For a foreign investor, an Indonesia business license is not one document obtained at the end of company registration. It is a connected licensing route built around the company’s actual activities, the KBLI codes selected for those activities, the risk level assigned to each activity, and the records generated or processed through the Online Single Submission (OSS) system.
This distinction matters because a company can be legally incorporated but still lack the approvals needed to operate a particular activity. Conversely, an NIB can identify the business without proving that every activity, site, product, or operational condition is ready. The practical objective is therefore not simply to “get an NIB.” It is to align the corporate purpose, KBLI selection, OSS data, risk-based licensing outputs, location, and operational workstreams before commercial activity begins.
Key Takeaways
- Start with a precise description of what the Indonesian company will actually do, earn revenue from, import, manufacture, distribute, or support.
- Map each material activity to the current KBLI classification before treating the corporate scope, foreign-ownership analysis, or licensing plan as settled.
- Use OSS as the system through which business identity and risk-based licensing are administered; do not treat it as a substitute for commercial and regulatory analysis.
- Understand the role of the NIB: it is the business identification and registration record, but higher-risk activities may require additional licensing outputs or verified standards.
- Check project-specific dependencies, including location, land and building status, environmental requirements, products, imports, workforce, and sector-specific approvals.
- Keep the company deed, AHU data, OSS profile, KBLI activities, project data, and supporting approvals consistent throughout setup and later changes.
Indonesia Business Licensing in One Practical Framework
The licensing framework is easier to manage when the main components are separated by function. KBLI classifies the economic activity. OSS is the electronic licensing system. The NIB identifies and registers the business. Risk-based licensing determines what additional licensing evidence may be required for a specific activity. Sector, location, product, environmental, construction, import, and workforce rules may add further requirements.
| Component | Primary role | Practical question |
|---|---|---|
| Business model | Defines the real commercial and operational activities | What will the Indonesian entity actually do and invoice for? |
| KBLI | Classifies each economic activity | Which current code and description best match each activity? |
| OSS | Administers integrated, risk-based business licensing | What data and supporting records must be entered or connected? |
| NIB | Provides the business identity and registration record | Which activities and project data appear under the business? |
| Risk-based licensing | Determines the licensing route for each activity | Is the activity low, medium-low, medium-high, or high risk? |
| Supporting approvals | Addresses sector, product, site, environmental, building, import, or workforce needs | What must be completed before this operation can lawfully begin? |
Indonesia’s current framework is governed by Government Regulation No. 28 of 2025 on Risk-Based Business Licensing. The regulation replaced Government Regulation No. 5 of 2021 and covers business requirements, business licensing, supporting business licenses, OSS services, supervision, and related procedures. For investors, the important operational lesson is that the licensing result follows the activity and its risk profile, not merely the company name or entity type.
Step 1: Define the Business Activities Before Selecting KBLI
A reliable licensing exercise begins with an operating description, not a list of codes. State what the Indonesian entity will sell, who its customers are, how it will deliver the product or service, where the work will occur, whether it will import or manufacture, whether it holds inventory, and which revenue streams belong to it. This description should be detailed enough to distinguish activities that sound similar but may fall under different classifications.
For example, software development, operating a digital platform, wholesale distribution, management consulting, equipment installation, after-sales maintenance, and data-related services may form part of one commercial offer, but they are not automatically one licensing activity. The correct analysis depends on what the company itself performs, not only how the group markets the overall solution.
Questions to settle internally
- Which activities will generate revenue in Indonesia?
- Which activities are performed by the Indonesian entity rather than an overseas affiliate or third party?
- Will the company import, distribute, store, install, manufacture, or merely provide services?
- Will operations take place at an office, warehouse, factory, customer site, construction site, or digital environment?
- Are regulated products, professional services, infrastructure, natural resources, health, finance, transport, or other controlled sectors involved?
The output should be an activity matrix that legal, commercial, finance, operations, and regulatory stakeholders can review. This makes the later KBLI classification analysis traceable and reduces the risk that a code is selected because its title merely appears convenient.
