Obtaining a Business Identification Number, or NIB, is one of the most visible steps in establishing a business in Indonesia. It is also one of the most frequently misunderstood. An NIB may be issued through OSS Indonesia relatively early in a licensing process, but its issuance does not necessarily mean that every proposed activity can immediately begin commercial operations.
OSS, short for Online Single Submission, is Indonesia’s electronic system for processing risk-based business licensing. It connects business registration information with licensing requirements determined by the company’s activities, location, operating scale and assessed risk. The practical outcome depends heavily on choosing the correct Indonesian Standard Industrial Classification, or KBLI, and completing any required standards, permits and supporting approvals.
This guide explains how OSS Indonesia works, how the NIB fits into the system, why different activities receive different licensing outputs and what foreign investors should review before relying on an OSS document.
Key Takeaways
- OSS Indonesia is the government’s electronic platform for risk-based business licensing; it is not itself a single universal business license.
- An NIB is the registration evidence and identity assigned to a business actor. For a low-risk activity, the NIB is the principal business-licensing output.
- Medium-low activities require an NIB and a Standard Certificate without verification, while medium-high activities require an NIB and a verified Standard Certificate.
- High-risk activities require an NIB and a permit before the relevant operational or commercial activity can proceed.
- The selected KBLI, project location, risk classification and operating model determine which requirements appear in OSS.
- Basic requirements, sector approvals and supporting business licenses may still apply even after an NIB has been issued.
- Businesses must maintain accurate OSS data and assess ongoing reporting, sector, tax, employment and operational obligations after licensing.
What Is OSS Indonesia?
OSS Indonesia is the national electronic system through which business actors process risk-based business licensing. The current framework is based on Government Regulation No. 28 of 2025 on the Administration of Risk-Based Business Licensing. The regulation replaced Government Regulation No. 5 of 2021 and covers basic requirements, business licensing, supporting business licenses, OSS services, supervision and administrative sanctions.
The detailed OSS procedures are addressed in Minister of Investment and Downstream Industry/Head of BKPM Regulation No. 5 of 2025. That regulation defines risk-based licensing as an approach based on the risk analysis of each business activity and confirms that business licensing is processed electronically through OSS. Readers can consult the official OSS portal and the government’s current OSS user guides.
OSS functions as an integrated submission and workflow platform. It collects business and project data, validates information with connected government systems, identifies the relevant risk level and routes requirements to the responsible central or regional authority. The authority and substantive standards do not disappear simply because the process is electronic.
How NIB and OSS Fit Together
The NIB, or Nomor Induk Berusaha, is not another name for OSS. OSS is the system; the NIB is one of the official documents issued through that system.
Ministerial Regulation No. 5 of 2025 defines the NIB as evidence of a business actor’s registration and as the business actor’s identity when carrying out business activities. The regulation also provides that each business entity has one NIB. A company may, however, have multiple activities, projects or locations connected to that entity’s OSS profile, subject to the classifications and licensing requirements applicable to each activity.
The NIB’s practical legal effect depends on the risk level. For a low-risk activity, the NIB is the business licensing output and authorizes preparation, operational and commercial activity subject to the applicable obligations. For medium and high-risk activities, the NIB can initially provide only limited legality while additional standards or permit requirements remain outstanding.
This distinction matters when reviewing an OSS document. A company should examine the licensing status for each relevant KBLI and project, rather than treating the existence of an NIB as proof that the entire business is fully operational. For a broader comparison, see IndoGateway’s guide to NIB, OSS and KBLI in Indonesia.
The Current Legal Framework
Government Regulation No. 28 of 2025 is the principal current regulation governing risk-based business licensing. Its implementation through OSS is addressed in Minister of Investment and Downstream Industry/Head of BKPM Regulation No. 5 of 2025.
Business classification is also undergoing an important transition. BPS Regulation No. 7 of 2025 introduced KBLI 2025 and revoked the former KBLI 2020 regulation. BPS describes KBLI as Indonesia’s standard classification for grouping economic activities by their characteristics. The government has also issued implementation and conversion guidance for aligning existing data with the updated classification.
