Sabsoft
WhatsApp Us

ZATCA POS Integration for Saudi Arabia

ZATCA Phase 2 is not a software purchase — it is technical work on the POS you already run: EGS unit onboarding, cryptographic stamps, signed invoices, 24-hour reporting. We do that work end-to-end and remotely, as part of our Sunmi and POS integration services worldwide.

Book a ZATCA AuditSee Remote POS Setup

The deadline is closer than it looks

Phase 2 of ZATCA e-invoicing (FATOORA) has been rolling out in waves since January 2023, ordered by turnover — largest businesses first. Wave 25, announced on 24 July 2026, covers every resident taxpayer whose VAT-taxable revenue exceeded SAR 187,500 in any year from 2022 to 2025, with an integration deadline of 1 February 2027. Because SAR 187,500 is the voluntary VAT registration threshold, this wave effectively reaches every VAT-registered restaurant, cafe and shop in the Kingdom, however small.

This is not a paperwork exercise you can finish the night before. Each billing device has to be onboarded, stamped and tested, and your POS software has to produce invoices in ZATCA format on every single transaction. Businesses that start early finish calmly; businesses that start in January join a queue of everyone else who waited.

What Phase 2 actually requires from your POS

Four pieces of technical work stand between a normal till and a compliant one. This is the work we are hired to do.

EGS unit onboarding

Every billing device is registered with FATOORA as an EGS unit and receives a Cryptographic Stamp (CSID) through a one-time password in the ZATCA portal. Without this onboarding, the device cannot issue a compliant invoice at all.

Signed XML invoices

Phase 2 invoices are UBL 2.1 XML documents (or PDF/A-3 with the XML embedded), digitally signed and stamped, each carrying a UUID, an invoice counter and a hash of the previous invoice — a tamper-evident chain across everything you bill.

QR code on every simplified invoice

Restaurant and retail sales are simplified tax invoices: printed immediately for the customer with a Phase 2 QR code that encodes the seller, VAT number, totals, invoice hash and cryptographic stamp.

Reporting and clearance

Simplified (B2C) invoices must be reported to FATOORA within 24 hours. Standard (B2B) invoices must be cleared by ZATCA before they are handed to the buyer. Your POS has to do both, automatically, at the speed of your counter.

What our ZATCA integration includes

One fixed scope, quoted after the audit — no hourly billing, no open-ended consulting.

POS and device audit

We start with what you already run: devices, POS software, current invoicing. You get a straight answer on whether your setup can reach Phase 2 compliance as it stands — before you pay for work that cannot fix it.

EGS onboarding and CSID setup

Each billing unit is onboarded in the FATOORA portal, CSIDs are generated and installed, and the signing configuration is verified device by device.

Invoice configuration and testing

Invoice formats, QR codes, hash chain, reporting and clearance flows are configured, then proven with test invoices against ZATCA's environment before a single real bill is issued.

Go-live and staff handover

We stay on the launch with you, train your counter staff on the new flow over video, and leave you a written record of what was configured — with a support window after go-live for the questions that only appear in real trading.

Who this is for

Saudi restaurants, cafes, cloud kitchens and retail stores whose wave deadline is approaching — or has passed — and whose POS still issues ordinary receipts. Owners who bought Sunmi devices locally, online or through a telecom bundle and discovered the box came with no one to configure it. Multi-branch operators who need every outlet onboarded the same correct way, not improvised branch by branch.

One thing we will always tell you plainly: integration cannot rescue software that is incapable of producing compliant invoices. If that is your situation, the audit says so, and the honest path is a software change — which we can also handle, including custom POS work through our software development services. What you will never get from us is a configuration invoice for a setup that was never going to pass.

How the integration runs

STEP 1

Audit call

A short call and a look at your current POS. We confirm your wave, your deadline and whether your software and devices can comply.

STEP 2

Onboarding

EGS units are registered in FATOORA and CSIDs are issued and installed on each billing device.

STEP 3

Configuration

Signing, QR, hash chain, reporting and clearance are configured in your POS software.

STEP 4

Testing

Test invoices are run end to end. Nothing goes live on an assumption.

STEP 5

Go-live and handover

Real billing starts on the compliant flow, your staff are trained, and our support window opens.

Frequently Asked Questions

Phase 2 rolls out in waves by VAT-taxable turnover. Under Wave 25, announced by ZATCA on 24 July 2026, every resident taxpayer whose VAT-taxable revenue exceeded SAR 187,500 in any year from 2022 to 2025 must be integrated with FATOORA by 1 February 2027. SAR 187,500 is the voluntary VAT registration threshold, so this wave reaches effectively every VAT-registered business, however small. Earlier waves had earlier deadlines — if your turnover was higher, your deadline may already have passed, which makes the audit more urgent, not less.
ZATCA's published penalty schedule fines VAT record and invoicing violations up to SAR 50,000 per violation class, up to SAR 100,000 for issuing tax invoices while unregistered, and fines can double when a violation repeats within three years. ZATCA has also run penalty-waiver initiatives — the current one runs to 31 December 2026 — which tells you enforcement is active and the cheapest time to fix compliance is before your deadline, not after a notice.
Three, and the audit decides which is honest: configure your existing software if it supports Phase 2 (many systems have the capability switched off or unconfigured), connect your devices to software that is compliant, or — where neither works — migrate your billing to compliant software and let us handle the data and device side of the move. What we will not do is sell you configuration work on software that cannot produce compliant invoices.
No. We are an integration services company, not a Saudi hardware dealer. Most Saudi businesses already own their devices — bought locally, online, or bundled with a telecom package — and are missing exactly the part we provide: correct configuration and compliance setup. Hardware warranty stays with whoever sold you the device; our responsibility is the integration work, and we say so in writing.
Yes — that is how we deliver it. FATOORA onboarding happens in ZATCA's portal, device configuration and software setup are done through secure remote access and Sunmi's device management platform, and training runs over video with your staff at the counter. The only tasks that ever need hands on site are physical — plugging in a printer, replacing a cable — and for those we guide your own staff live. Our team is based in Karachi, two hours ahead of Saudi time, which makes same-day support straightforward.
Simplified invoices are for sales to consumers (B2C) — a restaurant meal or a retail purchase. They are issued to the customer immediately with a Phase 2 QR code and reported to FATOORA within 24 hours. Standard invoices are for business-to-business (B2B) sales and must be cleared by ZATCA before being given to the buyer. A typical Saudi restaurant or shop issues simplified invoices at the counter, but if you also invoice businesses, your POS must handle both flows.
ZATCA does not license POS integrators the way it accredits e-invoicing solution providers, and we do not claim a status that does not exist. What we do is the technical integration work itself: EGS onboarding, CSID configuration, invoice signing setup and testing, performed on your systems and verified against ZATCA's environment. Compliance is confirmed by FATOORA accepting your invoices — which is exactly what our testing proves before go-live.
It depends on your device count and how ready your current software is, which is why every engagement starts with the audit. A single outlet with compliant-capable software is a matter of days of configuration and testing once your FATOORA portal access and documents are ready. Multi-branch rollouts are phased branch by branch. The audit call gives you a scoped timeline in writing before you commit to anything.

Start with the audit — it costs you one call

Tell us what POS and devices you run today. We will confirm your wave, your deadline, and whether your setup can reach Phase 2 — in writing, before you commit to anything.

Book a ZATCA AuditEmail Our Team