ZATCA E-Invoicing Waves 18–22: The Complete Compliance Guide for Saudi Businesses (2026)

Here’s a comprehensive guide to compliance with ZATCA e-invoicing systems Waves 18-22, designed for Saudi businesses in 2026.

Saudi Arabia is keeping up its digital tax revolution with the implementation of ZATCA Phase 2 e-invoicing rules. With businesses in the Kingdom increasingly striving for full electronic invoicing compliance, the deployment of Waves 18–22 continues to be a key concern for businesses with VAT registration in 2026.

In order to enhance tax transparency, cut down on hidden transactions, and uniform invoice reporting throughout Saudi Arabia, the Zakat, Tax and Customs Authority (ZATCA) launched Phase 2 of its project, the Integration Phase. Within this framework, businesses will have to embed their invoicing systems directly into Fatoora and make sure that the invoices are created in an XML format that complies with it.

Building on the success of previous groups like Wave 16 of ZATCA e-invoicing and Wave 17 of ZATCA e-invoicing, the newer waves build on the scope of compliance, covering businesses with lower annual revenues and greater operational needs.

This is a comprehensive guide that will cover:

• ZATCA Waves 18–22 explained 
• Who is impacted and who is not impacted by the new regulations? 
• Reduce the number of deadlines and revenue thresholds. 
• Phase 2 technical requirements 
• In addition, integration with the ERP and Fatoora platform is included. 
• Penalties and waiver opportunities will be provided. 

Practices that ensure compliance with best practices. 

A business, big or small, even a small and medium sized enterprise (SME) in the Kingdom of Saudi Arabia, must be aware of these waves to ensure a smooth-running business and avoiding the big fees!

The students will receive information on the concepts of e-Invoicing and the requirements of ZATCA Phase 2 e-Invoicing.

It’s important to know the differences between Phase 2 and the initial rollout before jumping into Waves 18–22.

The initial phase (December 2021) focused on creating and electronically storing invoices. But it is necessary to go deeper into the system integration and real-time communication with the ZATCA infrastructure in Phase 2.

In Phase 2 businesses are required to:

• Seamlessly connect invoicing solutions to the Fatoora platform. 
• Create invoices in XML. 
• Show all required fields in an invoice. 
• Use cryptographic stamps and UUIDs 
• Clear the invoices and report on them. 
• Store invoices securely 
• Provide invoicing tamper protection 

In today’s digital era, businesses can no longer afford to stick with traditional PDF invoices or isolated accounting solutions. Businesses today require the complete E-invoicing solution that meets the requirements of the ZATCA and that can be connected with the ERP system.

This shift is especially crucial for companies with heavy transaction loads, numerous branches, or international operations.

ZATCA All Waves Timeline 2023–2026:

ZATCA introduced Phase 2 in multiple implementation waves to simplify adoption and reduce disruption for businesses.

Each wave targets businesses based on annual revenue thresholds. Companies exceeding the specified threshold are required to integrate their invoicing systems before the announced deadline.

The phased approach began with large taxpayers and gradually expanded toward medium and smaller businesses.

Earlier Waves Set the Foundation:

The previous waves established the technical and operational framework for integration compliance. Businesses that already complied with Wave 16 of ZATCA e-invoicing and Wave 17 of ZATCA e-invoicing typically experienced smoother transitions due to earlier ERP modernization and digital tax preparation.

These earlier waves highlighted several key challenges businesses faced:

• Legacy ERP limitations 
• XML invoice formatting errors 
• Delays in Fatoora API integration 
• Staff training gaps 
• Real-time reporting failures 

Organizations entering Waves 18–22 can learn significantly from these earlier implementations.

ZATCA Wave 18:

Who Is Included in Wave 18?

Wave 18 primarily targeted VAT-registered businesses with annual revenues exceeding the threshold announced by ZATCA for this group.

These businesses were required to complete their Phase 2 integration before the specified enforcement deadline.

Wave 18 was another significant step in Saudi Arabia’s e-invoicing Saudi Arabia compliance program, particularly for mid-sized companies that were only partially digitized.

Key Requirements for Wave 18:

Businesses included in Wave 18 had to:

• Connect ERP or invoicing software with the Fatoora platform 
• Generate compliant XML invoices 
• Include QR codes on simplified invoices 
• Apply cryptographic stamps 
• Use UUID identifiers 
• Enable invoice archiving and reporting 

Many companies underestimated the technical complexity involved in ERP integration, especially when operating older accounting systems.