Companies should therefore avoid copying a KBLI code from an old incorporation document, adviser’s template or competitor’s NIB without checking its current description and scope. Changes to KBLI classifications do not automatically mean that every existing company needs a new license, but they can require data alignment where the substance of an activity has changed or where a code has been divided, combined or recategorized.
How Risk-Based Licensing Determines the Required Documents
OSS evaluates the activity entered by the applicant rather than assigning one risk status to the company in the abstract. A company conducting several activities can therefore encounter different licensing outputs within the same OSS account. IndoGateway’s explanation of the four Indonesian licensing risk levels provides additional context.
| Risk level | Principal business-licensing output | Operational meaning |
|---|---|---|
| Low | NIB | The NIB is the business license for the activity, subject to applicable statements, obligations and basic requirements. |
| Medium-low | NIB and Standard Certificate without verification | The applicant makes the required commitments and receives the specified licensing documents without prior substantive verification of the Standard Certificate. |
| Medium-high | NIB and verified Standard Certificate | An unverified Standard Certificate initially provides only limited legality for preparation. Operational or commercial activity must wait until the required standards are verified. |
| High | NIB and permit | The NIB initially supports preparation, while the required permit must be obtained before the regulated activity becomes operational or commercial. |
The table describes the core business-licensing outputs under the current general framework. It does not capture every sector-specific condition. Product registrations, professional certifications, import approvals, environmental approvals or other supporting licenses may still be needed depending on the business.
How the OSS Indonesia Process Generally Works
1. Establish the Applicant and Confirm Its Structure
The first task is to determine which person or legal entity will hold the licenses. For a foreign investment company, this commonly involves establishing the PT PMA and ensuring that its corporate information is available to the connected government systems before completing the OSS submission. The company’s ownership, capital, management and authorized activities should be internally consistent. See the PT PMA establishment guide for the wider company-formation context.
2. Create and Activate OSS Access
The applicant registers for access through the official OSS platform using the identity and contact information required for its applicant type. The responsible email address and account credentials should be controlled by the business or a properly authorized representative. Companies should establish internal ownership of the account because notices, requests for correction and licensing records may be delivered through the system.
3. Complete the Business Profile
The applicant reviews or enters the entity’s profile, tax information, management data and other required particulars. Some information may be drawn from connected government databases. A discrepancy between the corporate records, tax data and OSS profile can interrupt the process or create an inaccurate license, so source documents should be reconciled before submission.
4. Add the Business Activity and Project Data
The company selects the appropriate KBLI and describes the relevant business location, products or services, planned investment, workforce and other project information requested by OSS. The selected activity should reflect what the company will actually do and how it will earn revenue, not merely a broad commercial label used in presentations.
5. Address Applicable Basic Requirements
Depending on the project, OSS may identify basic requirements involving spatial-use conformity, environmental approval, forest-area matters, building approval or building functionality. The appropriate route depends on the location, land status, physical facilities, environmental impact and project design. These requirements should be evaluated early because they can affect site selection, construction and the ability to activate operating licenses.
6. Review the System’s Risk Classification and Outputs
OSS validates the risk classification for the activity and identifies the resulting business-licensing documents. Low and medium-low activities can produce their principal outputs based on the relevant declarations and system process. Medium-high and high-risk activities require further verification or approval before the corresponding operational or commercial activity can begin.
7. Complete Standard Certificate, Permit and PB UMKU Requirements
Where verification is required, the applicant submits evidence showing that the applicable business standards or permit conditions have been met. A business may also need PB UMKU, meaning business licensing to support business activities. These supporting approvals are separate from the core NIB and may concern particular operational functions, products or regulated services.
8. Download, Review and Maintain the Licensing Documents
After issuance, the company should review each document, its annexes, KBLI scope, project location, status, obligations and responsible authority. Incorrect data should be corrected through the proper OSS procedure. Licensing records should then be incorporated into the company’s compliance calendar and operating controls.
