Indonesia Business License After NIB: What You Still Need to Operate Legally

Thousands of foreign investors complete their PT PMA registration every year, receive their NIB, and assume the hard part is done. In reality, securing your official 印尼营业执照 journey does not end at NIB issuance. Depending on risk classification and sector, a company may still need sectoral permits, spatial approvals, and environmental clearances before it can legally operate.

This guide breaks down exactly what comes after the NIB, updated for 2026 regulations including Government Regulation 28/2025, BKPM Regulation 5/2025, and the latest OSS-RBA enforcement changes.

Indonesia recorded IDR 498.8 trillion in total investment realization in Q1 2026, with FDI contributing IDR 250 trillion at 8.5% YoY growth (Source: invest.jakarta.go.id, April 2026). As investor numbers rise, so does the importance of understanding post-NIB compliance.

What the NIB Actually Gives You (and What It Does Not)

The NIB, or Nomor Induk Berusaha, is Indonesia’s single business identification number. Issued through the OSS-RBA portal at oss.go.id, it replaces the old TDP, API, and NIK identifiers. Under Job Creation Law No. 11/2020 and Government Regulation 28/2025, the NIB serves as proof of registration. It is not an automatic license to operate.

A critical distinction appeared in OSS-RBA from early 2026: the system now distinguishes between NIB status ‘Terdaftar’ (Registered) and ‘Terverifikasi’ (Verified). An NIB with ‘Terdaftar’ status means registration is acknowledged, but verification of supporting documents is incomplete. Only a ‘Terverifikasi’ NIB confirms that the underlying business information has passed OSS system checks.

专业提示： Log in to oss.go.id and check the status column next to your NIB before assuming full compliance. ‘Terdaftar’ and ‘Terverifikasi’ look similar but carry very different legal weight in 2026.

Key distinctions between a registered NIB and a fully licensed company:

• NIB confirms legal entity and business identity only
• It grants access to apply for further permits through OSS
• Low-risk KBLI activities may operate with just the NIB and a Standard Certificate
• Medium-high and high-risk KBLI activities require additional sectoral permits before operating
• Spatial use (PKKPR) and environmental approvals are separate and mandatory for physical premises

OSS-RBA’s 4-Tier Risk Licensing Model (Updated 2026)

Government Regulation 28/2025 replaces GR 5/2021 as the primary framework governing Indonesia’s risk-based business licensing system. One of its key updates is an expanded KBLI coverage, now covering 1,417 business activity codes, up from 1,348. The four-tier risk model remains, but classifications for several sectors have been revised.

The risk tier assigned to a company’s KBLI code directly determines what permits are required. Selecting the wrong KBLI at registration is one of the most common compliance errors for new PT PMAs, because the licensing path attached to it follows the company throughout its operational life.

The four risk tiers and their licensing requirements:

• Low Risk: NIB only. The company receives a Standard Certificate automatically and may begin operations.
• Medium-Low Risk: NIB plus a Standard Certificate. Certain standard declarations must be submitted through OSS before operating.
• Medium-High Risk: NIB plus a Standard Certificate, with mandatory compliance standards to be fulfilled within a set period after issuance.
• High Risk: NIB plus a full Izin Usaha (Business License), which requires sectoral authority approval before any commercial activity may commence.

专业提示： Before registering, check the exact KBLI code at oss.go.id to confirm the risk tier. Some closely related KBLI codes fall into different risk categories, which significantly changes the permit timeline and cost structure.

Explore:

• How to Navigate KBLI 2025 Adjustments Before the June 2026 Deadline
• OSS Indonesia：外国投资者完整指南
• KBLI Indonesia: Why This Business Classification Code Can Make or Break Your Market Entry

PKKPR: The Spatial Permit Most Investors Overlook

PKKPR, or Persetujuan Kesesuaian Kegiatan Pemanfaatan Ruang, is the spatial conformity approval required for any business that operates from a physical location in Indonesia. Whether the premises are owned or leased, any company occupying a fixed business address must confirm that its activity is spatially compliant under the Regional Spatial Plan (RTRW).

Under the integrated OSS-RBA framework updated by GR 28/2025, PKKPR is now fully embedded within the Principal License module of the OSS system. It is no longer a separate offline application. However, approval still depends on the spatial classification of the intended location in the regional government’s database, and rejection is possible if the planned land use conflicts with zoning designations.