ZATCA Wave 19:

Expansion Toward Broader Business Segments:

Wave 19 expanded compliance requirements to additional VAT-registered organizations with lower revenue thresholds.

As the implementation moved further into the SME sector, many companies realized their traditional accounting software lacked the ability to support real-time invoice clearance.

This increased demand for modern ZATCA e-invoicing systems that provide:

• Automated XML generation 
• API integration 
• Real-time invoice validation 
• Centralized compliance management 
• Multi-branch invoice synchronization 

Common Challenges Faced in Wave 19:

Businesses commonly struggled with:

• Incorrect invoice structures 
• Delayed onboarding 
• API connectivity issues 
• ERP customization requirements 
• Staff unfamiliarity with ZATCA regulations 

Companies that started preparation early experienced significantly fewer disruptions.

ZATCA Wave 20:

Increasing Compliance Pressure:

By Wave 20, Saudi Arabia’s digital tax ecosystem had become more mature and enforcement stricter.

ZATCA began focusing heavily on data accuracy, invoice authenticity, and reporting transparency.

Businesses affected by Wave 20 needed to ensure:

• Real-time invoice reporting 
• Secure invoice storage 
• Tamper-resistant invoice generation 
• Accurate VAT registered calculation 
• Consistent invoice sequencing 

Organizations operating across multiple locations particularly benefited from ERP-driven compliance management.

Why ERP Integration Became Essential:

As regulations evolved, manual invoicing processes became increasingly risky.

ERP integration offered businesses:

• Automated invoice workflows 
• Reduced compliance errors 
• Faster invoice validation 
• Centralized reporting 
• Improved audit readiness 
• Better VAT tracking 

Modern ERP systems also simplified Fatoora platform integration while reducing dependency on manual tax processes.

ZATCA Wave 21:

Compliance Expectations Continue to Rise:

Wave 21 further expanded the implementation framework and emphasized operational consistency.

Businesses could no longer treat e-invoicing as merely an accounting requirement. Instead, compliance became part of broader operational governance.

Companies needed systems capable of handling:

• Continuous invoice synchronization 
• Secure tax data storage 
• Automated reporting 
• Clearance and reporting invoice models 
• Integration with inventory and sales systems 

This wave especially affected businesses with high invoice volumes and complex operational structures.

The Importance of Early Preparation:

One of the biggest lessons from earlier waves was the importance of proactive compliance planning.

Businesses that delayed implementation often faced:

• Vendor bottlenecks 
• ERP migration delays 
• Compliance testing failures 
• Increased implementation costs 
• Operational downtime risks 

Preparing several months before the official deadline became a recommended best practice.

ZATCA Wave 22:

Wider SME Inclusion:

Wave 22 continued Saudi Arabia’s push toward complete nationwide e-invoicing adoption.

With smaller revenue thresholds, more SMEs became subject to mandatory Phase 2 integration.

This shift demonstrated that ZATCA e-invoicing systems are no longer limited to large enterprises. Businesses of all sizes must now maintain compliant invoicing infrastructure.

What Businesses Need to Focus On:

Wave 22 businesses should prioritize:

• Choosing a compliant ERP provider 
• Verifying XML invoice compatibility 
• Testing Fatoora platform integration 
• Training finance teams 
• Monitoring invoice validation reports 
• Maintaining secure digital archiving 

SMEs particularly benefit from cloud-based ERP systems that simplify compliance management while reducing infrastructure costs.

Phase 2 Technical Requirements for Waves 18–22:

Businesses affected by Waves 18–22 must comply with several mandatory technical standards established by ZATCA.

XML Invoice Generation:

Invoices must be generated in structured XML format according to ZATCA specifications.

The XML structure includes:

• Seller details 
• VAT information 
• Invoice line items 
• Tax amounts 
• UUID identifiers 
• Digital signatures 

Cryptographic Stamping:

Every invoice should have a cryptographic stamp that will provide authenticity and guarantee that it is tamper free.

This security feature ensures the integrity of invoices when they are submitted and reported.

QR Code Requirements:

QR codes should be included on simplified tax invoices that include necessary information for the tax invoice.