What to Prepare Before Using OSS
A disciplined data pack reduces corrections and helps prevent a license from being built around the wrong activity. The exact documents depend on the applicant and project, but the planning file should generally address:
- the applicant’s legal form, ownership structure and current corporate documents;
- the actual revenue-generating activities and the proposed KBLI for each activity;
- the role of the Indonesian entity, including whether it will manufacture, import, distribute, retail or provide services;
- each project and operating location, including land or premises arrangements;
- planned products, services, investment and workforce information;
- spatial, environmental, building and sector-specific dependencies;
- the licenses or registrations needed for imports, regulated products or supporting operations; and
- the people responsible for OSS access, submissions, verification requests and ongoing reporting.
Foreign investors should coordinate the OSS workstream with the investment structure review. A KBLI may affect licensing, foreign ownership analysis and the corporate purposes recorded in the company’s establishment documents. The relevant restrictions and conditions should be assessed against the current rules for the specific activity. IndoGateway’s foreign ownership review guide explains why this analysis must take place before implementation.
Why an Issued NIB May Not Be Enough to Start Operations
An NIB can exist even when another licensing step remains incomplete. For medium-high risk activities, an unverified Standard Certificate is limited to preparation and cannot support operational or commercial activity. For high-risk activities, the required permit must be issued before the regulated operations begin.
The same issue can arise outside the core risk document. A company may have an NIB but still need a supporting license, product registration, environmental approval, building document or sector authorization. For example, an entity’s corporate and OSS status does not by itself establish that a regulated product may be imported or placed on the Indonesian market.
The reliable review question is therefore not simply, “Does the company have an NIB?” It is, “Does every planned activity, at every relevant location, have the required effective licensing status and supporting approvals for the intended stage of operation?”
Common OSS Indonesia Mistakes
- Selecting a convenient but inaccurate KBLI: This can produce the wrong licensing route and create inconsistencies with the company’s actual operations.
- Assuming the NIB covers every activity: Each project and KBLI should be reviewed individually, including its current status and annexed obligations.
- Treating an unverified certificate as an operating authorization: Medium-high risk activities cannot rely on an unverified Standard Certificate for operational or commercial activity.
- Ignoring location dependencies: Spatial, environmental and building requirements can vary according to the project location and facilities.
- Entering optimistic or inconsistent project data: Investment, products, workforce and location information should align with the actual implementation plan.
- Overlooking supporting licenses: PB UMKU and sector approvals may remain necessary even after the core business license is issued.
- Failing to monitor the OSS account: Verification requests, corrections and status changes require responsible internal follow-up.
- Stopping compliance after issuance: The company may still have investment reporting and other ongoing obligations. Review the LKPM investment reporting guide as part of post-licensing planning.
A Practical OSS Readiness Checklist
- Map each planned activity, product, customer route and source of revenue.
- Validate the current KBLI description and scope for every material activity.
- Check whether the activity and ownership structure are compatible.
- Align the KBLI with the company’s corporate purposes and operating model.
- Confirm the project locations and identify spatial, environmental and building dependencies.
- Review the risk level and required licensing output shown by OSS.
- Separate preparation rights from authorization to operate commercially.
- Identify supporting licenses, product approvals and import-related requirements.
- Review every issued document and annex for status, scope and outstanding obligations.
- Assign responsibility for updates, reporting, renewals where applicable and regulatory monitoring.
Frequently Asked Questions About OSS Indonesia
1. What Is OSS Indonesia?
OSS Indonesia is the government’s electronic system for processing risk-based business licensing. A business actor enters its entity and project information, selects the relevant KBLI activity and completes the submissions presented by the system. OSS then determines or validates the licensing route and connects the application with the competent central or regional authority. It is best understood as an integrated licensing platform, not as one universal permit. The documents produced through it may include an NIB, a Standard Certificate, a permit, basic-requirement approvals and licenses supporting particular business activities.
2. What Is an NIB in Indonesia?
An NIB is the registration evidence and official identity of a business actor within Indonesia’s business-licensing framework. It is issued through OSS, and each business entity generally has one NIB. Its legal effect depends on the activity’s risk classification. For a low-risk activity, the NIB is the principal business license. For medium and high-risk activities, an NIB can provide limited legality while another document, verification or permit remains necessary. Businesses should therefore review the status of every activity attached to the NIB rather than evaluating the number in isolation.
