Last updated: 6 September 2026
Saudi Regulatory Compliance
Finvise Arabia is being built for the Saudi regulatory environment from the start. This page sets out the frameworks we design against and, just as importantly, what is not yet certified.
ZATCA e-invoicing (Fatoora)
The Zakat, Tax and Customs Authority requires taxpayers in the Kingdom to issue e-invoices and, in Phase 2 (Integration), to connect their invoicing system to the Fatoora platform so invoices are cryptographically signed and cleared or reported. Phase 2 is being rolled out in waves by taxpayer revenue, so your own deadline depends on your wave. Finvise Arabia's invoicing pipeline is being built to UBL 2.1 XML, ECDSA signatures, QR codes, and clearance/reporting against Fatoora.
VAT and Zakat
Reconciliation and reporting outputs are designed to follow the VAT Implementing Regulations and the record-keeping duties that apply to taxpayers in the Kingdom, so filings can be evidenced and audited.
Personal Data Protection Law (PDPL)
We follow the Saudi PDPL and its Implementing Regulations, issued under SDAIA: explicit consent, purpose limitation, data-subject rights, breach notification, and controls on cross-border transfer.
Data residency and cloud
The platform is architected so that compute, client records, and databases reside in Tier-3 data centres inside the Kingdom, in line with the Cloud Computing Regulatory Framework and NCA cloud cybersecurity expectations.
Cybersecurity
Our security design references the National Cybersecurity Authority's Essential Cybersecurity Controls: encryption in transit and at rest, role-based least-privilege access, tenant isolation, logging, and audit trails.
Anti-Cyber Crime Law and electronic transactions
Use of this website and, in future, the platform is subject to the Anti-Cyber Crime Law and the Electronic Transactions Law of the Kingdom.
What is not yet certified
Finvise Arabia is pre-launch. No statement on this website should be read as a ZATCA certification, an accreditation, a SOC or ISO certificate, or a guarantee of compliance outcomes. Certifications and onboarding with ZATCA will be published here once they are formally in place. Always confirm your own obligations with ZATCA or a licensed advisor.
Contact
Questions about this page? Write to shoaib@finvisearabia.com or Finvise Arabia, Riyadh, Kingdom of Saudi Arabia.