Last updated at
July 8, 2026
Learn more about this by booking a demo call with us. Our team will guide you through the process and answer any questions you may have.
Book NowFATOORA is the official e-invoicing portal operated by the Zakat, Tax and Customs Authority (ZATCA) for VAT-registered businesses in Saudi Arabia. Every business under Phase 2 of the e-invoicing mandate depends on this portal for onboarding, cryptographic stamp management and tracking invoice statistics. This guide walks through login steps, portal facilities, the simulation environment and the API endpoints developers need for integration, based entirely on the official FATOORA Portal User Manual published by ZATCA.
The FATOORA Portal is the production platform through which taxpayers manage their e-invoicing generation solutions under Phase 2 of the Saudi e-invoicing mandate. ZATCA designed the portal to help taxpayers onboard their E-Invoicing Generation Solution units by generating a cryptographic stamp identifier for each unit. The same portal also allows renewal of existing cryptographic stamp identifiers and revocation of units that are no longer required.
Businesses can also use the portal to view a consolidated list of all onboarded solutions and devices linked to their tax identification number. ZATCA first introduced e-invoicing in two phases, with Phase 1 requiring no integration with the authority and Phase 2 requiring direct system integration through the FATOORA Portal for reporting and clearance of invoices.
Taxpayers can reach the FATOORA Portal directly through the link fatoora.zatca.gov.sa, or through the Fatoora icon available on the official ZATCA website. Login to the portal requires ERAD credentials, which are separate from the credentials used for the Developer Portal. The ERAD login process requires the taxpayer to enter two specific details on screen, namely the tax identification number or the email address registered with ZATCA, along with the password linked to the taxpayer account.
Once a taxpayer logs into the FATOORA Portal, the landing page displays a set of facility icons that cover the complete lifecycle of e-invoicing solution management, from first registration through to ongoing monitoring. Each icon covers one specific compliance task, and the five facilities are explained below:
Onboard a new solution or device: register a new EGS unit on the FATOORA Portal and receive its first cryptographic stamp identifier through a one-time OTP code
Renew an existing stamp identifier: request a fresh CSID for a unit whose current identifier is expiring, using the same OTP-based process as onboarding
View onboarded solutions and devices: see a complete list of every registered EGS unit, with options to filter, sort, search or revoke any device on record
Check e-invoicing statistics: view how many submitted documents were accepted, accepted with warnings or rejected over the past twelve months, with CSV exports available for errors
Access API documentation: get redirected to the Developer Portal for the complete technical guides needed to build and maintain a compliant EGS unit
Onboarding is the process through which a taxpayer registers an e-invoicing generation solution unit and receives a valid cryptographic stamp identifier for that unit. The official ZATCA manual sets out four distinct steps for completing this process:
Step 1: After logging into the FATOORA Portal, the taxpayer selects the Onboard New Solution Unit or Device option.
Step 2: The taxpayer chooses the number of OTP codes required, based on how many EGS units need onboarding, since each unit requires a separate OTP code.
Step 3: The portal generates the requested OTP codes, valid for one hour, and displays them on screen, where they can be copied directly or downloaded as a file.
Step 4: The taxpayer enters the OTP code into the corresponding EGS unit within one hour of the code being generated, after which the unit is onboarded successfully.
Cryptographic stamp identifiers linked to an EGS unit require periodic renewal, and the FATOORA Portal manages this through the same OTP-based process used for onboarding.
Step 1: The taxpayer clicks on the option labelled renewing existing cryptographic stamp identifier after logging into the portal.
Step 2: The taxpayer selects the number of OTP codes needed, depending on how many EGS units require a renewed cryptographic stamp identifier.
Step 3: The portal generates the OTP codes, valid for one hour, and these can be copied or downloaded in a file.
Step 4: The taxpayer enters the OTP code into the relevant EGS unit within the one hour validity window, completing the renewal of that unit's cryptographic stamp identifier.
The FATOORA Portal maintains a complete record of every EGS unit that a taxpayer has onboarded, along with tools to manage that list directly from the dashboard. Taxpayers reach this record by clicking the option labelled view list of solutions and devices after logging into the portal, which opens a summarised list of every onboarded EGS unit. This list can be filtered, sorted and searched using specific inputs on the page, and any listed device can be revoked by selecting it and clicking the revoke option next to its name.
Before the revocation is finalised, the portal prompts the taxpayer to confirm the action through a confirmation message. Once confirmed, the cryptographic stamp identifier of that device is revoked and the EGS unit becomes inactive immediately.
