DIGITAL INFRASTRUCTURE
Indonesia Data Centre and Cloud Company Registration: PT PMA, KBLI, Licences, and Cost
An infrastructure-led setup plan covering entity scope, compute services, electronic-system registration, sites, security and contracting.
A data-centre or cloud business should form its Indonesian PT PMA only after separating colocation, computing infrastructure, telecommunications, managed services, platform operations and customer-data processing. Those functions can map to different KBLI codes, ownership conditions, risk levels and technical regulators. The company may need PSE Lingkup Privat registration before its electronic system is used by Indonesian users, while a physical data centre also depends on land, power, building, environmental, fire, security and network arrangements. An NIB alone does not authorise every service or prove site readiness. Costs extend far beyond incorporation: capital, land or lease, grid capacity, backup power, equipment, cybersecurity, certifications, telecom contracts, technical staff and ongoing compliance determine the real budget.
Digital Infrastructure cost and timeline snapshot
A document-ready PT PMA should plan IDR 56–173 million for first-year external corporate and compliance work. Clean core formation is commonly 10–30 business days; regulated readiness may require 40–70 business days or longer.
The range combines IDR 23–90 million formation, IDR 15–35 million address and IDR 18–48 million compliance. Upfront funding is at least the greater of IDR 2.5 billion equity or the fee-and-working-cash budget; the investment plan is separate. Shareholders or the company pay each recipient at its milestone.
Lean, low-risk
IDR 38 million one-time setup plus IDR 18 million first-year compliance; total IDR 56 million. Keep IDR 2.5 billion equity and the above-IDR-10-billion investment plan separate. Plan 10–20 business days.
Standard, document-ready
IDR 35 million one-time setup including address plus IDR 30 million compliance; total about IDR 65 million. Keep IDR 2.5 billion equity and the above-IDR-10-billion plan separate. Plan 15–30 business days.
Complex or regulated
IDR 73–125 million one-time setup and address plus IDR 48 million compliance; total IDR 121–173 million. Keep IDR 2.5 billion equity, the above-IDR-10-billion plan, sector work and premises separate. Plan 40–70 business days.
Checked August 11, 2026: 2026 PT PMA package and cost benchmarks , independent Indonesia registration timeline benchmark , 2026 accounting and address market ranges and August 10, 2026 USD/IDR market close . Figures exclude VAT and withholding unless stated; they are market estimates, not official tariffs.
Key takeaways
- Decide whether Indonesia will host physical infrastructure, resell a foreign cloud, provide managed IT, operate a platform, or combine these roles.
- Screen each infrastructure, telecommunications, computer-service and platform activity separately under the current investment conditions.
- The first transaction must wait for the licences and conditions attached to the actual activity and location.
- The critical timeline depends on activity classification, ownership screening, entity formation, site and power agreements, design approvals, construction, system registration, security readiness and customer acceptance, not the deed date alone.
- The cheapest filing is not the lowest-cost route if the resulting company cannot perform its first transaction.
Confirm the right route for Indonesian data-centre or cloud-services company
Review the assumptions that decide whether the Indonesian data-centre or cloud-services company can lawfully perform its first customer commitment.
Define cloud, colocation, connectivity, and asset roles
A workable data-centre route begins with the real customer promise and the allocation of assets, personnel, funding and authority for an Indonesian data-centre or cloud-services company. Decide whether Indonesia will host physical infrastructure, resell a foreign cloud, provide managed IT, operate a platform, or combine these roles. Contract wording, data flows and asset ownership should match the selected KBLIs and regulator-facing descriptions. The approved data-centre perimeter controls deed wording, KBLIs, shareholders and project locations. Link data-centre licences, tax and bank evidence before authenticating foreign documents or committing a site.
Draft a one-page data-centre responsibility map for colocation, infrastructure hosting, cloud compute, managed services, network connectivity, software platforms and processing of customer data. Separate the Indonesian company's work from the foreign group's role, then identify any licensed counterparty and the party bearing data-centre customer liability. Also assess this alternative before commitment: a reseller, managed-service or foreign PSE route may be evaluated before committing to an Indonesian physical data-centre project. Define which data-centre evidence or commercial change would require a different KBLI, contract chain or vehicle.
Structure ownership, capital, and infrastructure funding
Screen data-centre ownership separately for every five-digit KBLI and project location. Screen each infrastructure, telecommunications, computer-service and platform activity separately under the current investment conditions. A parent may own the PT PMA where the selected fields permit it, but licences and customer requirements may impose additional control, security or local-presence expectations. Test the proposed data-centre percentage under Presidential Regulation 10 of 2021, as amended . Then use the live OSS result for data-centre to confirm authority, business scale, location and activity conditions.
A defensible budget for an Indonesian data-centre or cloud-services company distinguishes paid-up equity from the investment plan. Under Minister of Investment/BKPM Regulation 5 of 2025 , the general PT PMA floor for the data-centre or cloud business is IDR 2.5 billion of issued and paid-up capital unless a special rule applies. Planned investment is separately expected to exceed IDR 10 billion for every five-digit KBLI and project location, excluding land and buildings. Keep both data-centre figures outside the provider-fee column and check for any higher industry requirement.
