Tax Audit Rights & ZATCA Procedures in Saudi Arabia
Reviewed by the Commoner Law Editorial Team. Sourced from Saudi royal decrees, regulations, and ministerial decisions. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
If ZATCA audits your tax or Zakat returns, you have specific rights — but ZATCA has become significantly more active in enforcement since the 2021 merger that combined tax and customs into a single authority:
- Notification: ZATCA must notify you in writing before beginning an audit.
- Scope: The audit must be related to specific tax periods and issues — ZATCA cannot conduct unlimited investigations.
- Record access: You must provide requested records, but ZATCA should give reasonable time to gather documents.
- FATOORA data: Since e-invoicing integration, ZATCA has real-time access to your invoice data — audits increasingly start with discrepancies flagged by FATOORA before a formal audit notice is even issued.
- Assessment: After the audit, ZATCA issues an assessment notice detailing any additional tax owed and the reasons.
- Limitation period: ZATCA generally cannot audit returns older than 5 years from the filing date, except in cases of fraud or tax evasion.
When does it apply?
- ZATCA has notified you of an upcoming audit.
- You have received an additional tax or Zakat assessment following an audit.
- ZATCA has flagged discrepancies in your FATOORA e-invoicing data.
What to Do If ZATCA Is Auditing Your Business in Saudi Arabia
- Cooperate with the audit — provide requested documents through the ZATCA portal on time.
- Keep organised records — financial statements, contracts, invoices, FATOORA data, and supporting documentation.
- If you disagree with the assessment, file an objection within 60 days through the ZATCA portal.
- Consider hiring a ZATCA-experienced tax advisor to represent you — the merged authority handles tax, Zakat, and customs together, and cross-issue audits are increasingly common.
What should you NOT do?
- Do not ignore audit notices — failure to cooperate results in estimated assessments (usually unfavourable) and penalties.
- Do not destroy or alter records — this is a criminal offence, and FATOORA data creates an independent audit trail that ZATCA can cross-reference.
- Do not miss the 60-day objection deadline — once it passes, the assessment becomes final and enforceable.
Common Questions
When does it apply — tax audit rights & zatca procedures?
ZATCA has notified you of an upcoming audit.You have received an additional tax or Zakat assessment following an audit.ZATCA has flagged discrepancies in your FATOORA e-invoicing data.
What should I do if ZATCA has notified me of a tax audit in Saudi Arabia?
Cooperate with the audit — provide requested documents through the ZATCA portal on time.Keep organised records — financial statements, contracts, invoices, FATOORA data, and supporting documentation.If you disagree with the assessment, file an objection within 60 days through the ZATCA portal.Consider hiring a ZATCA-experienced tax advisor to represent you — the merged authority handles tax, Zakat, and customs together, and cross-issue audits are increasingly common.
What should you NOT do — tax audit rights & zatca procedures?
Do not ignore audit notices — failure to cooperate results in estimated assessments (usually unfavourable) and penalties.Do not destroy or alter records — this is a criminal offence, and FATOORA data creates an independent audit trail that ZATCA can cross-reference.Do not miss the 60-day objection deadline — once it passes, the assessment becomes final and enforceable.