These QR codes enhance transparency and make for quick verification.

Real-Time Reporting:

All invoices have to be reported or cleared within the stipulated period on Fatoora.

Proper transmitting of invoices might create compliance issues.

Secure Archiving:

Electronic invoices and all related records should be securely stored for the legally mandated retention period.

Compliance readiness is now a key aspect of secure digital storage.

These are the steps to take when integrating your ERP with ZATCA Fatoora:

Integration with ERP is one of the most crucial components that comes under Phase 2 compliance.

Step 1: Assess Existing Systems:

Before implementing any changes, it is crucial that business assesses if their existing ERP or accounting software can handle:

• XML invoicing 
• API connectivity 
• ZATCA compliance updates 
• Invoice signing 
• Real-time reporting 

Legacy systems often require upgrades or replacement.

Step 2: Choose a Compliant Solution:

Organizations should select a fully compliant ZATCA e-invoicing system capable of supporting:

• Automated compliance updates 
• Secure invoice generation 
• Multi-user environments 
• Branch-level reporting 
• Integration scalability 

Step 3: Configure Fatoora Integration:

The ERP system must connect securely with the Fatoora platform through APIs.

This includes:

• Authentication setup 
• Device registration 
• Security certificate configuration 
• Invoice validation testing 

Step 4: Conduct Testing:

Before going live, businesses should test:

• Invoice generation 
• XML validation 
• Reporting accuracy 
• Clearance response handling 
• Error management 

Testing minimizes disruptions during production deployment.

Step 5: Train Teams:

Finance, accounting, and IT teams must understand:

• Invoice workflows 
• Validation requirements 
• Reporting procedures 
• Error resolution processes 

Long term compliance success is dependent on staff readiness.

ZATCA Penalty Waiver 2026:

ZATCA has implemented a number of initiatives to promote voluntary compliance and assisted businesses in the transition to the digital tax framework and has periodically introduced waiver programs to this end.

The ZATCA penalty waiver 2026 program could offer relief opportunities to eligible businesses that:

• Register voluntarily 
• Correct violations 
• Settle outstanding taxes 
• Improve reporting accuracy 
• Complete integration requirements 

However, businesses should not rely solely on ZATCA late compliance penalty waiver programs.

Failure to comply with Phase 2 regulations may still result in:

• Financial penalties 
• Operational disruptions 
• Audit exposure 
• Increased compliance scrutiny 

Timely implementation remains the safest approach.

Best Practices for Businesses Entering Waves 18–22:

Start Early:

Early preparation reduces implementation pressure and allows time for testing and corrections.

Upgrade Legacy Systems:

Older accounting systems may not support ZATCA technical requirements effectively.

Modern ERP platforms simplify compliance significantly.

Work With Experienced ERP Providers:

Experienced implementation partners understand:

• ZATCA specifications 
• Fatoora APIs 
• Invoice structures 
• Compliance workflows 

This reduces deployment risks.

Train Internal Teams:

Employee awareness improves operational consistency and reduces reporting errors.

Monitor Compliance Continuously:

Compliance is an ongoing process rather than a one-time setup.

Businesses should continuously monitor:

• Invoice validation 
• API responses 
• Reporting logs 
• Regulatory updates 

Preparing for Future Waves:

The e-invoicing Saudi Arabia transformation continues evolving rapidly.

Businesses should also monitor upcoming implementation groups such as the Wave 23 guide and Wave 24 guide, as ZATCA expands Phase 2 adoption further across the Kingdom.

Organizations that invest in scalable ERP systems today will find it easier to adapt to future regulatory changes and evolving digital tax requirements.

Conclusion:

The introduction of ZATCA Waves 18 – 22 marks another significant step in Saudi Arabia’s digital tax transformation journey.

As the integration of Phase 2 increases in scope, companies from all sectors need to make sure they have compliant invoicing systems that integrate directly with Fatoora.

The technical needs are now much more sophisticated than in the previous steps of e-invoicing, such as generating an XML invoice or integrating with real-time reporting or ERP.

In short, companies which act on time, modernize their ERP systems and plan for compliance properly can save themselves from penalties, enhance business efficiency, and stay fully compliant.

From compliance for current obligations to groups for future rollout, having a robust ZATCA e-invoicing system is not a choice, but a critical business need in Saudi Arabia’s expanding digital economy.