Magento 2 ZATCA E-Invoicing Phase 2 (KSA)

Key Features

UBL 2.1 compliant XML e-invoice generation for both standard tax invoices and simplified invoices, mapped from Magento's native invoice and credit-memo entities

CSID onboarding workflow against ZATCA's Compliance and Production CSID APIs (OTP-based device registration, CSR generation, certificate storage)

Cryptographic stamping of every invoice (ECDSA signature, invoice hash, PIH previous-invoice-hash chaining and monotonic counter value)

Clearance flow for standard tax invoices and reporting flow for simplified invoices via the Fatoora platform APIs, with the 24-hour reporting window respected

Phase 1 ZATCA-compliant TLV Base64 QR code rendered on PDF and email invoices (seller name, VAT number, timestamp, total, VAT total)

Full VAT breakdown by tax category and rate, seller and buyer TRN fields, and zero-rated / exempt handling

Admin submission grid (under a dedicated ACL resource) showing each invoice's clearance/reporting status, ZATCA UUID, ICV and error reason

Automatic retry and manual re-submission for failed or rejected clearances, with full request/response audit logging

Asynchronous processing via Magento cron and message queue so checkout and invoice creation stay fast

Multi-branch / multi-VAT-registration support with per-store-view Fatoora credentials for groups operating several legal entities

di.xml-wired service contracts plus a plugin on InvoiceRepositoryInterface so the integration is upgrade-safe and overridable

Sandbox vs production environment toggle and a one-click compliance self-check against the ZATCA simulation portal before go-live

Built to order, done for you

No DIY setup — a working app, built, installed and supported by ECOSIRE.

You order

Start with a one-time build price. We scope it with you at kickoff.

We build & install

ECOSIRE builds, configures and installs it on your Magento 2.

Go live + support

You go live in about 2–4 weeks, with a post-launch support window.

About this Product

This is not an instant Adobe Commerce Marketplace download. It is a build-to-order Magento 2 module that ECOSIRE builds, installs and supports directly on your Magento Open Source or Adobe Commerce store — configured for your VAT registration, branches and Fatoora credentials.

ZATCA Phase 2 (the Integration phase) requires every B2B/B2C invoice to be produced as a UBL 2.1 XML document, cryptographically stamped, and either cleared (standard tax invoices) or reported (simplified invoices) through ZATCA's Fatoora platform via its APIs. Magento core has no awareness of any of this — it produces a PDF invoice and nothing more.

We deliver a properly engineered module under app/code/Ecosire/ZatcaEInvoice. It hooks Magento's Magento\Sales\Api\InvoiceRepositoryInterface and the sales_order_invoice_save_after observer to build a compliant invoice, then signs it using your CSID (Compliance/Production Cryptographic Stamp Identifier) obtained during onboarding against the ZATCA Compliance and Production CSID APIs. Standard tax invoices are sent for clearance and the returned cleared XML + ZATCA QR is embedded into the PDF and email; simplified invoices carry the Phase 1 TLV QR and are reported within the 24-hour window. Every document includes the mandated PIH (Previous Invoice Hash) chain, UUID, VAT breakdown, seller/buyer TRN fields and invoice counter value.

Work is exposed through service contracts wired in di.xml, guarded by admin ACL, and processed asynchronously via Magento cron and message queue so checkout latency is untouched. You receive the source, an admin grid of submission status, retry handling for failed clearances, and a documented onboarding runbook. Built for your store, by people you can call.

What you get

A custom Magento 2 module installed under app/code/Ecosire/ZatcaEInvoice on your store (Magento Open Source or Adobe Commerce), with full source code handed over

CSID onboarding completed with you: device registration, CSR/CSID generation and secure credential storage for compliance and production environments

Installation and configuration on your staging environment, validated end-to-end against the ZATCA sandbox/simulation portal

Production go-live cutover plus the documented onboarding and operations runbook

Admin training session on the submission grid, retry handling and reading ZATCA error responses

Source-controlled handover (Git) with composer-installable package and clear upgrade path

30 days of post-go-live support covering bug fixes and ZATCA validation rejections at no extra charge

Who this is for

Saudi Magento merchant facing a ZATCA wave deadline

A KSA-based store owner whose business has been notified of its ZATCA Phase 2 integration wave. They are legally required to clear/report XML invoices through Fatoora by a fixed date and need a working, compliant integration on their existing Magento store fast — not a generic plugin they must wire up themselves.

