ZATCA Tax Audit Checklist: 10 Documents to Prepare Before an Audit

Auditors form their opinion of a company in the first week, and they form it by one measure: how quickly and how cleanly the requested documents arrive. A file that shows up indexed, reconciled and complete ends conversations before they start. A file that trickles out in pieces invites more questions. This ZATCA audit checklist covers the documents auditors request first, and doubles as a VAT audit preparation guide: the same records serve both. It lists the ten document groups a ZATCA tax audit will touch, the record keeping requirements ZATCA applies, and the gap that most often shows up, so you can find it before they do.

Last reviewed: October 2026

1The 10 documents on the ZATCA audit checklist

Score your company on each group below as ready, partial or missing, and work through the list with your finance team before the notice arrives.

1. Audited financial statements

What it is. The audited statements for the years under review, with the auditor’s report and notes.

What the auditor checks. Consistency between the statements and the returns filed for the same years. Revenue in the financials versus revenue declared for VAT and income tax; zakat computations versus equity movements.

The common gap. Draft statements that never got finalised, or statements that differ from the filed return because an adjustment was booked after filing without an amended return.

2. Trial balance and general ledger

What it is. The full trial balance for each period, and the general ledger behind it, exportable to Excel.

What the auditor checks. The VAT control account against declared net VAT; revenue accounts against e-invoice totals; expense accounts against input VAT claimed.

The common gap. No VAT control account exists at all. The company tracks VAT only inside the returns, so there is nothing to reconcile the return to.

3. VAT returns with a reconciliation to the ledger

What it is. Every VAT return for the audit period, plus a short reconciliation from the return figures back to the ledger.

What the auditor checks. The VAT reconciliation from return to ledger, period by period. Whether the boxes in the return tie to the books. Late filings and corrections are visible here.

The common gap. The returns exist but no one can explain a recurring difference of a few thousand riyals between the return and the ledger. Small unexplained differences that repeat every period are a red flag in themselves.

4. Sales tax invoices and e-invoice records

What it is. Copies of issued tax invoices, simplified invoices for retail, and the e-invoice archive as generated through the FATOORA framework.

What the auditor checks. Sequential numbering, all required fields, QR codes on simplified invoices, and that the e-invoice data matches the declared output VAT. Under Phase 2 of e-invoicing, invoices must integrate with ZATCA’s platform as each taxpayer’s wave takes effect, and the integration rules also shape what a compliant archived invoice looks like.

The common gap. Credit notes issued without a stated reason or without linking back to the original invoice. Credit notes without reasons are the first thing a suspicious auditor opens.

5. Purchase invoices supporting input VAT

What it is. The supplier invoices behind every riyal of input VAT deducted.

What the auditor checks. That each is a valid tax invoice with the supplier’s VAT number and required fields, and that the expense is not in a blocked category.

The common gap. Missing invoices for large purchases, or invoices in the company name of an employee. Input VAT without a valid invoice comes straight back out of the return, with penalties on top.

6. Customs declarations and export evidence

What it is. Customs declarations for imports, and shipping and clearance documents proving exports left the GCC.

What the auditor checks. Imported costs against declared customs VAT; zero-rated export sales against real proof of export.

The common gap. Sales booked as zero-rated exports to a GCC customer with no shipping documents, because delivery happened by the customer’s own transport. Without evidence, the zero rate falls away.

7. Zakat and income tax returns with computations

What it is. The filed zakat or income tax returns for each year, with the full zakat base and taxable profit computations behind them.

What the auditor checks. The build-up of the zakat base: equity, long-term liabilities, deductions for fixed assets. For mixed companies, the split between the zakat share and the tax share.

The common gap. Computations that cannot be reproduced from the financial statements, because they were prepared once, by someone who has since left, in a file nobody can find.

8. Withholding tax returns and payment evidence

What it is. Monthly WHT returns and the SADAD payment receipts for payments to non-residents.

What the auditor checks. Foreign payments in the ledger against WHT returns filed. Royalties, management fees, technical services and interest are the usual suspects.

The common gap. Payments to foreign group companies recorded as “recharges” with no WHT analysis at all. The auditor adds the missing tax, penalties and late payment charges in one working paper.

9. Key contracts

What it is. Major customer and supplier contracts, and all related-party agreements.

What the auditor checks. That the contracts match the accounting treatment: who bears the risk, when revenue is recognised, and whether related-party prices look arm’s length.

The common gap. Related-party services provided with no written agreement at all. The charge then risks disallowance, and in a mixed company it moves profit between the zakat and tax bases.

10. Fixed asset register and bank statements

What it is. The fixed asset register with cost, depreciation and net book value, plus bank statements for the main accounts.

What the auditor checks. Assets deducted in the zakat base against the register; large or unusual payments through the bank accounts against the books.

The common gap. A register that exists in name only, last updated two years ago, while the zakat computation deducted assets that are no longer in use.