For the data-centre or cloud business, approve the UBO chain, board appointments, voting and reserved matters. Align signing limits, the funding schedule and the data-centre bank narrative in the same control set. Name accountable owners for systems, information security, privacy, network operations, incident response, facilities and regulator communications. Outsourcing operations does not remove the Indonesian entity's contractual and compliance responsibilities.
Prepare corporate, PSE, security, and customer records
Build the data-centre recipient pack around the real submission needs. Add a system architecture, service catalogue, data-flow map, server and domain details, security ownership, disaster-recovery design, power requirements, site rights and customer contract model to the normal corporate and shareholder pack. The data-centre master sheet should record names and addresses, identity sources, shares and capital, KBLIs and locations, and authorised signers. Reconcile those data-centre fields across the deed, OSS, tax, bank and sector records at every handoff.
The company-law step for an Indonesian data-centre or cloud-services company is not an OSS shortcut. Under Minister of Law Regulation 49 of 2025 , the notary prepares the deed and obtains the Ministry result through AHU corporate services after validating the data-centre source documents. The data-centre corporate result becomes the source for OSS, tax, banking and regulator applications. Require a data-centre audit trail and company-controlled access before the formation engagement is closed.
Run the registration of an Indonesian data-centre or cloud-services company against the stage table and reject status-only updates. The company needs the actual filing, approval, credential or acceptance evidence and a responsible owner for every open item. The terms of an Indonesia company registration engagement should specify the final data room, not merely promise company setup.
Data-Centre implementation path
| Stage and decision | Start and owner | Elapsed time and basis | Output and stop-clock |
|---|---|---|---|
| Service model: Separate colocation, cloud, network and managed services | Start: Before KBLI selection. Owner: Shareholders, adviser and notary | 4–10 business days for scope and accepted source documents. Checked August 11, 2026; official SLA only where the live service publishes one. | Output: Service, asset and data-flow map. Stop: inconsistent identity, ownership, activity or authentication data. Rework: +2–10 business days. |
| Entity: Form the PT PMA and register projects | Start: Ownership and scope. Owner: Notary and AHU | 4–10 business days for deed and Ministry formation work. Checked August 11, 2026; official SLA only where the live service publishes one. | Output: Deed, AHU approval, NIB and tax profile. Stop: name, authority, deed data or recipient correction. Rework: +2–10 business days. |
| Infrastructure: Secure site, power, network and technical approvals | Start: Design and location. Owner: Director, OSS, tax office and bank | 3–10 business days where OSS, tax and bank steps can overlap. Checked August 11, 2026; official SLA only where the live service publishes one. | Output: Executed capacity and compliance file. Stop: source-data mismatch, KYC, tax validation or system error. Recovery: +3–20 business days. |
| System: Register and test the customer-facing electronic system | Start: Operational configuration. Owner: Licence owner and issuing authority | 10–60 business days for sector work; complex review can take longer. Checked August 11, 2026; official SLA only where the live service publishes one. | Output: PSE record, security and launch acceptance. Stop: missing site, technical person, inspection, product or supporting approval. Rework: +5–40 business days or more. |
Sequence site, power, telecom, data, and operating approvals
Revenue for an Indonesian data-centre or cloud-services company should wait until permission is proved for the exact activity and location. Komdigi requires private electronic-system operators meeting the stated criteria to register, and the official PSE guidance identifies domestic registration information such as system name, sector, URL, DNS or IP, business model, data processed and processing locations. Telecom or other regulated connectivity must be assessed separately. The Komdigi private PSE registration criteria is the primary current reference for this part of the route and should be checked again against the exact project immediately before submission. Apply Government Regulation 28 of 2025 to the national risk-based framework for data-centre affecting data-centre. Use OSS risk-based licensing system to verify the live data-centre KBLI 2025 risk level, issuing authority and supporting permissions.
Treat data-centre premises as part of the approval route, not as a later property task. For a physical facility, secure compatible land use, building approvals, environmental evidence, reliable electrical capacity, backup generation, fuel and fire controls, physical security, cooling, water and network routes. Utility reservations should not be assumed from a standard office lease. Record data-centre zoning, building, environment and utilities by site. Track security, data, equipment, inspections and renewals in the same location file; keep acquisition, lease or construction conditional while data-centre feasibility remains open. The data-centre permission tracker should reflect choosing KBLI codes for PT PMA registration where the selected KBLI, location or first transaction creates that dependency.
The data-centre licence owner and operating team must become ready together. Name accountable owners for systems, information security, privacy, network operations, incident response, facilities and regulator communications. Outsourcing operations does not remove the Indonesian entity's contractual and compliance responsibilities. Before the first live data-centre transaction, test access, signing, escalation and payroll. Test tax, records, complaints, incident response and regulator contact separately. Never assume that a data-centre certificate tied to one person, location or service automatically extends to another.
