Indonesia Corporate Tax Audit: Process and Document Checklist

Key takeaways

• Start with the audit notice. It frames the tax periods, audit basis, and first procedural controls; the company should not assume a full-scope audit from a narrow request.
• Use a return-to-record trail. Every material position should link from tax filing to ledger, source document, contract, payment, and an accountable preparer.
• Timing depends on the audit category. PMK 15/2025 distinguishes full, focused, and specific examinations, so the company needs an evidence plan that matches the actual scope.
• Treat preliminary findings as a response stage. A written position should be tested against the audit working file rather than drafted as a negotiation note.
• Close the record after the audit. Findings, evidence gaps, and ownership failures should become permanent controls for the next filing cycle.

Read the audit notice as a scope document

Indonesia’s current audit rules are in Minister of Finance Regulation 15 of 2025 . The regulation categorises compliance examinations as full, focused, or specific. That distinction is not merely administrative: it changes the expected breadth of testing, the internal experts needed, and the appropriate evidence map.

Extract the taxpayer identity, relevant tax periods, tax types, audit category where stated, delivery date, information requests, and named contact into a single audit-control sheet. The audit file should be built around the actual notice, not around a generic all-years archive. This avoids spending the first week finding documents that have no bearing on the examination.

A full examination can require an integrated view of the return and related tax positions. A focused examination should not tempt the company to ignore dependencies: a selected revenue line may still need contract, VAT, withholding, and bank evidence to be understood. A specific examination should receive the fastest document response, while management keeps a short register of adjacent issues that could require a separate review. The coordinator’s job is to prevent scope drift from being confused with an unstructured request for every company record.

Corporate identity records can still be relevant, particularly if the audit tests the beginning of operations, registered address, directors, capital movements, or related-party authority. Place those source materials alongside the entity documents used when establishing a company in Indonesia , but keep them separate from tax-workpaper conclusions.

Stage documents by the tax assertion they prove

Do not deliver a collection of folders without an index. Start with the corporate return and all periodic returns within scope, then create a document matrix that connects every material tax position to accounting and commercial evidence. A request list may change during the examination; a matrix preserves the original source, version, and reviewer for each document instead of forcing the team to rebuild the narrative later.

The annual tax return is the natural starting point, but the response cannot stop there. Use the entity’s annual corporate return records to identify schedules that should agree with the ledgers and transaction support before the audit team asks for a deeper explanation.

Organise the pack in the order a reviewer will test it: index, return or schedule, reconciliation, source documents, and concise explanation. For each file, record whether it is an original, a system export, or a management-prepared schedule; record the source location and extraction date. That discipline protects the company when a later revised ledger report produces a different balance. It also allows the team to explain a legitimate adjustment without making unsupported claims about the earlier version.

Run the testing stage with one controlled record

During testing, maintain one version-controlled request log. It should show the request, the source owner, the document supplied, the date supplied, what it proves, and any qualification. This simple operating record prevents a common failure: a tax adviser, finance manager, and business unit providing overlapping but inconsistent answers to the same point.

Preserve originals and work from controlled copies. Do not alter ledger extracts, backdate approvals, or create a contract summary that conceals a missing source document. A defensible audit file explains a discrepancy and its limits; it does not attempt to erase the evidence trail.

Before a document leaves the company, apply a simple four-part check. Confirm that it is complete, that its tax period and legal entity match the request, that its figures agree to the return or reconciliation, and that its recipient is authorised. This should cover electronic data exports as well as scanned contracts. If an explanation relies on an assumption, label the assumption and assign an owner to verify it; assumptions should never silently become stated facts in the response log.

When a request expands beyond the original scope, note the new question, affected period, and additional evidence required. Then decide whether the company needs a separate legal, accounting, or transfer-pricing workstream. A single audit coordinator should route factual questions to the right record owner but should not write commercial explanations alone.

Respond to preliminary findings as a documented position

PMK 15/2025 places the preliminary-results notice and final discussion within the audit process. A company should treat any preliminary finding as a structured response point: identify the factual premise, test it against the request log, state the company’s position, and attach only documents that support that position. Avoid submitting a narrative that concedes a classification or amount before the relevant schedule has been checked.

The published rule sets a five-working-day period for written responses to a preliminary findings notice, so the response pack should be largely ready before that stage arrives. If a point involves a material legal interpretation, a prior tax position, or an amount that could change financial statements, escalate the written position for review before it is sent.

A high-quality response normally has four layers: the issue as described, the company’s factual correction or agreement, the document references, and the requested treatment or clarification. Keep each layer distinct. If the company agrees with an arithmetic point but disputes the legal classification, say exactly that. If a record exists but is still being retrieved, do not present it as attached. Preserve delivery proof and final meeting records, because those materials can become important if the matter later moves beyond the audit stage.

Audit timing bands under PMK 15/2025

The timing table is a planning tool, not a promise that every issue will finish on the shortest route. It helps management allocate review capacity early and understand why an evidence backlog is dangerous in a focused or specific examination.

For full, focused, and usual specific audits, final discussion and reporting have a separate period of up to 30 working days under the regulation. Check the current notice and any extension information against the official rule rather than using this table to calculate a filing or dispute deadline.

Timing should drive resourcing, not shortcuts. A company can use the first internal deadline to complete the return-to-record matrix, a second deadline to resolve open factual gaps, and a final review deadline to approve the written position. That sequence is especially useful where finance records are held in multiple systems or a foreign parent must retrieve corporate approvals.

Deciding your corporate tax audit plan

A narrow audit with complete records can be managed through a concise scope sheet, document matrix, request log, and signed-off factual response. Management should judge progress by whether every material position is traceable, not by the number of files supplied.

Escalate early where the audit crosses tax periods, involves related parties or foreign transactions, exposes an unsupported deduction, or creates a potential assessment dispute. The right audit plan is the one that preserves a single verifiable record from the first notice through the final response.

Frequently asked questions

Related insights

• Does a PT PMA Need an Audit in Indonesia?
• PT PMA Financial Reporting Reconciliation: Ledger, Tax, LKPM, and Corporate Records
• PT PMA Withholding Tax Control Failures: Classification, Evidence, Payment, and Filing
• Indonesia E-Faktur and VAT Invoice Control Guide