Migration & Consolidated Archive Policy

Migration & Consolidated Archive Policy

This Migration & Consolidated Archive Policy (“Policy”) describes how Abzer DMCC (“Abzer”, “we”, “our”, or “us”) supports Merchants (“you”, “your”) in migrating invoice data to or from the FatooraOnline® Platform (“Platform”) and managing long-term invoice archives. The Policy explains responsibilities, service boundaries, and compliance considerations related to ZATCA Phase 2 and data-retention requirements. It is informational and does not create contractual obligations or data-storage warranties.

All invoice and transaction data uploaded to the Platform remain the exclusive property and responsibility of the Merchant. Abzer acts solely as a technical processor providing secure storage, archival tools, and data-export functionality. The Merchant retains full accountability for ensuring the completeness, legality, and accuracy of its records, including any information imported from third-party systems.

Merchants migrating from another solution may import invoice data in structured XML, CSV, or other supported file formats using FatooraOnline’s migration interface or through Abzer’s optional professional-service support.

Migration assistance may include:

  • format mapping and field alignment;
  • limited data-quality checks for compatibility; and
  • verification that imported invoices meet ZATCA Phase 2 structural requirements.

Abzer’s role is limited to technical facilitation. The Merchant is responsible for verifying data integrity and regulatory compliance of all migrated records. Migration services beyond self-service import are provided on a paid, project-specific basis under a separate statement of work.

When a Merchant terminates its subscription or chooses to move to another platform, FatooraOnline provides an export feature allowing invoices and related documents to be downloaded in ZATCA-compliant formats (PDF/A-3 with embedded XML).

Data remains available for export for thirty (30) days after account closure. After this period, the data is securely deleted from active systems, consistent with Abzer’s Data Retention Policy. Merchants are encouraged to perform their own backups and confirm the completeness of exported files before closure. Abzer is not responsible for data loss resulting from a Merchant’s failure to export within the retention window.

To support long-term retention requirements under Saudi tax regulations, FatooraOnline offers an optional Managed Archive Service. This service, available for a one-time or annual fee, allows Merchants to:

  • maintain a read-only copy of cleared invoices for extended durations;
  • generate consolidated monthly or annual archives; and
  • retrieve data for audits or regulatory review.

Managed Archive Services are subject to separate commercial terms and are not included in standard subscriptions. Abzer does not guarantee perpetual storage and may purge archived data upon service expiry or as required by law.

All imported or exported invoices retain their original ZATCA-issued identifiers, cryptographic stamps, and clearance status. FatooraOnline does not alter, validate, or re-clear previously cleared invoices. Merchants must verify authenticity through the ZATCA verification QR code or portal. Abzer provides no legal assurance or representation regarding third-party data quality.

Under ZATCA and PDPL regulations, Merchants are required to maintain invoice records for the prescribed retention period (typically six years). FatooraOnline facilitates this requirement through available export and archival functions but does not assume responsibility for long-term record-keeping or compliance audits. Merchants must ensure their own backup, archival, and retrieval capabilities consistent with legal obligations.

All migration and archive operations occur within the Kingdom of Saudi Arabia on Oracle Cloud Infrastructure (OCI). Files transferred for import or export are encrypted in transit (TLS 1.3) and at rest (AES-256). Access to migration and archival data is restricted to authorized personnel involved in the specific project and governed by Abzer’s Information Security Management System. No cross-border transfer occurs without PDPL-compliant safeguards.

Migration assistance, custom data transformation, or Managed Archive Services may incur additional fees depending on scope and data volume. Pricing is defined in the applicable order form or proposal. Failure to pay applicable fees may result in suspension or deletion of pending migration or archival projects.

Abzer’s responsibility in any migration or archive activity is limited to the provision of reasonable technical support and infrastructure access. Abzer is not liable for data loss, corruption, or compliance breaches arising from inaccuracies in source data, delayed export requests, or Merchant misuse of migration tools. In all cases, Abzer’s liability is limited to the fees paid for the specific migration or archive service, subject to the limitations set out in the Terms of Service.

Abzer may update this Policy periodically to reflect evolving regulatory or technical requirements. The “Last Updated” date indicates the current version. Continued use of migration or archive features after an update constitutes acceptance of the revised Policy.

This Policy and any related dispute are governed by the laws of the Kingdom of Saudi Arabia, and the competent courts of Riyadh shall have exclusive jurisdiction.

This Policy is provided for transparency and user guidance. It does not create any data-retention obligation, warranty, or service guarantee on Abzer’s part. All commitments and liabilities are governed solely by the FatooraOnline Terms of Service.