Q1 2026: GCC Mandate Landscape — What Changed

Every quarter the GCC e-invoicing mandate picture shifts. A country announces a phase date. A technical specification is revised. A wave expands to new taxpayer segments. This is the Q1 2026 summary of what changed and what it means for enterprise compliance planning.

Saudi Arabia: Wave 7 is underway

ZATCA's Phase 2 wave rollout continues. Wave 7 targets taxpayers with annual revenue above SAR 50 million who were not included in earlier waves. Integration notices are being issued. Enterprises in this segment that have not yet initiated Phase 2 implementation are in the danger zone.

The technical requirements for Phase 2 have not changed materially since Phase 1: ECDSA private key held securely, CSID provisioning via ZATCA's Fatoora portal, clearance-before-delivery for B2B, and the specific XML format compliant with UBL 2.1 adapted for KSA. What does change with each wave is the enforcement calendar. ZATCA has been consistent: enterprises that miss their wave date face penalty exposure.

The practical implication for Wave 7 enterprises: if you have not yet assessed your ERP stack for Phase 2 readiness, begin now. The assessment-to-production timeline for SAP, Oracle, and Microsoft Dynamics implementations is typically 60–90 days on a well-resourced project. Tally and Odoo implementations typically run slightly faster.

UAE: Peppol PINT AE timeline confirmed

The UAE Federal Tax Authority has confirmed the Peppol PINT AE e-invoicing mandate timeline. The UAE has adopted the Peppol framework as its interoperability standard, with GoRoute.ai holding Access Point certification POP000991 under the UAE Peppol Authority.

For UAE-based enterprises, the immediate action is awareness: the technical standard is Peppol PINT AE (a UAE-specific Peppol Invoice format), not ZATCA's UBL format. Enterprises that are already ZATCA-compliant should not assume their Saudi implementation transfers directly to the UAE — the standards are related but not identical.

GoRoute.ai, ClayDesk's sister company, is a certified UAE Peppol Access Point. Enterprises connecting to the UAE Peppol network through GoRoute.ai have a direct connection to the FTA-authorised network through an Access Point they can audit and have contractual visibility into — the sovereign architecture recommended in our SFI practice.

Bahrain: NBR Phase 2 draft published

Bahrain's National Bureau for Revenue has published a draft specification for Phase 2 e-invoicing requirements. The draft follows a UBL-aligned approach consistent with the broader GCC trajectory. Implementation timelines have not been finalised, but the publication signals that Phase 2 is no longer aspirational — it is entering the formal mandate development process.

Enterprises operating in Bahrain should use this period to assess their ERP integration readiness. Bahrain Phase 1 introduced basic structured invoicing requirements; Phase 2 will add clearance obligations. The gap from draft to mandatory compliance has been compressed in every prior GCC mandate — do not assume the current quiet period will last.

Oman: OTA timeline remains unconfirmed

The Oman Tax Authority's e-invoicing mandate has been signalled but not formally specified. Oman's VAT framework is among the youngest in the GCC, and the OTA is approaching e-invoicing systematically. No timeline for mandatory e-invoicing has been published as of Q1 2026.

However, the trajectory is clear. Every GCC country with a VAT system has either implemented or is implementing structured e-invoicing mandates. Oman will follow. Enterprises operating in Oman should treat the current period as preparation time, not absence-of-mandate time.

Qatar and Kuwait: Digital foundations building

Qatar's General Tax Authority and Kuwait's Ministry of Finance are both investing in digital tax infrastructure. Neither has published a mandatory e-invoicing timeline. The underlying VAT and taxation reform work in both countries creates the precondition for mandates — but mandates themselves are not yet announced.

The broader pattern

The GCC e-invoicing trajectory is converging on a common architecture: Peppol-aligned interoperability standards, clearance-based B2B invoice flows, and structured data requirements that go well beyond a scanned PDF. Saudi Arabia is the most mature; the UAE is accelerating; Bahrain, Oman, Qatar, and Kuwait are at earlier stages of the same journey.

For enterprise compliance teams, the strategic implication is consistent: build compliance infrastructure that is designed for the GCC as a whole, not just for the country with the most immediate mandate. An SAP or Oracle integration built correctly for ZATCA Phase 2 should be extensible to UAE Peppol PINT AE without a full rebuild. That extensibility is a design choice, not an accident.