When PKKPR is mandatory:

• Any PT PMA or foreign-owned entity with a physical operational address
• Manufacturing plants, warehouses, retail outlets, and clinics
• Offices in locations not already pre-cleared under the building’s existing PKKPR
• Any business in sectors tied to land use such as agriculture, aquaculture, or construction

专业提示： Many serviced office providers in Jakarta hold a building-level PKKPR, which can cover tenants for standard office activities. Verify this with the building management before applying separately, as duplicate applications can slow the overall OSS process.

Explore:

• 印尼商业许可证：应对 PKKPR 和空间合规性问题
• PT PMA vs PT PMDN vs Representative Office: Which Structure to Register a Company in Indonesia in 2026?

Sector-by-Sector Permit Map for PT PMA Companies (2026)

Beyond the NIB and PKKPR, foreign companies in specific sectors must obtain additional permits from technical ministries and agencies. These are issued outside the standard OSS flow, even though OSS registration remains a prerequisite. The table below maps the most common investor sectors to their required approvals.

Sector	Additional Permits (Beyond NIB)	Issuing Authority
Manufacturing	Environmental Approval (Persetujuan Lingkungan), PKKPR, PBG/SLF (building permits)	KLHK, Regional Government
Food & Beverage	BPOM MD/ML registration, Halal certification (MUI), PIRT or MD license	BPOM, MUI
Healthcare / Clinic	Ministry of Health Izin Operasional, BPOM registration for pharmaceutical products	Kemenkes, BPOM
Import / Export	API-U or API-P (import license), ET (export registration), commodity-specific permits	Ministry of Trade
Data Center / Digital	PSE registration (Kominfo), DPO registration if personal data is processed	Kominfo
Construction (BUJKA)	BUJKA license, SBU (Business Entity Certificate)	LPJK / Ministry of PUPR
Financial Services	OJK license (type varies by sub-sector)	OJK
Plantation / Agro	IUP-B (Plantation Business License), AMDAL environmental study	Ministry of Agriculture

LKPM Reporting: What Changed Under GR 28/2025

The LKPM, or Laporan Kegiatan Penanaman Modal, is the mandatory investment activity report that all PT PMA companies must submit through OSS. Under the updated framework of GR 28/2025 and BKPM Regulation 5/2025, LKPM compliance has become significantly stricter, with automated scoring and tiered sanctions for non-submission.

The OSS system now automatically assigns each company a compliance score category: Very Good (81-100), Good (60-80), Fair (40-59), or Poor (0-39). Companies in the Fair or Poor category are subject to administrative sanctions, and prolonged non-compliance can result in suspension of OSS functions, blocking amendments to business licenses.

Key LKPM changes under GR 28/2025 and BKPM Regulation 5/2025:

• Automatic sanctions apply when LKPM shows zero capital realization for four consecutive quarters
• Indonesian companies investing abroad must now file quarterly LKPM reports through OSS
• Compliance scores are calculated automatically and visible to monitoring agencies
• Failure to file on time can block corporate actions such as license amendments and expansions
• Representative offices (RO) must submit LKPM every six months, except BUJKA and Foreign Electricity Support ROs, which report annually

专业提示： The January LKPM window (1-10 January each year) is the most critical filing period. Missing this window is one of the top reasons PT PMA companies receive their first written warning from BKPM.

有关的： LKPM报告：印尼合规与投资报告完全指南

Coretax and NIB Linkage: The 2026 Tax-License Connection

One of the most significant compliance developments for 2026 involves the integration of Indonesia’s Coretax system with the OSS-RBA NIB framework. Coretax, the new core tax administration system launched in January 2025, cross-references tax registration data against business license data. Companies with an active NIB but an incomplete or inconsistent PKP (VAT-registered taxpayer) status may face processing delays in license amendments.

For PT PMA companies, this means that tax compliance is no longer a separate track from business licensing. 马来西亚和平委员会‘s digital monitoring infrastructure now flags mismatches between the NIB profile and the Coretax database. A company operating with a verified NIB but lacking proper PKP activation may still face operational restrictions when processing renewals or expansions through OSS.

Coretax compliance checklist for PT PMAs in 2026:

• Ensure NPWP (Tax ID) registered under the PT PMA matches the NIB entity profile in OSS
• Activate PKP status at the tax office if annual turnover threshold is reached
• File monthly SPT (tax returns) on time to maintain an active tax compliance record
• Cross-check that the registered business address in Coretax matches the OSS profile

OSS Compliance After Registration: The Real 2026 Enforcement Landscape

BKPM’s digital monitoring system now operates with a level of integration that was not present before 2024. NIBs flagged for incomplete permits are visible to the issuing authorities, technical ministries, and in some cases sector regulators such as OJK and Kominfo. The enforcement consequences vary by sector but are increasingly consistent across the board.

