Compliance Checks for CSIDs

Onboarding, renewal and revocation
1

Should the documents to be submitted for Compliance checks for each CSID be documents generated by the user or can this feature be automated by the EGS by sending dummy documents for compliance checks?

2

The short answer is, no it can’t be a dummy invoice, it should be with the real VAT number associated with the FATOORA portal account and signed with the provided X.509 certificate for that EGS, for more details please find the below:

  1. Completing the compliance CSID (CCSID API) is a prerequisite to being able to send compliance checks (Compliance Invoice API). The compliance CSID is generated upon submitting a valid CSR. In order to generate your CSR, you need to provide real information that matches the FATOORA portal, such as your VAT number and other fields.
  2. The compliance checks (Compliance Invoice API) will validate submitted invoices and their associated notes based on the information provided in the submitted CSR. It will also check if the invoices have been signed correctly with the provided X.509 certificate for that EGS.

Although some information in the invoice must match the real one, such as the VAT number, the compliance checks invoices will not be submitted to ZATCA. This is because the compliance checks are designed to ensure that the EGS is properly configured and is able to generate valid electronic invoices. Therefore, some information may be dummy and some of them may not be. So, it can be a dummy invoice with the right structure and VAT number and signed with the provided certificate.

I hope this answers your question,