✓ GIGAPOS Phase 2 Compliant
ZATCA E-Invoicing
Complete Guide & Compliance Requirements
This page explains how GIGAPOS supports the e-invoicing requirements of the Zakat, Tax and Customs Authority (ZATCA), and clarifies responsibilities between the software and merchant with full transparency.
Last updated: 2026-04-13
1 What is E-Invoicing?
E-invoicing is a procedure aimed at converting the issuing of paper invoices into an electronic process that allows exchange and processing of invoices in a structured format between buyer and seller. It is mandatory for all taxpayers subject to VAT in the Kingdom of Saudi Arabia.
This process is supervised by the Zakat, Tax and Customs Authority (ZATCA) through the Fatoora Platform, requiring all establishments to issue electronic invoices that meet specific technical requirements.
2 ZATCA Two Phases
ZATCA divided e-invoicing implementation into two phases:
✓ Active
📝 Phase 1 — Generation
Started December 4, 2021. Invoices must be issued and stored electronically in structured format, with QR codes on simplified invoices.
QR Code
UUID
Hash
Secure storage
✓ Active
🔗 Phase 2 — Integration
Started January 1, 2023 (in waves). Requires direct integration with the Fatoora platform to clear tax invoices for approval, or report simplified invoices within 24 hours.
XML / UBL 2.1
CSID
Digital Signature
API
3 GIGAPOS Compliance
GIGAPOS is fully compliant with Phase 2 of e-invoicing, providing merchants with all tools needed to issue legally compliant invoices and integrate directly with the Fatoora platform.
- Automatic generation of UUID, QR code, and hash for every invoice
- Digital signing using CSID certificate issued by ZATCA
- Direct submission of invoices to Fatoora in XML format (UBL 2.1)
- Status tracking for each invoice (Cleared / Rejected / Warning)
- Secure archiving of electronic invoices with tamper-resistance
4 Technical Features Supported
GIGAPOS supports all technical requirements set by ZATCA in the XML Implementation Standard and application rules:
QR
QR Code (TLV/Base64)
5 mandatory fields for simplified invoices
ID
UUID v4
Unique identifier per invoice
#
Invoice Hash (SHA-256)
Chained hashing of all invoices
XM
XML / UBL 2.1
ZATCA official format
🔐
CSID
Cryptographic Stamp ID
✍
Digital Signature
ECDSA / SHA-256
PA
PIH / ICV chain
Sequential invoice counter
API
Fatoora API Integration
Compliance + Reporting + Clearance
5 Supported Invoice Types
- Tax Invoice (B2B) — For business-to-business transactions — requires Clearance from ZATCA before sending to customer.
- Simplified Tax Invoice (B2C) — For business-to-consumer transactions — reported to ZATCA within 24 hours of issuance.
- Credit Note — For returns and price reductions.
- Debit Note — For price increases.
- Prepayment Invoices
- Export Invoices
6 Integration Steps with ZATCA
Integration is simple and takes less than 5 minutes if your data is ready:
-
Login to Fatoora Platform
Login to fatoora.zatca.gov.sa using your ZATCA account, and ensure the "E-Invoicing Solutions" tab is activated.
-
Generate OTP Code
From Fatoora, generate an OTP code to register your e-invoicing solution (GIGAPOS). The code is valid for a short period only.
-
Enter OTP in GIGAPOS
Open GIGAPOS → Settings → E-Invoicing → Enter OTP. The system will automatically: Generate CSR → Request CSID from ZATCA → Securely store certificate.
-
Issue Test Invoice
After successful integration, issue a test invoice to confirm successful submission to ZATCA and receipt of Clearance approval or Reporting confirmation.
-
Start Live Operation
You can now issue all invoices from GIGAPOS and they will be automatically sent to ZATCA. Track each invoice status from the dashboard.
7 Responsibilities — GIGAPOS vs Merchant
ZATCA compliance is a shared responsibility, but legal obligation falls on the merchant as the registered taxpayer:
✓ What GIGAPOS Provides
- Software compliant with ZATCA technical requirements
- Automatic generation of all mandatory fields
- Secure integration with Fatoora via API
- Ongoing updates when ZATCA requirements change
- Technical support to assist with integration
- Secure invoice archiving on merchant device
⚖️ Merchant Responsibilities
- Register with ZATCA and obtain a valid TIN
- Enter correct establishment data in GIGAPOS
- Provide stable internet connection for the device
- Review invoices before issuance to verify data accuracy
- Maintain backups of invoices
- Submit tax returns on time
- Contact ZATCA for any legal questions
8 Important Disclaimer
⚠️ Please read carefully
GIGAPOS is software to assist the merchant in complying with e-invoicing requirements, but it does not replace the merchant's legal responsibility toward the Zakat, Tax and Customs Authority.
Fines, tax obligations, and legal liabilities fall entirely on the merchant. GIGAPOS and the developer (High Speed IT Establishment) bear no financial responsibility for: internet outages at merchant premises, delayed invoice submissions due to merchant device issues, or incorrect data entered by users.
Merchants should regularly review the official ZATCA website for any updates to regulations and requirements.
9 Frequently Asked Questions
Is GIGAPOS officially Phase 2 compliant?
+
Yes, GIGAPOS is built according to ZATCA Phase 2 technical specifications, supports Fatoora platform integration, CSID issuance, and digital invoice signing. We recommend checking ZATCA's certified solutions list to confirm.
Do I need constant internet to issue invoices?
+
Tax invoices (B2B) require internet connection to send to ZATCA before delivering to customer. Simplified invoices (B2C) can be issued offline and reported to ZATCA within 24 hours when internet returns. GIGAPOS stores them locally and auto-submits upon connection.
What happens if internet is down and invoice isn't sent in 24 hours?
+
This delay may expose the merchant to ZATCA violations. We recommend a backup internet (e.g., mobile data). GIGAPOS stores invoices locally and auto-retries when internet returns, but legal responsibility lies with the merchant.
Do I need an accountant or technician to integrate GIGAPOS with ZATCA?
+
No. The integration process is designed to be very easy. You just need an OTP code from the Fatoora platform (takes 2 minutes), and enter it in GIGAPOS. The system does the rest automatically. Our support team is available if needed.
What if ZATCA rejects a specific invoice?
+
GIGAPOS shows ZATCA's rejection message directly with reason (e.g., wrong VAT, missing field). You can correct and resubmit. Tax invoices cannot be delivered to customer before ZATCA acceptance.
How long is the CSID certificate valid?
+
The CSID certificate is valid for one full year from issuance. GIGAPOS automatically notifies you before expiry with enough time to renew without service interruption.
Does GIGAPOS save my invoices in the cloud?
+
Desktop version (GIGAPOS Pro / Lite) stores invoices locally on your device in a secure, immutable manner. GIGAPOS SAAS cloud version stores them on secure servers. In both cases, data is encrypted and compliant with ZATCA archiving requirements.
10 Official Links
For official requirements and updates directly from ZATCA: