ZATCA E-Invoicing (KSA Phase 2) Connector for Business Central

Key Features

ZATCA Phase 1 generation: compliant tax invoice and simplified tax invoice XML built on document posting via AL event subscribers

ZATCA Phase 2 clearance: real-time call to the Fatoora Clearance API for standard invoices before the document is issued to the buyer

ZATCA Phase 2 reporting: simplified (B2C) invoices reported to the ZATCA Reporting API within the mandated window from a Job Queue entry

Cryptographic stamp (ECDSA) applied from your CSID certificate, SHA-256 invoice hash and Previous Invoice Hash (PIH) chaining

Document UUID generation and TLV-encoded Base64 QR code embedded on the printed/PDF invoice for scanner verification

CSID onboarding lifecycle: CSR generation, compliance CSID, production CSID retrieval and renewal handled inside isolated ZATCA setup

Bilingual Arabic / English tax invoice layout with mandatory ZATCA fields, seller/buyer VAT registration numbers and invoice subtype tags

Table and page extensions on Sales Invoice, Sales Cr. Memo and posted documents — no modification of base Microsoft objects

ZATCA status FactBox showing clearance/reporting state, ZATCA UUID, QR data and any rejection or warning reasons per document

Retry and resubmission handling for transient API failures, with cleared/reported state tracked so documents are never double-submitted

Dedicated ZATCA permission set and setup page so finance and compliance roles are scoped correctly

Designed against BC posting and numbering so it reconciles with your existing VAT posting setup and document series

Built to order, done for you

No DIY setup — a working app, built, installed and supported by ECOSIRE.

You order

Start with a one-time build price. We scope it with you at kickoff.

We build & install

ECOSIRE builds, configures and installs it on your Dynamics 365 Business Central.

Go live + support

You go live in about 2–4 weeks, with a post-launch support window.

About this Product

ZATCA's Fatoora mandate is not optional for VAT-registered businesses in Saudi Arabia, and Business Central does not generate the compliant XML, cryptographic stamp, UUID or QR code out of the box. This connector closes that gap.

ECOSIRE builds this as a per-tenant AL extension installed directly on your Business Central environment (cloud SaaS or on-prem). We do not ship a generic AppSource download — every deployment is scoped to your chart of accounts, VAT posting setup, item tax groups and document numbering, then installed, validated against your real invoices and supported by our team.

What it does technically. Table and page extensions add ZATCA fields to Sales Invoice, Sales Cr. Memo and their posted counterparts. Event subscribers on the posting routines (OnAfterPostSalesDoc) build the UBL 2.1 / ZATCA-compliant invoice XML, compute the SHA-256 invoice hash, apply the ECDSA cryptographic stamp from your CSID certificate, chain the previous invoice hash (PIH), generate the document UUID and render the TLV-encoded Base64 QR code. For Phase 2, a job-queue-backed service calls ZATCA's Compliance, Clearance and Reporting REST APIs in real time — standard tax invoices are cleared before issuance; simplified invoices are reported within the allowed window. Responses, warnings and rejection reasons are stored against the document and surfaced on a ZATCA status FactBox.

Onboarding and certificates. We implement the CSID lifecycle — CSR generation, compliance check submission, production CSID retrieval and renewal — with secrets held in isolated setup so credentials never sit in plain document data.

You receive a working, compliance-tested system, a permission set scoped to ZATCA roles, source-controlled AL code and a defined support window. Lead time is honest and quoted up front.

What you get

A per-tenant AL extension (.app) built for your Business Central version, installed on your sandbox then production environment

CSID onboarding completed end to end: CSR, compliance check, production CSID and renewal procedure documented for your VAT registration

Compliance validation against your real sales invoices and credit memos, including Fatoora compliance-check pass before go-live

Bilingual Arabic/English ZATCA invoice report layout integrated with your branding and document numbering

A scoped ZATCA permission set plus a configured setup page with secrets held outside plain document data

Source-controlled AL code, deployment notes and an admin runbook for certificate renewal and resubmission, plus a defined post-go-live support window

Who this is for

Saudi Finance Manager / Controller

Owns VAT compliance for a KSA VAT-registered company running Business Central and must meet the ZATCA Phase 2 integration deadline without disrupting the existing posting and reporting workflow.

Business Central Partner / IT Lead

Needs a clean, upgrade-safe extension (no base-object modification, proper event subscribers) that installs per tenant and survives BC's continuous updates.

Tax / Compliance Officer

Responsible for audit readiness — needs documents cleared or reported correctly, with UUID, hash chain, QR code and ZATCA responses traceable on every invoice.

How ZATCA E-Invoicing (KSA Phase 2) Connector for Business Central Compares

Criterion	ECOSIRE	Custom Build	Competitor
ZATCA Phase 1 compliant XML generation	Included	Partial support	Included
ZATCA Phase 2 real-time clearance & reporting API integration	Included	Partial support	Included
Cryptographic stamp, UUID, hash chain (PIH) & QR code	Included	Partial support	Included
CSID onboarding & certificate renewal handled for you	Included	Partial support	Partial support
Built and validated against YOUR VAT setup and documents	Included	Included	Not included
Upgrade-safe per-tenant extension (no base-object changes)	Included	Partial support	Included
Bilingual Arabic/English invoice layout integrated with your branding	Included	Partial support	Partial support
Installed and supported on your environment with a defined support window	Included	Not included	Partial support

Frequently Asked Questions about ZATCA E-Invoicing (KSA Phase 2) Connector for Business Central

How long does delivery take, and is this an instant AppSource install?

This is build-to-order, not an instant Microsoft AppSource download. After a short scoping call we confirm your BC version, VAT setup and CSID details, then build, install on your sandbox, validate against real invoices and pass the ZATCA compliance check before production go-live. Typical lead time is a few weeks depending on your environment and how quickly CSID onboarding can be completed; we quote a firm date up front.

How is the connector supported and kept up to date after go-live?

It is installed as a per-tenant extension that ECOSIRE supports on your environment. The engagement includes a defined post-go-live support window covering bug fixes, certificate renewal assistance and resubmission help. Because ZATCA periodically updates its technical specifications and API behaviour, we offer ongoing maintenance so the extension stays aligned with new ZATCA requirements and Business Central's continuous updates.

Does it work on Business Central cloud (SaaS) and on-premises?

Yes. The extension is built in AL and deployed per tenant, so it installs on BC online (SaaS) and on supported on-premises/private-cloud deployments. We confirm your exact platform and version during scoping and target the matching runtime.

Will it modify my standard Business Central objects or break upgrades?

No. We use table extensions, page extensions and event subscribers — base Microsoft objects are never modified. This keeps the solution upgrade-safe across BC's continuous update cadence, which is also the model required for AppSource-style per-tenant extensions.

Does it handle both standard (B2B) clearance and simplified (B2C) reporting?

Yes. Standard tax invoices are sent to the ZATCA Clearance API and cleared before issuance to the buyer; simplified invoices are reported to the Reporting API within the mandated window via a Job Queue entry. Each document tracks its UUID, hash chain (PIH), QR code and ZATCA response so you can prove compliance per invoice.

How are the CSID certificate and credentials secured?

CSID onboarding (CSR, compliance CSID, production CSID, renewal) is handled inside isolated ZATCA setup, and signing credentials are held outside plain document data. The cryptographic stamp is applied at posting time from your certificate, and access is restricted through a dedicated ZATCA permission set.