Step 2: Select the Current KBLI Activities Carefully
KBLI, the Indonesian Standard Industrial Classification, is the official classification used to organize economic activities. Indonesia adopted KBLI 2025 through BPS Regulation No. 7 of 2025. The official BPS legal-document record describes KBLI 2025 as the updated national standard and notes that it replaced KBLI 2020.
Do not stop at the short title of a code. Review the description, included activities, exclusions, and the relationship with other codes. Then test the proposed code against the company’s contracts, website claims, invoices, staffing plan, equipment, premises, and actual workflow. If those items tell different stories, the licensing file may be internally inconsistent.
KBLI selection affects more than the NIB
A selected activity may affect the licensing risk level, business standards, responsible authority, project data, foreign-investment analysis, site suitability, environmental route, and sector-specific approvals. This is why KBLI selection should occur before the corporate purpose and licensing plan are finalized. For a PT PMA, the analysis should also consider whether the activity is open to foreign investment and whether sector-specific conditions apply.
KBLI 2025 implementation included conversion and transition arrangements. Official government guidance states that existing licenses issued before implementation remain valid and that a purely numerical conversion without a substantive activity change may be handled automatically across the relevant systems. A genuine change to the company’s purpose or business activities is different and should be assessed as a corporate and licensing change, not assumed to be a simple code update. The practical source is the Ministry of Investment/BKPM announcement on KBLI 2025 implementation.
Step 3: Align the Company Record Before Using OSS
For a company, the OSS application does not exist in isolation. Its identity and corporate information should align with the deed, Ministry of Law or AHU records, tax data, shareholders, management, address, and stated purpose. If the business activities in the corporate documents do not support the intended OSS activities, the company may need to resolve the corporate record before or alongside licensing.
This alignment is especially important when adding a new revenue line after incorporation. The change may require more than clicking an additional KBLI code. The company should assess whether the purpose and objectives in its articles cover the activity, whether corporate approvals or a notarial amendment are needed, and whether the new activity changes investment, premises, environmental, product, import, or workforce requirements.
Foreign investors planning a new entity can reduce rework by completing the activity matrix before starting the PT PMA setup process. Existing businesses should compare their present operational reality with their registered activities before filing an expansion or change.
Step 4: Understand What OSS and the NIB Do
OSS is Indonesia’s electronic system for integrated, risk-based business licensing. The official OSS portal describes the NIB as the official identity used to start or conduct business and explains that activities are grouped into four risk levels. In practice, the business enters or confirms entity, activity, project, location, investment, and other data so the system can generate the applicable licensing path.
The NIB is foundational, but it should not be described as a universal operating license. Its effect must be read together with the KBLI activity, risk level, project record, any standard certificate or license, and applicable supporting approvals. A business with several activities can therefore have different licensing conditions across the same OSS account.
Data quality matters
Common problems arise from inconsistent addresses, incomplete project details, incorrect activity scale, mismatched corporate data, or a KBLI code that does not reflect operations. A document generated from inaccurate inputs can create false confidence. Before submission, use a controlled review of the proposed OSS data and retain the source documents supporting each key field.
For a more detailed system overview, see IndoGateway’s OSS guide for businesses in Indonesia and its explanation of how the NIB, OSS, and KBLI connect.
Step 5: Follow the Risk-Based Licensing Result
Indonesia’s risk-based framework groups business activities into low, medium-low, medium-high, and high risk. The licensing output increases according to the assessed risk. Government Regulation No. 28 of 2025 and its sectoral appendices are the authoritative basis for determining the treatment of a particular activity; the result should not be inferred from the everyday meaning of the business alone.
| Risk level | General licensing direction | Management focus |
|---|---|---|
| Low | NIB-based route | Confirm the activity, project data, and continuing compliance obligations. |
| Medium-low | NIB plus a business standard declaration or certificate route | Understand the standards represented and maintain evidence of compliance. |
| Medium-high | NIB plus a standard certificate requiring verification under the applicable process | Plan for authority review and do not assume submission equals operational approval. |
| High | NIB plus the relevant license | Sequence the license and dependent approvals before operations begin. |
This table is a planning summary, not an activity-specific licensing determination. The same commercial project may include several KBLI activities with different risk levels and standards. One activity being low risk does not reduce the requirements attached to another. A company should review each activity separately and then combine the results into a single operating-readiness plan.
