ZATCA Phase 2, proven against the regulator's own toolkit.

The engine is onboarded and active on ZATCA's Fatoora simulation environment: a CSID has been issued, all six compliance checks pass, and invoices are signed, cleared and returning zero warnings. The document pipeline is validated against ZATCA's own FATOORA SDK rather than against our reading of the specification. Simulation is the stage ZATCA requires you to pass before it issues a production certificate — every merchant crosses it on their own VAT number, which is why onboarding is per-merchant and not something a vendor can do once for everybody.

Yes. Phase 2 certificates are issued to your VAT number, not to ours — you keep an account on ZATCA's Fatoora portal, and the OTP you paste into Navira comes from it. This is how the regulation is designed: your cryptographic identity stays yours, and it moves with you if you ever leave.

The rejection and the authority's exact reason are stored against that document and shown on it — not swallowed into a log nobody reads. Standard (B2B) invoices are cleared before they reach the buyer, so a rejection is caught before you have sent anything. Simplified (B2C) invoices are reported within 24 hours, so the receipt is already with the customer and the fix is a credit note referencing the original. Every submission attempt, with its response, is kept as an audit trail.

Both, depending on the document. A standard tax invoice to another business must be cleared by ZATCA before you send it. A simplified invoice — a retail receipt to a consumer — is reported to ZATCA within 24 hours of issue. Navira decides which path a document takes from the document type and the buyer, and you do not have to think about it.

No, and that is deliberate — the database itself refuses it. An issued tax invoice is a tax record; it is corrected with a credit or debit note that references the original, which is what both ZATCA and the FTA expect. Drafts remain fully editable until you issue them.

Yes — one login can hold several companies, each with its own VAT number, its own ZATCA device, its own numbering and its own branding, and you switch between them from the sidebar. How many you may hold depends on your plan. Note that each company is separate by design, including in reporting: a single consolidated view across companies is not available yet.

It's Saudi Arabia's mandatory system for issuing tax invoices electronically instead of on paper — most people just call it "Fatoora," after the portal. Phase 1 requires an electronically generated invoice with a QR code; Phase 2 adds a cryptographic stamp, UBL 2.1 XML, and — for invoices between businesses — real-time clearance with ZATCA before the buyer ever sees the document. Navira is built around both phases, not one bolted onto the other.

ZATCA rolls businesses into Phase 2 in waves, based on annual VAT-taxable revenue, and the threshold has been lowered progressively — recent waves reach down to SAR 375,000, the same figure that triggers mandatory VAT registration. ZATCA notifies businesses directly ahead of their wave, but if you're unsure, check your VAT-taxable revenue against the latest published thresholds rather than assume the mandate doesn't reach you yet.

SAR 375,000 in annual taxable supplies makes VAT registration mandatory; SAR 187,500 makes it optional. Crossing 375,000 is also the figure ZATCA has used to pull businesses into e-invoicing Phase 2, so the two obligations tend to land on a growing business at roughly the same time.

A credit or debit note that corrects an issued tax invoice — a return, a price correction, a cancellation — generally has to be issued within 15 calendar days of the event that requires it. It's a hard deadline, not a guideline, and it's easy to miss when the correction is small; Navira keeps that window visible on the invoice it corrects rather than leaving it to memory.

A Compliance CSID is issued during onboarding to prove your invoice format meets ZATCA's technical requirements — it's what you use to pass the six required test documents. A Production CSID is the certificate your system signs real, cleared invoices with once ZATCA approves that testing. Navira requests and renews both as part of setup, not as a separate project you run yourself.

ZATCA can issue fines for e-invoicing non-compliance, and penalties escalate for repeat violations. If you've had a notice or suspect you're already out of scope, the priority is moving onto compliant software and closing the gap — not waiting to see if an audit finds it first.

It depends on your VAT-taxable revenue and which wave that puts you in — the threshold has been lowered over time, most recently down to SAR 375,000, so smaller retailers are increasingly in scope. If you're issuing tax invoices at all, it's worth checking your current wave status rather than assuming the mandate is still years away.