As tax frameworks mature in the Gulf, Saudi businesses face increased scrutiny from the Zakat, Tax and Customs Authority (ZATCA) on VAT, corporate tax, and zakat filings. Understanding the audit process and maintaining documentation is essential.

• Audit Triggers and Selection Criteria

Audits are risk-driven, using data analytics and cross-verification to spot irregularities in financial statements.

ZATCA initiates audits for:

- Unexplained discrepancies between corporate tax returns and VAT filings, or sharp profit fluctuations without justification;

- Consistent loss reporting vs. sector peers;

- Large/unusual VAT refund claims;

- Frequent voluntary disclosures/amendments;

- High related-party transactions without transfer pricing documentation;

- Delayed filings/payments;

- Mismatches between reported revenue and financial statements;

- Links to investigated entities; and

- Whistleblower reports.

• ZATCA Audit Powers and Process

ZATCA oversees all taxable/zakat-paying entities, reviewing financial records, contracts, bank statements, e-invoicing data, import-export records, and sector-specific documents.

• Audit Process:

- Notification via ZATCA portal/letter specifies audit type, review period, and required documents;

- Taxpayers submit info within timeframe; late submission = non-compliance;

- Data compared to returns/e-invoicing;

- Examination: desk audit or on-site review with staff interviews;

- Formal requests for explanations/additional data;

- Findings report: discrepancies, adjustments, penalties;

- Taxpayers contest/provide clarifications pre-final assessment;

- Final assessment issued post-response, including additional tax/zakat/penalties.

• Time Limits for Tax Assessments

Standard limitation: 3 years from end of calendar year of filing deadline. Extends to 10 years for non-filing, suspected evasion, or taxpayer consent. Refunds for overpaid zakat/tax claimable within 3 years of same period.

• Saudi Arabia Requirements

ZATCA mandates maintaining:

- Audited financial statements (if applicable);

- VAT/zakat filings;

- Compliant tax invoices/credit notes;

- Contracts/agreements;

- Bank reconciliations/zakat working papers;

- Transfer pricing docs (Master File, Local File, CbCR);

- FATOORA e-invoicing records; and

- Exemption/special treatment support docs.

E-invoicing data archived for ≥6 years.

• Saudi Arabia Audit Types

ZATCA uses a tiered system:

• Desk audits: Off-site; request VAT returns, invoices, reconciliations via FATOORA for minor inconsistencies/unusual patterns.
• Field audits: Comprehensive on-site; inspect systems, contracts, docs; interview staff. Targets large/foreign-owned/high-risk firms (e.g., oil, tech, finance).
• Electronic audits: Continuous FATOORA data analysis for invoice/declaration Integrated systems reduce exposure.

• Saudi Arabia Penalties

Fines for non-registration, inaccurate filings, evasion:

• VAT non-registration: SAR 10,000 (US$2,666.3);
• Delayed returns: 5-25% of undeclared tax;
• VAT non-payment: 5% monthly, up to 25%;
• Issuing invoices as non-registered: up to SAR 100,000 (US$26,663.5);
• Record-keeping failures: up to SAR 50,000 (US$13,331.7);
• Incorrect filings: 50% of tax difference.

E-invoicing violations: SAR 5,000-100,000 by severity. Evasion: up to 3x evaded amount; severe/repeated = imprisonment. Delayed payments: 1% monthly, capped at 25%.

• Saudi Arabia Appeal Process

Administrative/judicial remedies available:

• Respond to audit report with docs/explanations within period; disputed assessments reviewed internally by ZATCA committees.
• If unresolved, pursue legal settlement: admit violation, submit docs for reduced fines/no prosecution.
• Escalate to Tax Appellate Committee for statute/assessment disputes.
• Preparing for Audits

Internal Health Checks

Conduct mock audits to fix reporting weaknesses. Reconcile ledgers with returns; resolve discrepancies pre-notice.

Document Organization

Follow “Completeness, Defensibility, Consistency”:

• Completeness: All required corporate tax/VAT docs available;
• Defensibility: Records substantiate positions/decisions;
• Consistency: Figures align across statements, filings, schedules.

Designate audit liaison for clear ZATCA communication.

Proactive Compliance

Maintain ongoing readiness, not reactive. Integrate e-invoicing with FATOORA.