An NIB is an essential milestone in Indonesia, but it is not a universal permission to begin every operational or commercial activity. What comes next depends on the company’s KBLI activities, risk classification, location, products, facilities, sector and operating model. Foreign investors should therefore treat the NIB as the start of an activity-by-activity readiness review, not as the end of licensing.
Key Takeaways
- There is no single document officially called the operational licence for every business in Indonesia. The phrase is commonly used for the approvals and verified conditions needed before an activity can lawfully operate.
- Under Indonesia’s risk-based framework, a low-risk activity generally relies on the NIB, while medium-risk activities may involve a Standard Certificate and high-risk activities may require a licence.
- A medium-high-risk Standard Certificate must be verified before it supports the relevant operational or commercial activity; an unverified certificate is limited to preparation.
- Basic requirements and supporting approvals, including location, environmental, building, product, import or sector permissions, may remain necessary after NIB issuance.
- Readiness should be assessed for each KBLI activity and project location separately, especially when one company has several business lines.
What Is an Operational Licence in Indonesia?
In practical business conversations, an operational licence means the approval position that allows a company to move from establishment and preparation into the relevant operational or commercial activity. It should not be understood as one universal document with the same name, requirements and issuing authority for every sector.
Indonesia’s current risk-based business licensing system uses formal outputs such as the Business Identification Number (Nomor Induk Berusaha or NIB), Standard Certificate, licence, and Business Licensing to Support Business Activities (Perizinan Berusaha untuk Menunjang Kegiatan Usaha or PB UMKU). The applicable output depends on the activity recorded under the Indonesian Standard Industrial Classification, known as KBLI, and the risk route attached to that activity.
This distinction matters because a company may hold a valid NIB while a particular business activity is still in preparation, awaiting verification, missing a supporting approval or not yet aligned with its premises and products. The correct question is therefore not simply, “Does the company have an NIB?” It is, “Is each planned activity operationally ready under its own licensing route?”
For a broader explanation of how identity, classification and licensing connect, review IndoGateway’s guide to NIB, OSS and KBLI in Indonesia.
What the NIB Does and Does Not Do
The NIB is evidence of business registration and serves as the business actor’s identity within Indonesia’s licensing framework. It is generated through the Online Single Submission system, or OSS. It anchors company and project data, connects activities to their KBLI codes, and provides the starting point for risk-based licensing outputs.
For a low-risk activity, the NIB is generally the principal business-licensing output under the risk-based route. For other activities, the NIB may coexist with a Standard Certificate or licence. Separate basic requirements and PB UMKU may also apply. This is why a downloadable NIB document should never be read in isolation from the activity details and status shown in OSS.
The NIB also does not prove that every corporate, sector, product, facility, immigration, tax, workforce or land-related requirement has been completed. Those workstreams may be connected to business readiness, but their application depends on the project. A foreign-owned trading company, a factory, a restaurant and a digital platform can all possess NIBs while facing materially different next steps.
The Post-NIB Licensing Route by Risk Level
Government Regulation No. 28 of 2025 sets the current national framework for risk-based business licensing. The route is activity-specific, so a company with several KBLI codes may have more than one risk level and more than one readiness path.
| Risk classification | Core licensing output | Practical readiness point |
|---|---|---|
| Low | NIB | The NIB is generally the principal risk-based business licence for that activity, subject to any applicable basic or supporting requirements. |
| Medium-low | NIB and self-declared Standard Certificate | The business confirms its commitment to the applicable standards and must implement them in practice. |
| Medium-high | NIB and verified Standard Certificate | Before verification, the certificate supports preparation rather than the relevant operational or commercial activity. |
| High | NIB and licence | The activity moves into operation only after the required licence and connected conditions are satisfied. |
The table is a framework, not a substitute for checking the specific KBLI and project data. Risk may be influenced by the nature and scale of the activity, and the operative requirements can also depend on the location, facility, product and competent authority. IndoGateway’s guide to the four risk levels in Indonesia provides additional context.
What May Come After the NIB?
The next step is determined by the actual operating model. A disciplined review separates the core business-licensing output from the other approvals needed to make a site, product or supporting function ready.
Standard Certificate
A Standard Certificate records a statement or evidence that the relevant business-activity standards have been met. Medium-low activities generally use a self-declaration route. Medium-high activities require verification through the applicable authority or process. The company should review the certificate’s status and conditions in OSS rather than assuming that issuance alone confirms final readiness.
High-Risk Business Licence
For a high-risk activity, the applicable licence is part of the core risk-based output. The documents, inspections, technical standards and responsible authority vary by sector. The licence must be assessed together with the company’s registered activity and project details; a licence related to one KBLI or location does not automatically cover a different activity or site.
Basic Requirements
OSS identifies basic-requirement workstreams that can include spatial-use conformity, environmental approval and building-related requirements. The official OSS basic-requirements portal groups spatial, marine spatial, environmental and building matters. Which of these applies, and at what stage, depends on the project’s land, facility, impact and location.
