Audit readiness: how to evidence your numbers
The previous lessons walked through a full cycle: issue the invoice, keep the record, file the return, then pay and correct. One question remains, and it worries many owners: what if the Authority asks to see what sits behind those numbers? This lesson is about audit readiness — which, in practice, is far less about the audit itself than about how you work every day.
Why would the Authority review a business?
The Zakat, Tax and Customs Authority has the right to verify what businesses have declared, as any tax system does. A review is not an accusation. It may be triggered by procedural signals: an unusual gap between output and input tax, a refund request, a mismatch between what you declared and what a supplier or customer reported, or selection within a sector-wide campaign.
What separates a business that passes calmly from one that ends up in crisis is not luck. It is whether every number can be evidenced with a document within a reasonable time.
What is actually requested
Requests are for documents that support figures, not for verbal explanations. Expect to produce:
- Sales invoices issued in the period, in their compliant format.
- Purchase invoices whose tax you deducted as input tax, issued in the business name with its VAT number.
- Credit and debit notes, with the reason for each.
- Bank statements and whatever links collections to invoices.
- Inventory records and movements, if you trade in goods.
- Contracts or purchase orders that explain large or unusual transactions.
The common failure is not a missing document — it is a scattered one: the invoice in an inbox, the transfer in a chat, the note in a notebook. A document you cannot retrieve in time behaves exactly like a document you never had.
A concrete example
A small contracting firm receives a query about a quarter in which it deducted large input tax:
| Item queried | State when requested | Outcome |
|---|---|---|
| Large materials purchase | Invoices filed and linked to a purchase order | Accepted as filed |
| Equipment invoice | Issued in the partner's personal name, not the business | Deduction rejected, return adjusted |
| Hospitality expense | Invoice exists, but the item is not deductible | Removed from input tax |
| Customer credit note | Booked in the ledger with no numbered document | Substitute evidence requested, took days |
Note that two of the four failed with no bad intent involved — a name on an invoice and a non-deductible category. That class of error is prevented early; it cannot be fixed during an audit.
How to stay permanently ready
- Attach the document to the entry at the moment of entry, never later. An entry without an attachment is a debt you owe your future self.
- Check the business name and VAT number on every purchase invoice before accepting it. This is the single most common reason input tax is rejected.
- Lock a period once its return is filed, so its figures cannot drift through a casual later edit.
- Keep an audit trail of changes: who edited, when, and why. Missing trails turn a narrow question into a broad investigation.
- Name one person responsible for answering correspondence from the Authority, and confirm where that correspondence actually lands.
- Check zatca.gov.sa for the statutory periods during which the Authority may reassess, and align your record retention with them. Those periods define how long you keep records — not your own estimate of what you will need.
And when a real query arrives: do not let the stated deadline pass, request an extension rather than sending an incomplete response, and reply with ordered, numbered documents that map to return line items — not a folder of loose files.
Quick checklist
- Could you produce every invoice for a given quarter within an hour?
- Is every purchase invoice in the business name with its VAT number?
- Are filed periods locked against silent edits?
- Do you know where the Authority's correspondence arrives, and who reads it?
This lesson is introductory and does not replace the official texts on the Zakat, Tax and Customs Authority website or advice from a tax specialist for your own case.