A retailer near Al Sulaimaniyah still issuing any free-form invoices has a Phase 1 gap that a QR code alone doesn't close.

Phase 1 has been mandatory since December 2021 and applies to all resident taxpayers. Businesses that came into compliance quickly with a proper system are now well positioned for Phase 2. Those that met it with a minimum-effort workaround, a modified Word template, a spreadsheet macro, usually find that the same workaround cannot be extended to Phase 2 at all.

What Phase 1 actually requires

Invoices must be generated by a compliant electronic system, not manually. Standard tax invoices for B2B transactions carry the seller's and buyer's VAT registration numbers, invoice date and time, line-level detail, VAT rate and amount, and totals. Simplified invoices for B2C carry a QR code encoding the seller name, VAT number, timestamp, total and VAT amount. Arabic is mandatory, and the system must prevent editing or deletion after issue.

Where businesses commonly fall short

The recurring failures we find are: invoices still being issued from Excel with sequential numbering that can be overwritten, missing or wrongly formatted buyer VAT numbers on B2B invoices, credit notes that do not reference the original invoice, and QR codes that encode the right data in the wrong structure and therefore fail validation. Each of these is individually small and collectively enough to fail an inspection.

Getting compliant properly

Compliance is achieved through the ERP or billing system rather than bolted on. Whether the platform is Odoo, Business Central, Oracle or SAP, we configure invoice layouts with mandatory Arabic fields, enforce tamper-resistance through system controls rather than policy, and validate the QR structure against ZATCA's specification with test transactions.

A common Saudi scenario

A Riyadh retailer with three branches issues simplified invoices from a point of sale system supplied before 2021. The QR code is present but encodes fields in an order that fails ZATCA validation, something nobody noticed because the printer produced a plausible-looking code. It surfaces only when a customer's accountant cannot process the invoice. Correcting it requires a POS software update the vendor had released two years earlier and the business had never applied.

Phase 1 as preparation for Phase 2

The practical value of doing Phase 1 properly is that Phase 2 becomes a manageable extension rather than a fresh project. Clean master data, correct VAT treatment by product and customer, and a system that genuinely controls invoice issue are all prerequisites for integration, which is why we treat a Phase 1 review as the first step of any Phase 2 engagement. Broader e-invoicing compliance advice covers the regulatory side alongside the system work.

Evidence you can produce on request

Compliance is proven by records, not intentions. We make sure invoice archives are retained in a retrievable form for the required period, that the audit trail showing an invoice cannot be altered after issue is demonstrable from the system rather than asserted, and that someone can answer a ZATCA query with evidence the same week rather than reconstructing it over a month. This connects to audit support and to the wider registration position, since the first thing an inspection tests is whether your records match what you have filed.

Local context

Retail and food service businesses in Riyadh carry the highest simplified-invoice volumes and therefore the greatest exposure to QR code formatting errors.