PB UMKU and Sector Approvals
PB UMKU covers permissions that support business activities. The official OSS PB UMKU directory shows that supporting permissions span multiple sectors and can be linked to particular KBLI codes or functions. Product distribution, warehousing, transportation, professional operations, equipment, food, health and other regulated functions can create separate approval workstreams.
Product and Market-Access Requirements
A company can be properly incorporated and licensed for a business activity while a regulated product is not yet cleared for manufacture, import or sale. Depending on the product, separate registration, certification, labelling, conformity, halal, health or safety requirements may apply. These should be mapped by product category and supply chain role rather than inferred from the NIB.
A Practical Workflow From NIB to Operational Readiness
- Confirm the real activity scope. Describe what the company will make, buy, sell, import, store, deliver or advise on, who owns the goods, where the activity happens and how revenue is earned.
- Validate each KBLI code. Compare the operating model with the full activity descriptions and exclusions. Do not select a broad code merely because its title sounds convenient.
- Check foreign-investment eligibility. For a PT PMA, confirm whether the activity is open to the proposed ownership structure and whether sector conditions affect the plan.
- Review the OSS risk output. Identify whether each activity receives an NIB-only route, a self-declared or verified Standard Certificate, or a licence.
- Map basic requirements. Test the site and facility against spatial, environmental and building requirements relevant to the project.
- Identify PB UMKU and sector permissions. Review supporting activities, products, equipment, import functions and regulated services.
- Complete verification and evidence. Prepare technical documents, facility evidence, professional credentials, inspections or other materials required by the competent authority.
- Run a readiness review. Confirm that the registered entity, KBLI, site, products, personnel, approvals and actual operating procedures all match before commercial launch.
The sequence is not always linear. Environmental or building work may need to begin early; product registration may run alongside facility preparation; and an authority may require evidence generated by another workstream. Planning the dependencies is usually more valuable than treating licences as isolated documents.
How to Build an Operational Readiness Matrix
A readiness matrix gives management a clear view of what has been issued, what remains conditional and who owns the next action. Create one row for each combination of entity, KBLI activity and project location. Then track the following fields:
- company name and NIB;
- KBLI code and plain-language activity;
- project location and facility type;
- OSS risk classification;
- core output: NIB, Standard Certificate or licence;
- verification status and outstanding commitments;
- basic requirements;
- PB UMKU and other sector permissions;
- product, import, workforce and professional dependencies;
- evidence owner, renewal or reporting trigger, and launch decision.
Use statuses that describe reality, such as “issued,” “self-declared,” “awaiting verification,” “site evidence incomplete,” “product approval pending” and “ready for the defined scope.” A green status should mean the relevant operational boundary is documented, not merely that a PDF exists.
Common Mistakes After NIB Issuance
Treating the NIB as Universal Operating Approval
This is the most consequential error. The NIB may be sufficient as the core licensing output for a low-risk activity, but it does not automatically complete medium or high-risk routes, PB UMKU, product permissions or site requirements.
Checking the Company but Not Each Activity
One legal entity may hold multiple KBLI codes. Each activity can have a different risk classification, Standard Certificate, licence, supporting approval and location. Management should approve launch activity by activity.
Using a KBLI Code That Does Not Match Operations
A superficially similar KBLI can lead to the wrong risk and approval route. The activity description, exclusions, commercial flow and revenue model should be checked before submission and again when the business changes.
Ignoring Location and Facility Dependencies
An approval route can change materially when the project moves from an office to a warehouse, factory, restaurant, clinic or other regulated facility. Lease signing, construction and equipment procurement should be coordinated with spatial, environmental and building analysis.
Launching Products Before Product Clearance
Business licensing and product market access are related but distinct. A valid company licence does not itself demonstrate that a particular food, cosmetic, medical, electrical or other regulated product may be placed on the Indonesian market.
Failing to Update OSS After a Business Change
New activities, a changed address, expanded facilities, altered production or a different distribution model can affect licensing. Companies should review whether corporate records, KBLI data, OSS project information and supporting approvals need amendment before implementing the change.
Examples of Different Post-NIB Paths
Consider a foreign-owned consulting company operating from a standard office. Its post-NIB review may focus on the precise consulting KBLI, risk output, professional-practice boundaries and any activity-specific conditions. A manufacturer may instead need to coordinate verified business licensing with industrial-location, environmental, building, machinery, product, import and reporting workstreams.
A restaurant project can add premises, food-safety, hygiene, halal, alcohol and signage questions depending on its model. A distributor may need to examine wholesale or retail classification, importer roles, warehousing, product authorisations and sector-specific distribution rules. A digital platform must distinguish software provision, intermediation, own-inventory sales, electronic-system responsibilities and regulated payment functions.
These examples are planning illustrations, not conclusions for a specific company. The applicable approvals may depend on the selected KBLI, project location, risk classification, products, ownership structure and operating model.
Questions to Answer Before Starting Operations
- Does the registered KBLI accurately cover every revenue-generating activity?
- What risk classification and licensing output applies to each activity?
- Is every medium-high Standard Certificate verified?
- Is every high-risk licence issued for the correct company, activity and location?
- Are spatial, environmental and building requirements complete for the intended premises?