IndoGateway’s guide to Indonesia’s four risk levels provides additional context, while the formal result should always be checked against current official sources and the specific OSS record.
Step 6: Map the Approvals Beyond the Core Business License
Core business licensing is only one workstream. Depending on the activity and project, a company may need to address spatial or location requirements, environmental approval, land and building documentation, construction and occupancy matters, product registration or certification, import permissions, technical standards, employment and immigration requirements, tax registrations, and licenses supporting the primary activity.
The correct sequence is project-specific. A manufacturing operation may need its site, production process, environmental route, building use, machinery, raw materials, products, imports, utilities, and workforce assessed together. A distributor may need to distinguish wholesale, retail, e-commerce, storage, import, and product-regulatory roles. A service company may need to examine professional, technical, data, sector, or foreign-personnel restrictions even when it does not hold inventory.
Use an operating-readiness matrix
For each approval or dependency, record the responsible entity, authority, prerequisite, submission owner, evidence required, current status, renewal or reporting obligation, and the operational milestone it controls. This turns licensing into a managed implementation program rather than a collection of disconnected documents.
A Practical Indonesia Business License Checklist
- Document the Indonesian entity’s proposed activities, customer flows, revenue model, imports, products, facilities, and delivery responsibilities.
- Map each material activity to the current KBLI classification and document why the code fits.
- Check whether foreign ownership, special sector rules, or entity restrictions apply to each activity.
- Align the articles of association, AHU record, address, tax data, and ownership information with the proposed activity scope.
- Confirm the project location and whether land, spatial, environmental, building, or industrial-estate dependencies apply.
- Prepare and review the entity, activity, project, investment, and location data before OSS submission.
- Obtain the NIB and identify the licensing output for every registered activity.
- Complete any required standard verification, license, sector approval, or supporting business license before the relevant operation begins.
- Connect product, import, tax, employment, immigration, and reporting workstreams to the licensing plan.
- Maintain a controlled compliance register and update the corporate and OSS records when the business changes.
Companies that need implementation support can review IndoGateway’s NIB and OSS business licensing service. The value of professional support is highest when it connects licensing with the broader operating model instead of treating the NIB as a stand-alone filing.
Common Indonesia Business Licensing Mistakes
Selecting KBLI codes only by title
A short title may hide exclusions or a scope that differs from the planned operation. Review the full description and test it against actual contracts, revenue, resources, and facilities.
Assuming the NIB covers every approval
The NIB is central, but additional standards, licenses, supporting approvals, and operational conditions may apply. Read every activity’s OSS output and verify related workstreams.
Registering activities the company cannot support
An expansive activity list can create unnecessary compliance obligations and inconsistencies. Register activities that form part of a credible business plan and ensure the entity has the resources, premises, and approvals required for them.
Ignoring changes after incorporation
New products, revenue lines, sites, warehouses, imports, manufacturing processes, or customer delivery models can change the licensing analysis. Review the corporate and OSS records before the change becomes operational.
Managing each approval in isolation
Corporate, OSS, environmental, building, product, import, employment, and tax workstreams often depend on the same activity, entity, and location data. A central data owner and approval matrix reduce conflicting submissions.
Frequently Asked Questions
1. What is an Indonesia business license?
An Indonesia business license is the legal authorization or licensing output that allows a business to start and conduct a particular activity under the applicable risk-based framework. It should not be understood as one identical certificate for every company. The required output depends on the selected KBLI activity, its risk classification, the business scale and project data, and any sector, location, product, environmental, construction, import, or supporting requirements. The NIB is foundational, but medium- or high-risk activities may require a standard certificate, verification, a license, or other approvals before the relevant operation is ready.
2. Is an NIB the same as a business license in Indonesia?
No, the NIB and the complete licensing position should not automatically be treated as the same thing. The NIB is the business identity and registration record generated through OSS, and it forms the foundation of the licensing process. For low-risk activities, the NIB may represent the principal licensing route. Other activities may require a standard certificate, verification, a specific license, or supporting approvals. A company should review each registered KBLI activity and its OSS output rather than rely on the presence of one NIB as evidence that every proposed operation, site, or product is authorized.
