reporting malfunctions:

   • Internet went down and you didn't notify ZATCA? A warning, then SAR 10,000.

The harshest fines (VAT law violations):

These fines apply if an invoice error leads to errors in your tax returns:

• Tax evasion: A fine of up to 3 times the value of the goods!

• Issuing an invoice by an unregistered person: A disastrous fine of up to SAR 100,000.

• Obstructing ZATCA employees: If you prevent an inspector from examining the system, the fine can reach SAR 50,000.

The bottom line: The cost of subscribing to approved, reputable software like Kashierapp is negligible compared with a single fine you might pay because of a simple mistake.

Why choose Kashierapp?

Amid all this complexity, you need a partner who “gets you” and takes this burden off your shoulders. That's where Kashierapp comes in. We didn't design software just for accountants; we designed it for business owners who want to succeed.

Here's how we make your life easier:

1. Automatic compliance (we follow the regulations for you)

There's no need to read every update ZATCA issues. Our technical and legal team updates the system immediately and free of charge to meet any new requirement. You just sell, and we make sure your invoices are compliant.

2. Goodbye to technical complexity

Integration with the “Fatoora” platform takes just a few simple steps in Kashierapp and is done in minutes. You don't need a software engineer. The interface is easy, intuitive and in Arabic, designed so any cashier can pick it up quickly.

3. Works even when the network goes down (offline mode)

Internet down? Don't stop selling! Kashierapp is smart: it detects the outage, saves and encrypts invoices locally on your device, and as soon as the connection is back, it automatically “syncs” the data and sends it to ZATCA. You're fully protected from late-reporting fines.

4. More than just invoices (a mini ERP)

• Inventory management: See remaining quantities, spoilage and shortages at the press of a button.

• Reports for decision-making: Find out which products are “best sellers” and which are “slow-moving.” Know your peak hours.

• Staff management: Monitor each salesperson's performance and calculate their commissions accurately.

5. Solutions that fit your budget

We know small businesses need support. That's why we offer flexible plans and real technical support (not just automated replies) that stands by you whenever you need help.

A practical guide: how to prepare today (checklist)

Don't put off preparing until tomorrow. Start now with these practical steps:

1. Check your revenue: Review your 2022 and 2023 financial statements. Did you exceed SAR 350,000? Then get ready for April 2025.

2. Update your details: Log in to ZATCA's portal and make sure your mobile number and email address are correct so you receive notifications.

3. Retire old systems: If your current system doesn't support cloud updates, it's time for a change.

4. Subscribe to Kashierapp: Contact us, try the free version and see for yourself how easy it is.

5. The onboarding stage:

   • We'll help you log in to the Fatoora platform.

   • Generate an OTP code.

   • Connect your cashier device to the platform in minutes.

6. Train your team: Remind your staff: “No deleting, use returns only” and “Make sure the internet is connected.”

Questions on your mind about Phase 2

Here we answer the questions we hear from our customers every day:

Q: Can I edit an invoice if an employee makes a mistake? A: No. In the world of e-invoicing, the “Edit” and “Delete” buttons are gone. The legal solution is to issue a credit note to cancel the incorrect invoice, then issue a new, correct one. This preserves the numbering sequence and the integrity of your records.

Q: What if the customer is a company but refuses to give me its VAT number? A: In that case, treat the transaction as B2C (individuals) and issue a simplified invoice, unless the invoice value is very large and exceeds a certain threshold. In that case you should insist on getting the details, to protect your right, and theirs, to deduct the tax.

Q: Does Kashierapp work on mobile? A: Yes. Kashierapp is a cloud system, so you can access the dashboard from any browser (laptop, phone or tablet). The point of sale (cashier screen) is designed to run smoothly on tablets and dedicated cashier devices (such as Sunmi).

Q: Is my data secure? A: We use bank-grade encryption protocols to protect your data. More importantly, we make regular backups. You won't lose your data because of a device failure or a virus, because it's stored in the cloud.

Q: Is this system mandatory for online stores? A: Yes, absolutely. Online stores are required to integrate just like physical shops. Kashierapp offers solutions for connecting online sales to the unified invoicing system.

Conclusion: don't let fear hold you back

Change is hard, yes. And there are a lot of regulations, true. But look at the bright side: organizing your accounts will let you see your business more clearly. You'll know your real profits and leave bookkeeping chaos behind.

At Kashierapp, we're not just a “software vendor”; we're your partner on this journey. Our goal is for you to sleep soundly, confident that your invoices are correct, your legal standing is 100% sound and you're ready to welcome any ZATCA inspector with a smile and confidence.

Are you ready to join the future? Don't wait until the last minute and risk fines.

📥 [Download the quick guide now as a PDF from Kashierapp to print and share with your team] 📞 [Book a free consultation with our e-invoicing expert] 🚀 [Start your 14-day free Kashierapp trial - no credit card required]