- Which PB UMKU or other sector permissions support the operating model?
- Are products, imports, equipment, professionals and foreign personnel separately compliant?
- Do the approvals match what staff will actually do on launch day?
- Is there an owner for ongoing reporting, changes, renewals and inspection evidence?
The answers should be supported by current OSS records and approval documents. Investment Ministry/BKPM Regulation No. 5 of 2025 provides the current procedural framework for risk-based licensing and investment facilities through OSS, while sector authorities remain central to many underlying technical requirements.
Conclusion
An NIB establishes the company’s business identity and may be the principal risk-based licence for a low-risk activity. It is not, however, a universal operational clearance. Medium-risk and high-risk activities can require Standard Certificates or licences, and even an issued core licence may sit alongside site, environmental, building, product, import or sector approvals.
The dependable route is to build an activity-by-activity readiness matrix, verify every OSS status, connect each approval to the real operating model, and make the launch decision only when the relevant evidence is complete. This approach turns licensing from a document-collection exercise into an operational control.
Plan Your Post-NIB Licensing Route
IndoGateway helps foreign companies connect entity data, KBLI selection, OSS outputs, site requirements and sector approvals into one practical readiness plan. Contact IndoGateway to review what must happen between NIB issuance and the start of your intended operations.
Frequently Asked Questions
1. Is an NIB enough to start operating in Indonesia?
An NIB can be the principal risk-based business licence for a low-risk activity, but it is not enough for every company or activity. Medium-low, medium-high and high-risk activities have different licensing outputs, and supporting approvals may also apply. A company should check each KBLI activity, its OSS risk classification, the status of any Standard Certificate or licence, and any site, environmental, building, product or sector requirements. Operational readiness is determined by the complete activity and project position, not by possession of the NIB alone.
2. What is the difference between an NIB and an operational licence?
The NIB is the business actor’s registration evidence and identity in Indonesia’s OSS framework. “Operational licence” is a practical umbrella phrase rather than one universal statutory document. Depending on the risk route, the approval needed for operation may be the NIB itself, a Standard Certificate that is self-declared or verified, or a high-risk licence. The activity may also require PB UMKU and other approvals. Companies should therefore name the exact document and status involved instead of relying on the general phrase “operational licence.”
3. When does a Standard Certificate allow commercial operations?
The answer depends on whether the activity is medium-low or medium-high risk and on the certificate’s status. For a medium-low-risk activity, the Standard Certificate is generally based on the business actor’s declaration that it will meet the applicable standards. For a medium-high-risk activity, the standards must be verified, and an unverified certificate is limited to preparation rather than the relevant operational or commercial activity. The company should inspect the current OSS record, conditions and responsible authority before treating the certificate as evidence of readiness.
4. What is PB UMKU, and can it be required after the NIB?
PB UMKU means Business Licensing to Support Business Activities. It covers supporting permissions that may be needed for particular functions, products, facilities or sector activities after the core business-licensing output is identified. The OSS PB UMKU directory spans numerous sectors and links some permissions to particular KBLI codes. A company should map these approvals from its real workflow, including production, storage, distribution, import, professional services and regulated products. Having an NIB does not automatically mean that every required PB UMKU has been completed.
5. Can one company have different operational licensing routes?
Yes. One company can register multiple KBLI activities, and each activity can carry a different risk classification and licensing route. One activity might be low risk and rely on the NIB, while another requires a verified Standard Certificate or high-risk licence. Different locations can also introduce separate site and facility conditions. The safest management approach is to create a readiness row for every entity, KBLI and location combination. This prevents an approval for one business line from being incorrectly treated as permission for another.
6. Do environmental and building approvals come after the NIB?
They can form connected workstreams before and after NIB issuance, depending on the project and the OSS sequence. Spatial-use conformity, environmental approval and building requirements are basic requirements within the current framework, but their application depends on factors such as location, land status, facility, scale and environmental impact. A company planning a factory, warehouse, restaurant or other physical premises should map these matters early. Waiting until construction or fit-out is complete can expose the project to redesign, delay or a mismatch between the approved site and actual operations.
7. How should a foreign-owned company verify that it is ready to operate?
The company should reconcile five things: its corporate records, registered KBLI activities, current OSS outputs, physical and product approvals, and actual launch-day procedures. Confirm foreign-investment eligibility for each activity, review the NIB and every Standard Certificate or licence, close basic requirements, identify PB UMKU, and test whether products, imports, equipment, premises and personnel are separately compliant. Record evidence and responsibility in a readiness matrix. Because requirements are project-specific and time-sensitive, obtain qualified review where the governing sector or approval status is unclear.
8. What happens if a company starts operations before completing the required licences?
The consequences depend on the missing requirement, authority, activity and facts, so a universal penalty statement would be misleading. Potential exposure can include supervisory action, instructions to fulfil requirements, restrictions on activities, administrative sanctions or other consequences under the applicable framework and sector rules. The practical response is to stop assuming that NIB issuance resolves the issue, identify the exact gap, preserve the current records, and obtain qualified advice on corrective steps. Companies should not conceal operational changes or submit information that does not match actual conditions.