3. What is KBLI, and why does it matter for licensing?
KBLI is Indonesia’s official classification of economic activities. It matters because the selected classification connects the company’s real activity to the risk level, licensing route, business standards, responsible authority, and other regulatory conditions used in OSS and related systems. A code can also be relevant to foreign-investment analysis, corporate-purpose drafting, location, environmental, product, and sector reviews. Businesses should examine the full description and exclusions, not only the code title. The correct choice must reflect what the Indonesian entity actually performs and earns revenue from, with current official sources checked before filing.
4. Can one company register more than one KBLI activity?
A company can generally register multiple business activities when those activities are supported by its corporate purpose and are legally available to that entity and ownership structure. Each activity should have a genuine connection to the business plan and must be assessed separately for foreign ownership, risk classification, standards, licenses, premises, investment, and sector conditions. Multiple codes do not merge into one licensing outcome: one activity may be low risk while another requires verification or a license. Registering an unnecessarily broad list can also create compliance complexity, so the scope should be commercially justified and operationally supportable.
5. Does a PT PMA need an NIB before it can operate?
A PT PMA normally uses OSS to obtain its NIB and follow the licensing route for its registered activities, but the company should distinguish obtaining the NIB from completing all conditions needed to operate. The applicable sequence can depend on incorporation data, KBLI selection, project location, risk level, sector rules, facilities, products, imports, and supporting approvals. A company should not begin a regulated activity merely because an NIB has been issued if its OSS output or applicable rules require a verified standard, license, or prerequisite approval. Operating readiness should be confirmed activity by activity.
6. How long does Indonesia business licensing take?
There is no responsible universal timeline for all Indonesia business licensing. The duration depends on whether corporate data is ready, the number and complexity of KBLI activities, the assigned risk levels, the quality of OSS submissions, the project location, authority verification, and sector, environmental, building, product, import, or technical approvals. Low-risk registration may involve fewer steps than a factory or regulated-sector project, but even a seemingly simple application can be delayed by inconsistent data. Build a timeline from the actual approval matrix and prerequisites rather than using a generic promise that may not fit the project.
7. What happens if the company selects the wrong KBLI code?
A wrong KBLI code can create a mismatch between the company’s documents, OSS record, licensing outputs, contracts, invoices, premises, and real operations. It may also lead the business to follow an inappropriate risk or sector route and overlook an approval that applies to the actual activity. The appropriate correction depends on whether the issue is only a classification conversion or whether the company is changing the substance of its activities. Review the deed and AHU record, current KBLI framework, OSS project data, foreign-investment position, and dependent approvals before making changes or starting the affected operation.
8. When should a foreign business seek licensing support?
A foreign business should seek licensing support before incorporation or expansion when its business model spans several activities, involves regulated products or sectors, requires imports or facilities, uses foreign personnel, or depends on a particular site. Early support is also valuable when corporate and OSS data do not match, a license is pending verification, or the company is adding a new revenue line. A qualified adviser should translate the operating model into an activity and approval matrix, identify project-specific dependencies, coordinate the relevant workstreams, and verify current official requirements without promising a guaranteed approval or timeline.
Conclusion
A sound Indonesia business licensing strategy moves in a clear sequence: define the operating model, choose the correct KBLI activities, align the corporate record, enter accurate data in OSS, understand the role of the NIB, and complete the risk-based and supporting approvals that apply to each activity. The process is manageable when the company treats it as an operating-readiness program rather than a one-time registration task.
Regulatory note: Indonesian investment, licensing, tax, immigration, product, environmental and operating requirements may change and may depend on the business activity, ownership structure, location, products and project circumstances. This article provides general information and is not project-specific legal, tax or regulatory advice. Applicable requirements should be verified before implementation.
Plan Your Indonesia Licensing Route with IndoGateway
IndoGateway helps foreign businesses connect entity setup, KBLI analysis, OSS and NIB registration, risk-based licensing, and the related operational workstreams. Contact IndoGateway to discuss your planned activities, ownership structure, project location, products, and operating model before implementation.
