Hello Team,
I would like to understand if there are any specific requirements from ZATCA that solution providers must adhere to. I searched through the forum but couldn’t find clear information on this.
We are developing a SaaS-based solution for EGS onboarding, renewal, and invoice processing in compliance with Phase 2 requirements, on behalf of multiple customers.
Below is a brief overview of our solution:
- EGS Component Service – Deployed on EGS to handle certificate creation/renewal, invoice preparation, and signing. The signed invoices will be forwarded to a cloud-based Invoice Processing Service.
- Invoice Processing Service – A single-instance service with separate databases for each customer, ensuring data isolation. This service manages communication with ZATCA’s API and relays responses to the respective Customer EGS in a timely manner.
Could you please confirm whether the above approach aligns with ZATCA’s guidelines for solution providers? Additionally, are there any other requirements we need to meet to ensure full compliance?
Also, is there a mandatory registration process for being listed as a ZATCA-compliant solution provider?
Any guidance or insights on these points would be greatly appreciated.
Best regards,
Kassim Shaikh