E-commerce / IT manager at a multi-branch retailer

Runs a Magento storefront for a group with several VAT registrations or branches. Needs per-entity Fatoora credentials, accurate VAT breakdowns and an audit trail of every cleared invoice, and wants the build done by an engineer who understands service contracts and cron-based async processing rather than risking checkout performance.

Adobe Commerce solution partner or in-house developer

A technical lead who could build it but wants a proven, upgrade-safe module delivered as source under app/code, with the ZATCA cryptographic-stamp, PIH chaining and CSID onboarding handled correctly — so the team can focus on the storefront instead of reverse-engineering Fatoora's APIs.

How Magento 2 ZATCA E-Invoicing Phase 2 (KSA) Compares

Criterion	ECOSIRE	Custom Build	Competitor
ZATCA-compliant UBL 2.1 XML generation from Magento invoices	Included	Partial support	Included
Cryptographic stamp, PIH hash chaining and CSID onboarding	Included	Partial support	Partial support
Built, installed and configured on YOUR store (not just a download)	Included	Included	Not included
Multi-branch / multi-VAT-registration support out of the box	Partial support	Partial support	Partial support
Upgrade-safe architecture (service contracts, di.xml, plugins, ACL)	Included	Partial support	Partial support
Phase 1 TLV QR on PDF/email invoices	Included	Partial support	Included
Async (cron + message queue) processing, no checkout impact	Included	Not included	Partial support
Hands-on onboarding, training and named human support	Included	Partial support	Not included
Full source ownership and documented runbook handover	Included	Included	Not included

Frequently Asked Questions about Magento 2 ZATCA E-Invoicing Phase 2 (KSA)

How long does delivery take, and how does the build-to-order process work?

After a short scoping call we confirm your Magento edition, branches and VAT registrations, then build and install the module on your staging environment. Typical delivery is 2-4 weeks depending on multi-entity complexity and how quickly we can complete CSID onboarding with you (which depends on ZATCA portal access). This is a custom build installed on your store, not an instant Marketplace download — you get a real engineering engagement, not a zip you have to integrate alone.

What ongoing support and updates do I get after go-live?

Every build includes 30 days of post-go-live support covering bug fixes and any ZATCA validation rejections at no extra cost. Because ZATCA periodically updates its XML rules, clearance behavior and certificate requirements, we offer an optional annual maintenance retainer that keeps the module aligned with ZATCA spec changes and your Magento upgrades. You also receive the full source, so your own team can maintain it if you prefer.

Does this work on Magento Open Source or only Adobe Commerce?

Both. The module is built using standard Magento 2 architecture — service contracts, di.xml dependency injection, plugins on InvoiceRepositoryInterface, observers, admin ACL, cron and message queue — so it runs on Magento Open Source and Adobe Commerce (including cloud) alike. We confirm your exact version during scoping and target your installed release.

Does it handle both standard tax invoices (clearance) and simplified invoices (reporting)?

Yes. Standard tax invoices (typically B2B) are sent to Fatoora for clearance and the cleared XML plus ZATCA QR is embedded into the customer's invoice. Simplified invoices (typically B2C/POS-style) carry the Phase 1 TLV QR and are reported to ZATCA within the mandated 24-hour window. Both flows include the cryptographic stamp, UUID, ICV counter and PIH previous-invoice-hash chain.

Will this slow down my checkout or invoice creation?

No. ZATCA submission runs asynchronously through Magento cron and the message queue rather than blocking the order or invoice transaction. The customer-facing flow stays fast; clearance/reporting happens in the background and the result (status, UUID, any error) appears in the admin submission grid where failures can be retried.

Who completes the ZATCA CSID onboarding — you or us?

We do it together. CSID onboarding requires OTP codes and credentials generated from your own ZATCA Fatoora portal account, so you provide portal access and OTPs while we handle the CSR generation, compliance checks, certificate retrieval and secure storage in the module. We validate the full compliance cycle against the ZATCA simulation environment before switching you to production.