2How long you must keep records

VAT records must be kept for a minimum of 6 years from the end of the tax period they relate to, per the record-keeping rules in the VAT Implementing Regulations. Capital asset records run longer, and the period follows the asset type: records for movable capital assets are kept for about 11 years, and records for immovable property for about 15 years, under the current official retention rules. Other tax laws carry their own retention rules, and some run longer than the VAT minimum, so confirm the period for each tax type rather than assuming one number covers everything. Keep the records in the form the law requires: e-invoices stay in electronic form, electronic records must remain readable, and records must be kept in Arabic. A practical test: open a random 3-year-old e-invoice from your archive every quarter. If it will not open, or prints without the required fields, your archive is failing quietly.

3How to organise the file

The difference between a two-week audit and a four-month audit is usually the state of the file.

1. Build a numbered index that mirrors the information request, item by item.
2. One folder per request item. No mixed folders, no “miscellaneous”.
3. Reconciliations on top of each folder: the auditor reads the reconciliation first.
4. One named person responsible for every submission. All documents leave through that person, and everything sent is logged with a date.
5. Never submit a document you have not read. You own every page the auditor finds in your submission.

One question decides the structure of the whole file: what did the auditor actually ask for? The information request defines the scope. Build the index around its items, in its order, with its numbering. A beautiful file organised your way, not the auditor’s way, still reads as a missing file.

4Five warning signs your records are not audit-ready

• Unreconciled VAT differences. The return says one number, the ledger says another, and the gap repeats every quarter.
• Missing tax invoices for large purchases. If you cannot produce the invoice, treat the input VAT as already lost.
• Exports without proof of export. Zero-rated sales with no customs or shipping trail.
• Credit notes without reasons. A pattern of unexplained credit notes is the fastest route from a records check to a fraud question.
• Related-party charges without agreements. Group recharges with no contract, no basis and no WHT analysis.

Each of these is findable in an afternoon of self-review, months before ZATCA ever writes. An afternoon is a cheap price.

5Building the file: a two-week plan

If your scorecard came back with more “missing” than “ready”, do not try to fix everything at once. This sequence covers the ground in two working weeks:

1. Days 1-2: scope and index. List the audit periods, the tax types and the ten document groups. Mark each ready, partial or missing.
2. Days 3-5: reconciliations first. VAT return to ledger, zakat and tax computations to financial statements. These two reconciliations answer most auditor questions before they are asked, and they take priority over collecting more paperwork.
3. Days 6-8: the invoice gap. Pull the input VAT claimed for the largest purchases and match each to a valid tax invoice. Request replacements from suppliers now; it is the slowest fix on the list.
4. Days 9-10: related parties. Collect every related-party agreement, and create a proper written record of each arrangement as it actually stands, dated today. Never backdate an agreement to cover a past period; a fabricated date turns a documentation gap into an evidence problem. Where charges were made in the past without any agreement, have a licensed adviser review how to document the history correctly before you file anything.
5. Days 11-12: WHT sweep. List all foreign payments for the audit periods and check each against a WHT return. Any missed item goes into a voluntary disclosure, not into a drawer.
6. Days 13-14: index and handover. Finalise the numbered index, name the person who owns submissions, and brief them on the log.

A company that runs this plan twice a year, not just when a notice arrives, stops treating audits as emergencies.

6FAQ

Can I submit documents electronically?

Yes. Most ZATCA audits are desk audits and document submission happens through the portal. Keep uploads indexed and named to match the request items.

What if some invoices are missing?

Say so early, in your own words, with the reason and what you have done: supplier copies requested, bank evidence provided instead. A disclosed gap is a finding; a hidden gap is a bigger one. Auditors treat a company that volunteers its weaknesses with more trust than one that makes them search for them, and the conversation stays on documents rather than intent.

Do I need audited statements for a VAT audit?

The auditor will ask for the financial statements whether or not they are audited. Unaudited statements make every reconciliation harder, which is its own argument for annual audits.

How far back should records go?

Keep VAT records at least 6 years from the end of the relevant tax period, and longer for capital asset records. Confirm the periods for zakat and income tax records against the current law text, because they can exceed the VAT minimum. When in doubt, keep the file: storage costs far less than a reassessment you can no longer defend with documents.

7Next step

Pick the ten document groups above and score your company on each this week: ready, partial, or missing. Everything scored below ready becomes a task with an owner and a date. If you want the full preparation method, from document file to objection strategy, the ZATCA Tax Audit Preparation & Dispute Resolution course covers it end to end. And if a notice has already arrived, read what happens during a ZATCA tax audit before you respond to anything.

Related reading: common VAT mistakes that lead to ZATCA penalties and how to file a VAT return in Saudi Arabia.

This article is general information, not legal or tax advice. Rules change; confirm with the official source or a licensed adviser.