| Indirect tax | VAT, standard rate 15%VAT has applied at 15% since 1 July 2020, administered by ZATCA. Saudi/GCC-owned shares of companies pay Zakat at 2.5% of the Zakat base while foreign-owned shares pay 20% corporate income tax, so mixed-ownership companies file both. |
|---|
| E-invoicing | Mandatory · ZATCA FATOORAPhase 1 (electronic generation) is mandatory for all VAT-registered taxpayers, and Phase 2 (integration with FATOORA, clearance for B2B and reporting within 24 hours for B2C) is rolling out in waves. Wave 24 (VAT-subject revenue above SAR 375,000) had to integrate by 30 June 2026, and Wave 25, announced on 24 July 2026, covers taxpayers whose VAT-subject revenue exceeded SAR 187,500 in any year from 2022 to 2025, with a deadline of 1 February 2027. |
|---|
| Data protection | Personal Data Protection Law (Royal Decree M/19 of 1443H, as amended)In force since 14 September 2023 and enforced by SDAIA since the grace period ended on 14 September 2024; certain controllers (such as public entities and businesses whose core activity is processing personal data) must register on SDAIA's National Data Governance Platform, and transfers outside the Kingdom must follow the Personal Data Transfer Regulations (adequate jurisdictions or appropriate safeguards). |
|---|
| AI rules | No AI-specific statute; SDAIA, which also enforces the PDPL, has issued AI Ethics Principles and Generative AI Guidelines that set expectations for organisations developing or deploying AI systems such as chatbots. |
|---|
| Systems we migrate from or connect to | Qoyod, Daftra, Wafeq, Zoho Books, Odoo, SAP Business One, Microsoft Dynamics 365 Business CentralMasters, ledgers, stock and open balances move across and are reconciled before cutover. |
|---|
| Payment rails for web apps and SaaS | mada, SADAD, Apple Pay, HyperPay, Moyasar, Tabby |
|---|
| Also worth knowing | Phase 2 e-invoices must be UBL 2.1 XML with a cryptographic stamp and QR code issued from ZATCA-onboarded solutions, and tax invoices must be in Arabic (other languages may be shown alongside). Wave scope is based on historical revenue (any single year since 2022), not current turnover. |
|---|