Current official references used for this decision
Official materials were checked on August 11, 2026 for the cited conclusions. Live OSS, AHU and regulator outputs should still be refreshed immediately before submission.
- Minister of Law Regulation 49 of 2025 — supports the current Ministry of Law company-formation procedure.
- Government Regulation 28 of 2025 — provides the national risk-based business-licensing framework.
- Presidential Regulation 10 of 2021, as amended — provides the national investment-field and foreign-ownership framework.
- Komdigi private PSE registration criteria — sets out the activities that trigger private PSE registration.
Turn open conditions into an executable plan for Indonesian data-centre or cloud-services company
Sequence the unresolved items for Indonesian data-centre or cloud-services company by dependency rather than treating every filing as a parallel promise.
Model setup, facility, technology, and compliance costs
A board-ready cost model for an Indonesian data-centre or cloud-services company should disclose who receives each payment and what evidence it buys. For the data-centre or cloud business, split public charges, professional and document services, capital and project funds, site and technical readiness, and ongoing operations. For an Indonesian data-centre or cloud-services company, treat the IDR 23–90 million range in 2026 PT PMA package and cost benchmarks as corporate planning data, not the launch price. Paid-up equity, premises, technical permissions and project execution remain separate. Current Ministry PNBP for the data-centre filing should be checked under Government Regulation 30 of 2026 .
The variable cost profile for an Indonesian data-centre or cloud-services company is driven by site and power availability, building and environmental approvals, racks and computing equipment, cooling and backup systems, network interconnection, cybersecurity, certifications, insurance, technical staff and PSE or telecom compliance. Require each data-centre proposal to state assumptions, exclusions, third-party disbursements and tax treatment. It must also show data-centre payment milestones, conditional regulator work, completion evidence and refund terms. Reject a low filing price if the resulting data-centre vehicle cannot bank, employ, contract or perform its intended activity.
Time estimates for an Indonesian data-centre or cloud-services company should distinguish Ministry formation from the operating path. Use several weeks only as an indicative range for a straightforward, document-ready entity. The launch date is controlled by activity classification, ownership screening, entity formation, site and power agreements, design approvals, construction, system registration, security readiness and customer acceptance; track each item with an expected, stressed and outside-limit scenario.
Test owned, leased, and partner-operated infrastructure
Test an Indonesian data-centre or cloud-services company against the three fact patterns below before approving the structure. Changes in the data-centre or cloud business contracting, employment, inventory, site control or customer liability can change the KBLI and permission route. The data-centre structure should follow those facts rather than force them into a preselected package. When this fact pattern applies, resolve Indonesia risk-based licensing for PT PMA companies before approving the corresponding payment, site or launch decision.
For an Indonesian data-centre or cloud-services company, the immediate stop conditions include cloud and telecom scopes are conflated and power is assumed available. Pause the next irreversible data-centre payment until the stated controls produce accepted evidence. Do not proceed while data-centre capital, premises, responsible people or operating authority remain unsupported.
Scenario decisions for Digital Infrastructure
Hyperscale facility
The investor will construct and operate a large multi-tenant site.
Decision: Treat land, power, environment, construction and telecom dependencies as the critical path, not incorporation.
Cloud reseller
The Indonesian company sells and supports capacity hosted by a foreign provider.
Decision: Map contracting, data processing, PSE, tax and cross-border service responsibilities without claiming facility ownership.
Enterprise private cloud
A local PT PMA operates infrastructure dedicated to group or contracted enterprise users.
Decision: Define whether the model is internal infrastructure, managed service or public electronic-system operation.
Evidence gaps that should stop the data-centre launch
- Cloud and telecom scopes are conflated: Classify every revenue line and regulated network role separately.
- Power is assumed available: Obtain written capacity, connection, redundancy and delivery milestones.
- PSE registration is left until launch: Prepare system and data records before Indonesian user access begins.
Limits attached to the data-centre route
- The ownership conclusion assumes the stated data-centre activity and location. Re-screen it if the role, site or operator changes.
- An NIB does not override activity, site or sector conditions. Verify the live OSS output and accepting authority's requirements before revenue starts.
- The cited IDR 2.5 billion paid-up-capital floor and investment-plan threshold are general PT PMA rules, not registration fees; sector, concession or financing rules can require more.
Approve the first live data-centre service
Approve the launch of an Indonesian data-centre or cloud-services company only when the release evidence proves a first customer workload placed under a valid service, data, security, licence, capacity and incident-response framework. The data-centre memo should identify the legal entity, approved activities, locations, ownership and authority. It should record data-centre capital, licences, premises and responsible people, plus bank and tax status, open conditions, the evidence owner and review date.
Approve the first transaction only when Indonesian data-centre or cloud-services company is ready
Close the remaining gaps before customer money, operational authority or regulated work moves to Indonesian data-centre or cloud-services company.
Frequently asked questions