The FATOORA Portal gives taxpayers visibility into invoice performance through a dedicated statistics dashboard, accessible by clicking the option labelled e-invoicing statistics after logging into the portal. This dashboard displays summarised statistics covering documents submitted for reporting and clearance over the past twelve months.
These statistics are divided into three categories: accepted documents, accepted documents with warnings and rejected documents. For the second and third categories, taxpayers can request detailed CSV files that list the specific errors and warnings linked to each submission.
Developers building or maintaining an EGS unit need direct access to ZATCA's technical documentation, available through the option labelled API documentation on the FATOORA Portal. Clicking this option after logging into the portal redirects the taxpayer straight to the Developer Portal, where the complete technical documentation for building compliant EGS units is available.
ZATCA has clarified that credentials used for the Developer Portal remain separate from the ERAD credentials used for the FATOORA Portal itself, so taxpayers need a distinct set of login details for this specific destination.
ZATCA has published a fixed set of API endpoints for the production FATOORA environment, and developers must configure their EGS units against these paths once a business moves into live invoice clearance. The simulation environment mirrors this structure exactly, with the word simulation replacing core in every path listed below:
Compliance CSID request at gw-fatoora.zatca.gov.sa/e-invoicing/core/compliance
Compliance checks for invoices at gw-fatoora.zatca.gov.sa/e-invoicing/core/compliance/invoices
Production CSID request or renewal at gw-fatoora.zatca.gov.sa/e-invoicing/core/production/csids
Reporting API for invoices, credit and debit notes at gw-fatoora.zatca.gov.sa/e-invoicing/core/invoices/reporting/single
Clearance API for invoices, credit and debit notes at gw-fatoora.zatca.gov.sa/e-invoicing/core/invoices/clearance/single
ZATCA has specified separate certificate template values for the certificate signing request configuration used during onboarding. The production environment requires the value ZATCA-Code-Signing, while the simulation environment requires the value PREZATCACode-Signing, and developers must apply the correct value based on the environment being configured.
The FATOORA Simulation Portal is an independent testing environment that mirrors the production portal, built specifically for end-to-end functional testing rather than live invoice clearance. Taxpayers access this environment through the same link, fatoora.zatca.gov.sa, and switch between the production and simulation views using a toggle available on the top right corner of the page. Before proceeding for the first time, taxpayers must read and accept the full terms and conditions presented on screen, and the portal may also require a reCAPTCHA step during OTP generation.
Every facility available on the production FATOORA Portal is mirrored inside the simulation environment, including onboarding, renewal, device management, statistics and API documentation access. However, ZATCA has confirmed that the two environments are fully independent, meaning devices onboarded in the simulation portal do not carry over to the production portal in any form. Device revocation inside the simulation environment also cannot be reversed once confirmed, though the same device can always be onboarded again as a new unit.
The table below summarises the core differences between the two environments, based directly on the official ZATCA user manual:
| Aspect | FATOORA Portal | FATOORA Simulation Portal |
| Purpose | Live clearance and reporting of e-invoices | End-to-end functional testing only |
| Data used | Live invoice data submitted for real transactions | Test data used only for functional testing |
| Official validity | Response is the official clearance outcome | Response carries no official clearance value |
| Device records | Independent list of onboarded EGS units | Separate, independent list of onboarded EGS units |
| Extra verification | Not required for OTP generation | May require reCAPTCHA during OTP generation |
Conclusion
The FATOORA Portal is the main platform ZATCA provides for managing e-invoicing compliance under Phase 2 in Saudi Arabia. It covers the complete lifecycle of an EGS unit, from onboarding and cryptographic stamp renewal through to device revocation and statistics tracking. The FATOORA Simulation Portal adds a separate testing environment, letting technical teams validate their integration before any invoice reaches live clearance. Since the two environments remain fully independent, testing thoroughly beforehand helps avoid disruptions once a business moves into live invoice submission.
The FATOORA Portal is ZATCA's official platform for onboarding EGS units, generating cryptographic stamp identifiers, renewing them, revoking devices and tracking e-invoicing statistics.
Every OTP code generated through the FATOORA Portal, whether for onboarding or renewal, stays valid for exactly one hour from the moment of generation.
No, ZATCA has confirmed that ERAD credentials used for the FATOORA Portal are entirely separate from the credentials required to log into the Developer Portal.
Yes, the same EGS unit can always be onboarded again as a new device through the standard onboarding process, a workaround ZATCA confirms explicitly for the simulation environment.
No, the FATOORA Simulation Portal exists purely for end-to-end functional testing, and none of its responses carry any official clearance value under ZATCA regulations.
Quick Navigation
Learn more by booking a demo with our team. We'll guide you step by step.