ZATCA Wave 24: 5-Step Fatoora Integration Guide for Saudi SMEs 2026

ZATCA Wave 24 Deadline Has Passed — What Happens to Saudi SMEs Now?

June 30, 2026 marked a pivotal moment for thousands of Saudi small and medium businesses. The ZATCA Wave 24 deadline closed, mandating that all VAT-registered businesses with annual revenue exceeding SAR 375,000 must integrate their invoicing systems with the Fatoora platform. If your business has not yet completed this integration, you are not alone — but you are now operating outside compliance requirements. The good news: ZATCA has granted a fines waiver grace period running through December 2026, giving you a limited window to act without facing penalties of up to SAR 50,000.

This guide walks you through exactly what needs to happen now, who is affected, and how to complete your integration before the December deadline turns costly.

Who Is Affected by ZATCA Wave 24?

Wave 24 is the broadest wave yet in Saudi Arabia's Phase 2 e-invoicing rollout. It covers any VAT-registered taxpayer whose revenues subject to VAT exceeded SAR 375,000 during 2022, 2023, or 2024. This brings hundreds of thousands of small businesses into the e-invoicing mandate for the first time.

• Annual VAT revenue above SAR 375,000 in any single year between 2022 and 2024
• Already VAT-registered with ZATCA (General Authority of Zakat and Tax)
• Issuing either B2B or B2C invoices — both are covered, with different workflows
• Any business type — retail, services, restaurants, clinics, freelancers, and online stores all qualify

Waves 22 and 23 covered businesses with annual revenues above SAR 750,000, meaning Wave 24 specifically targets the smaller end of the SME bracket. If you previously thought e-invoicing applied only to large companies, Wave 24 changes that picture completely.

The December 2026 Grace Period: What It Means and What It Does NOT Mean

ZATCA announced an amnesty: fines for Wave 24 non-compliance are waived through December 31, 2026. Fines for e-invoicing violations range from SAR 5,000 to SAR 50,000 per violation depending on the severity and whether violations are repeated. This is not a deadline extension — your business is still legally required to comply. It means enforcement and financial penalties are suspended temporarily, not that you can ignore the requirement.

The practical effect: you have roughly six months to complete your Fatoora integration without financial penalty. Use that time wisely. Businesses that wait until November will find ZATCA-certified solution providers overloaded with last-minute requests, and rushed integrations produce errors that ZATCA's Fatoora system will reject.

5 Technical Steps to Complete Your Fatoora Integration

ZATCA Phase 2 is not just about generating PDF invoices. The integration requires your invoicing software to communicate with ZATCA's Fatoora portal in real time. Here is the exact process:

• Step 1 — Select a ZATCA-certified e-invoicing solution. Your software must be certified by ZATCA. Uncertified software cannot generate the required cryptographic stamps and UUID fields. Verify certification on the official ZATCA portal before signing any contract.
• Step 2 — Generate a Certificate Signing Request (CSR). Your ZATCA-certified software creates a CSR — a cryptographic identity request submitted to ZATCA's Fatoora portal to begin onboarding.
• Step 3 — Complete sandbox testing. ZATCA requires you to test your integration in a non-production environment first. This ensures your XML invoice structures, UUID generation, and ICV (Invoice Counter Value) chaining pass validation before you go live.
• Step 4 — Obtain your CCSID and go live. After successful sandbox testing, ZATCA issues a Cryptographic Customer Software Identity Document (CCSID) — your production certificate. From this point, every invoice is either cleared (B2B) or reported (B2C) through Fatoora in real time.
• Step 5 — Maintain ongoing invoice chaining. Every invoice must include a PIH (Previous Invoice Hash) linking it cryptographically to the prior invoice. This chain cannot be broken or retroactively modified, so your system must maintain continuity from day one of going live.

B2B invoices require real-time clearance: you submit the invoice to Fatoora, ZATCA validates it, applies a cryptographic stamp, and returns the cleared version before you can send it to your customer. B2C simplified invoices can be issued immediately but must be reported to ZATCA within 24 hours.

Avoiding Common Integration Mistakes

Based on patterns from earlier ZATCA wave rollouts, Saudi SMEs frequently encounter these avoidable errors:

• Using uncertified software: ZATCA will reject invoice clearance requests from non-certified systems. Always verify certification before purchase.
• Skipping sandbox testing: Production errors create gaps in your invoice chain that auditors will flag. Testing in sandbox prevents this entirely.
• Treating the grace period as a deadline extension: December 31, 2026 is a hard cutoff. Penalties restart January 1, 2027 and apply to all outstanding violations.
• Mixing certified and uncertified invoicing channels: If your POS system issues some invoices and a separate tool issues others, both must be Fatoora-integrated. ZATCA tracks all VAT-registered invoice volumes across every issuance channel.

How Watily Solves This

Setting up ZATCA Phase 2 integration from scratch is complex — CSR generation, sandbox environments, XML validation, certificate management — it typically requires dedicated IT resources that most small businesses simply do not have. Watily's ZATCA e-invoicing integration is purpose-built to remove this complexity for Saudi SMEs.

Watily handles the full Fatoora onboarding process automatically: CSR generation, sandbox testing, and CCSID certificate management are all built in. Your business issues invoices through a simple interface, and Watily's backend handles real-time clearance for B2B transactions and 24-hour reporting for B2C. The system automatically chains PIH values, generates UUIDs, and applies the required cryptographic stamps — no IT team required.

Because Watily is ZATCA-certified, you do not need to verify compatibility separately. The integration complies with the third version of ZATCA's technical specifications issued in May 2026, meaning you start fully compliant from day one without chasing updates.

For businesses that have been issuing invoices manually or through uncertified tools, Watily also provides onboarding support to ensure a clean compliance start before December 2026.

Start your ZATCA compliance journey today — explore Watily's ZATCA e-invoicing solution and get compliant before the December 2026 fines take effect.

The ZATCA Wave 24 deadline marked the most inclusive e-invoicing mandate in Saudi Arabia's history, reaching small businesses that previously operated entirely on paper or spreadsheet invoices. The December 2026 grace period is a genuine opportunity to transition smoothly. Do not let it pass unused.

Ready to get ZATCA-compliant without the technical headache? Try Watily's e-invoicing platform — the all-in-one solution trusted by thousands of Saudi SMEs.