For the hospitality sector, incomplete OSS compliance has been linked to Online Travel Agency (OTA) platform delisting, where platforms such as major booking sites require proof of a valid Izin Usaha before listing. For foreign workforce-dependent companies, unresolved permit gaps can complicate investor KITAS applications, as BKPM cross-checks NIB and licensing status before endorsing immigration permits.

Documented consequences of operating with an incomplete Indonesia business license status:

• Written warnings from BKPM, escalating to temporary operational suspension
• Blocked license amendments and corporate changes in OSS
• Delays or rejections in KITAS applications for foreign employees
• OTA delisting or inability to pass due diligence for B2B contracts
• Non-eligibility for investment incentives and tax facilities tied to LKPM compliance

Post-NIB Compliance Checklist: 12 Steps to Full Operational Status

The window between NIB issuance and full legal operationality is where most compliance gaps form. The following checklist covers what every PT PMA should complete within 90 days of receiving its NIB.

#	Compliance Item	Details / Regulation
1	Confirm NIB Status (Terverifikasi)	Log in to OSS, verify status column is ‘Terverifikasi’, not just ‘Terdaftar’
2	Verify KBLI Risk Tier	Confirm risk category (Low/Medium-Low/Medium-High/High) in OSS profile
3	Obtain PKKPR	Mandatory for any physical operating address; apply via OSS Principal License module
4	Obtain Sectoral Izin Usaha	Required for Medium-High and High risk KBLI; apply via OSS or relevant ministry
5	Register for NPWP / Activate PKP	Ensure Coretax-OSS consistency; PKP activation required if turnover threshold is met
6	Apply for Environmental Approval	Persetujuan Lingkungan required for manufacturing, construction, and agro sectors
7	Obtain Building Permits (PBG/SLF)	Required if operating from owned or constructed premises; issued by regional government
8	Submit BPOM / Sectoral Registrations	For F&B, healthcare, and pharmaceutical sectors; apply directly to BPOM
9	Register with Kominfo (if applicable)	PSE registration mandatory for digital platforms and data services; data controller obligations under UU PDP 2022
10	File First LKPM Report	Submit through OSS within the applicable quarterly or biannual reporting window
11	Arrange Domicile Letter (SKDP)	Obtain from building management or RT/RW office to confirm operational address
12	Verify KITAS Eligibility	Confirm all permits are in order before KITAS applications for foreign directors or staff

The Gap Between NIB Issuance and Legal Operations: A Common Problem

Consider a manufacturing investor who receives an NIB in early 2026. The KBLI code selected falls in the Medium-High risk tier. Within 30 days, the company should have applied for its sectoral Standard Certificate compliance standards and initiated a PKKPR application. Without a compliance advisor guiding the process, these steps are frequently missed.

Three months later, the company hires its first foreign technical director and applies for a KITAS. The immigration process surfaces the incomplete OSS permit profile, and the application stalls. By this point, the company has been spending on salaries, rent, and equipment without being fully licensed to operate, putting every transaction in a legally ambiguous position.

This scenario is not unusual. The post-NIB compliance journey involves multiple agencies, varying timelines per sector, and a digital monitoring system that increasingly cross-checks license data across OSS, Coretax, and ministry databases. Business Hub Asia assists PT PMA companies with post-registration compliance audits, identifying every permit gap specific to the company’s KBLI code and operational profile, and coordinating submissions across the relevant authorities.

专业提示： A post-registration compliance audit within 30 days of NIB issuance is significantly faster and less costly than resolving enforcement actions after the fact. The earlier the gaps are identified, the more straightforward the remediation path.

Summary: Your NIB is the Beginning, Not the End

Getting an NIB is a genuine milestone. It signals that a company is legally registered in Indonesia and ready to begin the next stage of compliance. But for medium-high and high-risk businesses, especially foreign-owned companies in manufacturing, healthcare, digital services, and F&B, operating on an NIB alone creates real legal exposure.

The 2026 regulatory environment, shaped by GR 28/2025 and BKPM Regulation 5/2025, has made digital monitoring of post-NIB compliance tighter than at any prior point. Permit gaps are visible to authorities. LKPM scores are automated. Coretax and OSS now cross-check each other. Companies that understand this landscape and act on it early are significantly better positioned to scale, hire foreign staff, and attract partners with confidence.

For foreign investors navigating Indonesia’s post-NIB permit landscape, structured guidance from an experienced advisory firm can compress months of process uncertainty into a clear, actionable compliance roadmap.