3. Is an NIB the Same as a Complete Business License?
No, an NIB is not always the complete authorization needed for every business activity. It is sufficient as the principal business-licensing output for a low-risk activity, subject to the applicable requirements and commitments. Medium-low activities require an NIB and a Standard Certificate without verification. Medium-high activities require an NIB and a verified Standard Certificate, while high-risk activities require an NIB and a permit. Supporting licenses and product, location, environmental or sector approvals may also apply, so the correct answer depends on the selected KBLI and project circumstances.
4. How Should a Company Choose Its KBLI for OSS?
A company should choose the KBLI whose official scope most accurately reflects the activity it will actually perform in Indonesia. The analysis should consider what the company produces or supplies, how it earns revenue, whether it manufactures, imports or distributes products, and where each activity occurs. A broad similarity in the KBLI title is not enough; the detailed scope and exclusions should be reviewed. The code should also be checked against corporate purposes, foreign ownership rules, the risk classification and sector requirements. KBLI 2025 is now the current statistical classification, subject to the government’s implementation and conversion arrangements.
5. Can a Foreign-Owned Company Use OSS Indonesia?
Yes, an Indonesian foreign investment company, commonly structured as a PT PMA, can use OSS Indonesia to process its NIB and applicable business licensing. However, OSS registration is only one part of the investment setup. The company’s legal establishment, shareholders, capital, management, corporate purposes and selected business activities must be aligned before the licensing data is finalized. Foreign ownership conditions and investment requirements can depend on the particular activity. A foreign investor should therefore validate the structure and KBLI before treating the OSS application as an administrative formality.
6. How Long Does It Take to Obtain an NIB Through OSS?
There is no reliable universal timeline for completing an OSS licensing project. A correctly prepared low-risk submission may produce an NIB through the electronic process without the substantive verification required for higher-risk licensing. Other projects can take longer because corporate data must be corrected, basic requirements remain incomplete, a Standard Certificate requires verification, a permit requires agency approval or supporting licenses are still outstanding. System availability and the responsible authority’s review can also affect progress. A realistic schedule should be based on the exact KBLI, location, applicant, risk level and required approvals.
7. Why Does OSS Show an NIB Even Though the Company Cannot Operate Yet?
OSS may issue an NIB before all conditions for operational or commercial activity have been completed. Under the current framework, the NIB for medium-high and high-risk activities can initially provide limited legality for preparation. A medium-high activity must obtain verification of its Standard Certificate, while a high-risk activity must obtain the required permit before beginning the regulated operations. Other basic or supporting approvals may also remain pending. The company should inspect the status of the relevant activity, certificate, permit and annexes instead of relying only on the presence of an NIB document.
8. What Should a Business Do After Its OSS Licenses Are Issued?
After issuance, the business should verify that the entity name, NIB, KBLI, activity scope, project location and licensing status are accurate. It should record every condition and obligation shown in the documents and annexes, confirm that required supporting approvals are effective, and restrict operations to the authorized scope. The company should also assign responsibility for keeping OSS information current and for completing applicable investment, tax, employment, environmental, product and sector reporting. Licensing should be managed as an ongoing compliance function because operational changes can require an OSS update or further approval.
Conclusion
OSS Indonesia centralizes the licensing process, but obtaining the correct result still depends on accurate business classification and coordinated project planning. The NIB establishes the business actor’s registration and identity, while the applicable risk level determines whether the activity also needs a Standard Certificate, verification or permit.
For foreign investors, the strongest approach is to connect OSS licensing with entity setup, ownership analysis, site selection, product and import planning, environmental requirements, workforce arrangements and ongoing compliance. That approach helps ensure the documents issued through OSS reflect the business the company genuinely intends to operate.
Regulatory note: Indonesian investment, licensing, tax, immigration, product, environmental and operating requirements may change and may depend on the business activity, ownership structure, location, products and project circumstances. This article provides general information and is not project-specific legal, tax or regulatory advice. Applicable requirements should be verified before implementation.
Plan Your Indonesia Licensing Route
IndoGateway helps businesses connect company establishment, KBLI selection, OSS licensing and operational compliance into a workable Indonesia entry plan. To review the licensing path for your proposed activities, locations and operating model, contact IndoGateway.
