Compliance add-on
Included in every plan
ZATCA Phase 2
Saudi Arabia e-invoicing with cryptographic stamp, XML signing and reporting.
Read the manualWhat it does
Saudi Arabia's ZATCA Phase 2 e-invoicing rules require invoices to be cryptographically signed, QR-stamped, and submitted to the Zakat, Tax and Customs Authority in real time. Momentfy includes the complete flow — CSR, CSID issuance, UBL signing, clearance, and reporting — without relying on an external SaaS layer.
Key capabilities
Every moving part.
- CSR & CSID issuance
- Generate a Certificate Signing Request directly from the admin panel and submit it to ZATCA's Fatoora compliance endpoint. Paste the returned CSID back into Momentfy to authorise the device — sandbox certificates for testing, production for live clearance, switched with a single toggle.
- UBL 2.1 signing on your server
- Every invoice is built as a UBL 2.1 XML document, hashed with SHA-256, signed and stamped on your own server using the device private key. The keys never leave your infrastructure — no SaaS signer, no per-invoice fee, no vendor in the cryptographic chain.
- QR stamp on every receipt
- A TLV-encoded QR carrying seller name, VAT number, timestamp, total and VAT amount is stamped on every printed thermal receipt, A4 invoice and PDF download. The code is generated locally, so it works even when the connection to ZATCA is down.
- B2B clearance & B2C reporting
- B2B standard invoices flow through real-time clearance — the invoice is held until ZATCA returns the cleared XML and stamp. B2C simplified invoices use the reporting flow — printed instantly with the QR, then submitted within 24 hours per ZATCA rules.
- Hourly retry queue
- Failed or pending submissions land in a queue that an hourly cron re-processes automatically. Each retry records the error code and ZATCA response so support can audit exactly why a particular invoice was rejected.
- Cleared-invoice archival
- Cleared invoices are archived alongside the signed XML, the SHA-256 hash, the cryptographic stamp and the ZATCA UUID. Auditors get the full chain of custody — issuance, clearance, retention — straight from the database.
- Saudi Riyal glyph (U+20C1)
- The new SAR symbol is bundled as a custom font and rendered correctly on every receipt, invoice and PDF — including thermal printers that don't carry it natively. Receipts print compliant from the day you flip the switch.
Who it's for
"Any Saudi-registered business with a Tax Registration Number issuing VAT invoices."
Setup
Four steps from enable to production — no external services required.
From disabled to live.
01
Enter your TRN on the tenant settings page
02
Generate a CSR in the admin and upload it to the ZATCA Fatoora portal
03
Paste the CSID response back into Momentfy
04
Test in sandbox, then flip to production
Integrates with
The modules this add-on plugs into out of the box.
More from Compliance
Explore the chapter.
Ship your business platform this weekend.
Buy the source once. Deploy on your own server. Charge your clients whatever you want. Keep 100% of the revenue.