E-Invoicing (Fatoora) for Medical Clinics in Saudi Arabia
E-invoicing looks like an accounting topic, but inside a clinic it's an operational one: who issues the invoice, when, and what happens on a refund or a changed treatment plan. This guide covers the cases clinics actually hit.
The Zakat, Tax and Customs Authority (ZATCA) rolled out the Fatoora e-invoicing system in two phases: the Generation phase, which began in December 2021, and the Integration phase, which began in January 2023 and applies to businesses in successive waves by revenue size. Private clinics are in scope like any other VAT-registered business.
Note
This article is general explanatory content, not tax advice. Wave timing, deadlines, and the VAT treatment of healthcare services change by official decision — always check the Authority's published requirements and consult your accountant before acting.
The two phases: what actually differs
| Aspect | Phase 1 (Generation) | Phase 2 (Integration) |
|---|---|---|
| Core requirement | Stop paper and handwritten invoices | Connect the system directly to the Authority's platform |
| Format | Structured electronic invoice | XML, or PDF/A-3 with embedded XML |
| QR code | Required on simplified invoices | Required, with additional verification elements |
| Cryptographic stamp | Not required | Required, with a unique UUID and a hash chain |
| Timing | At issuance only | Clearance for standard invoices, reporting for simplified ones |
| Impact on the clinic | Change the issuing tool | Change the system so it is connected |
Which invoice type does your clinic issue?
Clinics issue both — which is exactly what confuses systems designed around a single line of business.
- Simplified tax invoice: for the individual patient paying for themselves. This is the vast majority of clinic invoices, and it requires a QR code.
- Standard tax invoice: when the buyer is a VAT-registered entity — an insurer, a company contracting employee screenings, or a government body. It requires full buyer details including the VAT number.
The case everyone forgets
Corporate employee-screening contracts are billed to a legal entity, which makes them full standard tax invoices, not simplified ones. Many clinics issue them as simplified invoices by mistake and then have to fix it with correction notes.
Fields your system must fill automatically
Any field that depends on manual entry is a field someone will eventually get wrong. The rule: anything derivable from the clinic profile or the patient record should be populated automatically.
- Legal clinic name, VAT registration number, and national address
- Issuance date and time to the minute (not just the date)
- A unique sequential number with no gaps or resets
- A clear description of each service with quantity and unit price
- Tax amount and rate per line, plus the total
- Grand total including tax
- Full buyer details for standard tax invoices
- A QR code carrying the required content
Medical edge cases
This is where generic, non-healthcare systems break. A clinic workflow is not "sell a product, issue an invoice".
Multi-visit treatment plans
Dental work or a physiotherapy package runs for weeks. When is the invoice issued — at the start, per session, or on completion? The answer depends on your policy and on when the tax point falls, and the system must clearly support the model you choose rather than forcing one on you.
Deposits and instalments
A deposit against a treatment plan has its own tax treatment. The system must distinguish "amount received" from "service delivered", and link payments to the final invoice without double-counting tax.
Refunds and cancelled services
An issued invoice is never deleted. Corrections go through a credit note or debit note referencing the original. A system that lets a receptionist "delete" an invoice creates a sequence gap — among the first things noticed in a review.
Insurance-covered vs patient-paid portions
One visit can produce two obligations: the patient's co-payment and the amount claimed from the insurer. The system must handle that split without double-invoicing the same service. The claims side is covered in our NPHIES guide for clinics.
The most common clinic mistakes
- Invoices issued outside the system: a handwritten receipt "just for urgent cases" — a shortcut that becomes a sequence gap and a review finding.
- Stale clinic details: a changed address or legal name not updated in the system makes every issued invoice non-conforming.
- Deleting invoices instead of issuing notes: the most damaging mistake, because it looks like the easy fix in the moment.
- Broken numbering: systems that restart invoice numbers each year or per branch without clear logic.
- Untested backups: issued invoices must be retrievable on demand — actually test a restore at least once.
Clinic checklist
- Every invoice issued from the system — no paper exceptions
- VAT number and national address correct in clinic settings
- Automatic simplified-vs-standard selection based on buyer type
- Credit and debit notes instead of deletion
- Continuous, tamper-evident numbering
- Backup and a tested invoice restore
- Front-desk training on the edge cases: insurance, refunds, deposits
- Periodic review with your accountant
Medical billing ready on day one
3yadtk issues invoices with VAT calculated automatically per country, and supports credit and debit notes, payment plans, and insurance co-payment splits — in the same plan, with no separate billing module.
See what the plan includes