Zakat, Tax and Customs Authority (ZATCA): The Complete Compliance Guide for Businesses in Saudi Arabia

The Zakat, Tax and Customs Authority — known as ZATCA — is the single regulatory body governing all financial obligations for businesses operating in Saudi Arabia. Whether you run a startup or a multi-branch enterprise, understanding ZATCA's requirements directly determines your legal standing in the market. This guide covers the practical compliance essentials, the latest regulatory updates, and the most common mistakes that lead to penalties.

What Is ZATCA and Why Does It Matter for Your Business?

ZATCA was established by merging several government bodies to create one unified authority covering Zakat collection, VAT, income tax, and customs duties. The authority's mandate centers on financial transparency, combating tax evasion, and accelerating the digital transformation of Saudi business operations. Every business registered in Saudi Arabia falls under at least one of ZATCA's tax regimes.

ZATCA regulates three primary financial obligations. First, Zakat applies to companies fully or majority-owned by Saudi or GCC nationals at a rate of 2.5% of the calculated Zakat base. Second, income tax at 20% applies to foreign-owned entities or the foreign portion of mixed-ownership companies. Third, VAT at 15% applies to most goods and services transacted within the Kingdom. Understanding which obligation applies to your ownership structure is the starting point for any compliance strategy.

The authority operates primarily through its digital portal at my.zatca.gov.sa, where businesses register, file returns, and make payments. ZATCA also administers the Fatoora e-invoicing system, which is now mandatory for the vast majority of VAT-registered businesses. As a result, digital compliance is no longer a choice — it is a baseline legal requirement for doing business in Saudi Arabia.

Understanding Zakat, VAT, and Income Tax: A Practical Breakdown

Zakat is calculated on a defined base that differs from net accounting profit. The base typically includes equity plus long-term liabilities, minus fixed assets and qualifying investments. Therefore, a profitable company on paper may have a Zakat base that is significantly higher or lower than its reported earnings, making accurate record-keeping essential.

VAT registration becomes mandatory once a business exceeds SAR 375,000 in VAT-liable revenues within a twelve-month period. Businesses below this threshold can register voluntarily, which may benefit companies with significant input VAT. Filing VAT returns is quarterly for most businesses, with payment due within the same period. Late payments trigger immediate surcharges that compound over time.

Income tax affects any company with a foreign ownership stake. The foreign partner's share of profit is taxed at 20%, applied proportionally to ownership percentage in mixed-ownership structures. Recent VAT implementing regulation amendments effective April 2025 also introduced stricter VAT grouping criteria and new deemed supplier rules for e-commerce platforms. Businesses operating digital marketplaces should review their VAT position before late 2025, when several new provisions take effect.

E-Invoicing (Fatoora): Phases, Requirements, and Current Deadlines

ZATCA's e-invoicing mandate, known as Fatoora, rolls out in two phases. Phase 1, effective December 2021, requires all VAT-registered businesses to generate invoices electronically with a QR code and stop using manual paper invoices. Phase 2 adds technical integration — businesses must link their invoicing systems directly to ZATCA's platform and report invoices in real time. For a detailed breakdown of the technical requirements, see our guide on e-invoicing requirements under ZATCA.

Phase 2 follows a wave-based rollout organized by annual revenue. Wave 23 targets businesses with revenues exceeding SAR 750,000 during 2022–2024, with a compliance deadline of March 31, 2026. Wave 24 covers businesses with VAT-liable revenues above SAR 375,000 in the same period, with a June 30, 2026 deadline. These thresholds mean that the overwhelming majority of active Saudi businesses must complete Phase 2 integration within the next twelve months.

Businesses still issuing invoices manually face real financial risk: invoices that do not meet Fatoora standards can be rejected for VAT credit purposes, and the issuing business faces administrative fines. In contrast, a compliant accounting system generates approved e-invoices automatically without requiring any manual intervention. ASOFT's accounting software is officially integrated with ZATCA's Fatoora platform, allowing businesses to issue compliant e-invoices directly from within the system — you can explore the tax invoicing module for more details.

ZATCA Penalties and the 2025–2026 Exemption Initiative

Non-compliance penalties under ZATCA vary by violation type. Late filing of VAT returns incurs a fine of 5–25% of the unpaid tax. Issuing non-compliant invoices carries fines starting at SAR 1,000 per violation. Tax evasion — deliberate misreporting — can trigger penalties equal to twice the evaded tax amount, plus potential legal action. The penalties compound quickly, making early correction far less costly than waiting for an audit.

ZATCA launched a Tax Penalties Exemption Initiative running from January 1, 2026 to June 30, 2026. This initiative allows businesses to settle outstanding tax positions and receive full or partial exemption from late payment surcharges and administrative fines accumulated before that period. If your business has any known compliance gaps, this window represents a time-limited opportunity to regularize your position at significantly reduced cost.

For hospitality businesses, an additional compliance requirement took effect in December 2024: the mandatory transition from the Shomoos system to the SES.HOSPEDAJES platform for guest registration data reporting. Hotels and furnished apartment operators that had not completed this migration by December 2, 2024 face regulatory exposure. ASOFT's hotel and furnished apartments management system supports this integration, reducing the administrative burden on property operators.

How Integrated Accounting Software Automates ZATCA Compliance

Manual accounting processes create systematic compliance risk. Spreadsheets and disconnected software cannot generate the structured data formats ZATCA requires for Phase 2 e-invoicing, and they offer no automated check on VAT calculation accuracy. An integrated accounting system, by contrast, applies tax rules at the transaction level and produces regulatory-ready outputs without additional manual work.

ASOFT's accounting software is officially connected to ZATCA's platform, enabling direct e-invoice submission, automated VAT return preparation, and structured financial reporting aligned with Saudi regulatory standards. The system uses smart automated analysis to flag discrepancies between recorded transactions and filed returns before submission deadlines, reducing the likelihood of audit triggers. For businesses evaluating their options, our comparison of the best accounting software in Saudi Arabia provides a useful framework.

Travel agencies and tour operators face a layered compliance challenge: VAT on tourism services follows specific rules that differ from standard commercial transactions. Using an accounting system purpose-built for the sector removes the ambiguity. Our dedicated resource on travel agency accounting software covers the sector-specific requirements in detail. Furthermore, businesses considering a broader digital infrastructure upgrade should explore how an ERP system can unify compliance, reporting, and operations in one platform.

Best Practices for Audit-Ready Financial Records

ZATCA requires businesses to retain all accounting records, contracts, invoices, and bank statements for a minimum of five years. In cases involving disputes or litigation, this period extends further. Digital archiving is therefore not optional — it is the only practical method for meeting this requirement reliably at scale.

Monthly reconciliation between invoice records and VAT filings prevents error accumulation. Finance managers who run this reconciliation consistently find that quarterly return preparation becomes a routine task rather than an emergency exercise. Furthermore, maintaining a clear audit trail for every transaction — including the tax classification applied — makes responding to ZATCA inquiries straightforward and fast.

ZATCA provides official support resources through its portal, including regulatory guides, tax calculation simulators, and direct contact channels for technical inquiries. However, official resources address compliance requirements in general terms. An integrated accounting system translates those requirements into automated processes, applying the correct tax logic to every transaction your business records. That combination of regulatory knowledge and technical automation is what keeps businesses consistently compliant as Saudi tax regulations continue to evolve through 2025 and 2026.