Never worry about ZATCA again.
Your hotel invoices are automatically signed, submitted, and stored.
Sutahi generates UBL 2.1 XML, cryptographically signs every invoice, and submits it to ZATCA before it reaches the customer — all in seconds, with zero manual effort.
What is ZATCA Phase 2?
Saudi Arabia's Zakat, Tax and Customs Authority (ZATCA) requires every VAT-registered business to issue invoices electronically and send them directly to ZATCA's systems in real time.
8 ZATCA Requirements — All Handled Automatically
Create the invoice in Sutahi. Every ZATCA step that follows happens behind the scenes.
UBL 2.1 XML Generation
Sutahi auto-generates a UBL 2.1 XML file matching every ZATCA specification for every invoice.
ECDSA Cryptographic Signing
Every invoice is cryptographically signed with your hotel's CSID private key (SHA-256 + ECDSA P-256) — Phase 2 mandatory.
B2B Clearance Before Delivery
Corporate invoices are submitted to ZATCA for clearance before reaching the buyer — no B2B invoice leaves without ZATCA's stamp.
B2C Reporting Within 24h
Guest checkout invoices are automatically reported to ZATCA within the required 24-hour window — batch reporting supported.
ZATCA QR Code (9-field TLV)
TLV-encoded QR code with all 9 required fields appears on every invoice. Verifiable with the Fatoora app.
Arabic + English Bilingual Invoice
Every invoice is issued in Arabic and English simultaneously with VAT number and sequential invoice number per ZATCA requirements.
7-Year Cloud Archiving
All invoice XML and PDF files are stored in secure cloud storage for 7 years — exceeding the 6-year ZATCA requirement.
Tamper-Proof Invoice Hash Chain
Each invoice stores the previous invoice hash — a linked chain that makes any tampering immediately detectable.
Sutahi Covers All Phase 1 & Phase 2 Requirements
Non-Compliance Penalty Matrix
Penalties escalate with the number of non-compliant invoices. High-volume hotels face greater exposure.
Don't take this risk — Sutahi makes you compliant on day 1.
Book a DemoMulti-Hotel ZATCA — One Dashboard
ZATCA requires each hotel to have its own EGS unit and CSID. Managing this across 5, 10, or 50 properties is a compliance nightmare — unless you use Sutahi.
ZATCA Ready in Under 24 Hours
Sutahi's onboarding wizard handles the complete process — no prior technical knowledge required.
Everything You Need to Know About ZATCA for Hotels
A CSID (Cryptographic Stamp Identifier) is a digital certificate issued by ZATCA via the Fatoorah portal. It is used to cryptographically sign your invoices. Sutahi's onboarding wizard guides you through the complete process — CSR key generation, OTP verification, then CSID issuance — in just 30 minutes.
ZATCA waves have been targeting hospitality businesses from Wave 4 (January 2023) onward, with waves continuing today. If you haven't integrated yet, you are either already non-compliant or about to be. Contact us now — we complete onboarding in under 24 hours.
Sutahi automatically retries and alerts you with ZATCA's response code. The system always preserves all invoice data — no data loss on submission failure. Our support team is notified for any persistent failures.
Yes. The ZATCA compliance dashboard shows every submission: date, invoice number, type (B2B or B2C), ZATCA response, and submission timestamp. Filterable and exportable for audit purposes.
Invoices for pilgrims arriving via Nusuk platform are treated as regular B2C invoices. Reported to ZATCA within 24 hours with full QR code. For hotels contracted with the Ministry of Hajj, B2B settlement invoices to operators are auto-submitted for clearance.
Get ZATCA Ready in 24 Hours
Our team handles your CSID onboarding, tests compliance, and has your hotel submitting real ZATCA invoices — usually by the next business day.
ZATCA compliance included in all plans · 14-day free trial · No credit card required