A retailer that still issues any free-form invoices has a Phase 1 gap that a QR code alone does not close.

Phase 1 has been mandatory since December 2021 and applies to all resident taxpayers. Businesses that came into compliance with a proper system are well positioned for Phase 2. Those that met it with a minimum-effort workaround, such as a modified Word template or a spreadsheet macro, often find the same workaround cannot be extended to Phase 2.

What Phase 1 requires

Invoices must be generated by a compliant electronic system and not manually. Standard tax invoices for B2B transactions carry the seller's and buyer's VAT registration numbers, invoice date and time, line-level detail, VAT rate and amount, and totals. Simplified invoices for B2C carry a QR code encoding the seller name, VAT number, timestamp, total and VAT amount. Arabic is mandatory, and the system must prevent editing or deletion after issue.

Where businesses commonly fall short

Common failures are invoices issued from Excel with sequential numbering that can be overwritten, and missing or wrongly formatted buyer VAT numbers on B2B invoices. Others are credit notes that do not reference the original invoice, and QR codes that encode the right data in the wrong structure and fail validation. Each is small on its own, and together they are enough to fail an inspection.

Getting compliant properly

Compliance is built into the ERP or billing system. Whether the platform is Odoo, Business Central, Oracle or SAP, we configure invoice layouts with mandatory Arabic fields, enforce tamper-resistance through system controls instead of policy, and validate the QR structure against ZATCA's specification with test transactions.

A hypothetical example

Consider a retailer with several branches that issues simplified invoices from an older point of sale system. The QR code prints, but if it encodes fields in an order that fails ZATCA validation, nobody notices because the printed code looks plausible. It may surface only when a customer's accountant cannot process the invoice, and the fix may depend on a software update the vendor released and the business never applied.

Phase 1 as preparation for Phase 2

The practical value of doing Phase 1 properly is that Phase 2 becomes a manageable extension and not a fresh project. Clean master data, correct VAT treatment by product and customer, and a system that controls invoice issue are all prerequisites for integration. That is why we treat a Phase 1 review as the first step of any Phase 2 engagement. Broader e-invoicing compliance advice covers the regulatory side alongside the system work.

Evidence you can produce on request

Compliance is proven by records, not intentions. We make sure invoice archives are kept in a retrievable form for the required period. The audit trail showing that an invoice cannot be altered after issue should be demonstrable from the system. Someone should also be able to answer a ZATCA query with evidence in the same week instead of reconstructing it over a month. This connects to audit support and to your registration position, since the first thing an inspection tests is whether your records match what you have filed.