Creating and setting up a Fatoora Portal account is compulsory for Saudi small businesses to remain compliant with ZATCA’s e-invoicing Phase 2 regulations. Businesses can easily log in to the ZATCA’s Fatoora portal with the help of their ERAD credentials, on board Electronic Generation Solutions (EGS) units, generate OTPs (valid for an hour), and get Cryptographic Stamp Identifiers (CSIDs) to allow compliant and real-time invoice clearance. On the Saudi e-invoicing portal, users are also able to revoke CSIDs on the site and view the solutions that have been onboarded, as well as the active device list.
Prerequisites - What you need to have before Fatoora portal registration
- Commercial Registration (CR) Number: Valid legal entity details.
- Active VAT Registration Number: Mandatory for registration.
- Access to ERAD/Fatoora Portal: Administrative credentials for the Saudi e-Invoicing Portal.
- E-invoicing Software: A system compliant with ZATCA standards for generating UBL-based XML invoices.
Fatoora portal registration guide: step-by-step instructions
- Access the Fatoora portal: https://zatca.gov.sa/ . Log in to the portal with the help of your authorised taxpayer credentials.
- Select the option “Onboard New Solution/Device” to onboard a New Solution Unit.
- Generate OTP: Choose to generate a specific OTP for your EGS unit or units (you can generate multiple OTPs for many EGS units at one go in this window as well). You can generate OTP codes for single or multiple devices simultaneously.
- Validate OTP: Select the generated OTP, Copy it, and then Paste it on the POS or E-Invoicing System within 60 minutes, which is the expiry time of the OTPs.
- Obtain Cryptographic Stamp Identifier (CSID): When entering the OTP in your e-invoicing system, it will automatically request a Certificate Signing Request (CSR) to obtain a Cryptographic Stamp Identifier (CSID), which is also required for Phase 2 compliance.
- Complete the integration: Ensure that your system service provider completes the final linking for real-time clearance of e-invoices.
Main Considerations:
- Device Limits: Unique OTPs will have to be generated for each terminal or device.
- Phase 2 Compliance: The process requires a CSID (specifically, a Production CSID or PCSID) to ensure invoices are properly validated.
- Storage: All electronic invoices must be stored in accordance with ZATCA regulations within Saudi Arabia.
- Support: For technical issues or API integration, taxpayers can refer to documentation on the ZATCA website.
Registering and setting up an account on the Fatoora portal is a critical step for Saudi businesses to comply with ZATCA’s Phase 2 e-invoicing requirements. By completing the onboarding process, generating OTPs, and obtaining the necessary Cryptographic Stamp Identifiers (CSIDs), businesses can ensure their invoicing systems are properly integrated for real-time invoice clearance. Taking the time to correctly configure devices, maintain compliant e-invoicing software, and securely store invoices will help businesses avoid penalties while ensuring smooth and efficient tax reporting under ZATCA regulations.
