How do you choose an e-invoicing service provider in Oman?
Start with the Oman Tax Authority's own list of licensed providers on the Fawtara portal and confirm that the company you would contract with appears on it. Then check that the provider covers every document you issue and receive, connects to your systems, explains validation errors clearly, and gives you the security, continuity and data-recovery measures that Decision 189/2026 requires of you. Ask for evidence and verify each claim with the body that issued it.
1. Start with the Tax Authority's list, not a provider's description
Article 143 bis, added by Decision 189/2026, provides that the Oman Tax Authority announces to taxable persons the companies licensed to provide tax-invoice services in an approved electronic format. The announcement is published on the Fawtara portal's list of accredited service providers.
- Open the list yourself rather than relying on a screenshot or a logo on a sales page.
- Match the legal entity on the list with the company that will sign your contract and issue your invoices. A product name and the company behind it are often different.
- Note the listing date and re-check the list before you sign and at each annual review.
2. Know which duties stay with you
Choosing a provider does not move the obligations in the Decision away from your business. As amended, the Executive Regulation requires the taxable person to:
- issue tax invoices in an approved, secured electronic format with a unique number, including for supplies to customers who are not registered for VAT, for deemed supplies and when payment is received before the supply (Article 143);
- issue each invoice no later than 15 days after the event that requires it, and simplified tax invoices within the same deadlines (Articles 143 and 146);
- keep the origin, content and readability of each invoice verifiable from issue to the end of its retention period (Article 143);
- take the measures needed to issue e-invoices securely, protect the system against intrusion and unauthorised access, prepare for emergencies and technical failures, and put in place mechanisms to recover data if it is lost (Article 143 bis 1).
Your provider's controls are how you meet most of these duties in practice, so ask how each one is covered and keep the answers on file.
3. Check fit for your business
- Documents: tax invoices, simplified tax invoices, credit notes and debit notes, and self-billing invoices and credit notes if you use self-billing.
- Purchases: how supplier e-invoices reach you and are recorded, not only how yours are sent.
- Integration: which routes connect to each of your issuing systems: an API, file transfer through a connector, or spreadsheet import. Our integration-route guide compares them.
- Validation: whether documents are checked against the published PINT OM rules before they leave, how errors are explained to the person who must fix them, and whether rule versions are recorded.
- Language: whether the people who raise and correct invoices can work in Arabic, English or both.
| Area | Question to ask | Evidence to request |
|---|---|---|
| Licensing | Which legal entity is on the Tax Authority's list, and since when? | The Fawtara portal entry, checked by you |
| Network | Does the provider operate its own Peppol access point or rely on another provider? | OpenPeppol's certified service provider list |
| Security | How are access, authentication, encryption and separation of customers' data handled? | Security documentation and any certificate, with its scope |
| Continuity | What happens during an outage, and how are invoices and statuses recovered? | Written continuity and recovery arrangements |
| Records | How long are issued invoices and their statuses kept, and how do you export them? | Retention terms and a sample export |
| Exit | If you change provider, what do you receive and in which format? | Contract terms on data return |
4. Verify every claim with its issuer
- Tax Authority listing: check the Fawtara portal list directly.
- Peppol status: OpenPeppol publishes a list of certified service providers, and its list of Peppol Authorities shows the Oman Tax Authority as the authority for Oman. Being on one list does not mean being on the other: they are separate registers.
- Security certificates: ask for the certificate number, the certified organisation, the scope and the validity dates, then confirm them with the certification body. A certificate covers the named organisation and scope, not every product it sells.
5. Warning signs
- The contracting company is not the one on the Tax Authority's list.
- Promises of "guaranteed compliance", which no provider can give on your behalf.
- Deadlines from the superseded four-phase schedule that began in August 2026, rather than the gazetted dates of 1 April and 1 October 2027.
- No clear answer on continuity, data recovery or how you get your data back.
For the wider project plan, see the e-invoicing readiness checklist; for dates and scope, the Oman e-invoicing guide.
Questions about choosing a provider
Does using a provider transfer our e-invoicing obligations to it?
No. The Decision addresses its obligations to the taxable person: issuing compliant invoices on time, keeping them verifiable and readable, and taking security, continuity and recovery measures. A provider is how you meet them, so the contract and your own records should show how each is covered.
Is the Fawtara list the same as the Peppol list?
No. The Fawtara portal list is the Tax Authority's announcement of licensed providers under Article 143 bis. OpenPeppol's list shows providers certified on the Peppol network. Check each register for what it covers.
Can a business be exempted from issuing e-invoices?
Article 143 bis 2 allows the Chairman of the Tax Authority to grant an exemption for a period the Authority sets, on a written request with supporting documents and reasons the Authority accepts, provided returns are filed and tax is paid on time. Discuss any request with the Tax Authority or your adviser.