CONSULTANT CHECK
Indonesia Incorporation Consultant Due Diligence Before Signing or Paying
A decision-led briefing on incorporation consultant identity and engagement controls, for foreign investors who need evidence they can verify before acting in Indonesia.
An incorporation consultant should be evaluated as a counterparty handling sensitive identity data, powers, money, originals, and system access. Verify who contracts, who performs each professional task, and who holds the records. The safe sequence is to confirm the exact facts, identify the authority or institution that decides each stage, collect evidence in the form that recipient accepts, and assign corrections before money or authority moves. Founders should preserve the source data, official output, access credentials, payment trail, and change history so the company can demonstrate the basis for its decision later. The decision record should name the responsible owner and the evidence accepted for each unresolved condition.
Key takeaways
- An incorporation consultant should be evaluated as a counterparty handling sensitive identity data, powers, money, originals, and system access.
- Build the consultant due diligence from current official requirements and recipient-accepted evidence.
- Treat the consultant due diligence as incomplete until its corporate, regulatory, payment, and operating records agree.
- Keep official outputs, source data, payments, credentials, and unresolved conditions under company control.
Verify the consultant's legal identity before relying on online claims
A polished website, social account, advertisement, or messaging profile does not prove that a provider is the contracting entity or has authority to handle company documents and money. Match the quoted legal name and bank account to the deed, AHU record through the official company profile search , NIB, tax identity, office details, domain, email, invoice, and person signing the engagement. Check whether professional tasks are actually performed by appropriately authorized notaries, lawyers, tax professionals, or other specialists. For the consultant due diligence, the immediate acceptance point is to match one contracting entity against the documented AHU, NIB, NPWP, domain, office, and payee.
Request a scope with named deliverables, government and third-party fees, dependencies, exclusions, correction responsibility, refund rules, credential ownership, data protection, handover, and complaints route. Verify sample outputs only after redaction and never accept another client's reusable certificate as proof. Make milestone payments to the verified contracting entity after independently checking the agreed evidence, not to a personal account because an online salesperson says the filing is urgent. Within the consultant due diligence file, the responsible officer should preserve named professionals and permitted tasks as evidence for the decision to confirm who performs each service.
Online provider verification
| Control | Evidence | Decision |
|---|---|---|
| Identity | AHU, NIB, NPWP, domain, office, and payee | Match one contracting entity |
| Authority | Named professionals and permitted tasks | Confirm who performs each service |
| Contract | Deliverables, fees, data, handover, and remedies | Control the engagement |
Verify the incorporation consultant identity and engagement controls before the next commitment
Turn the current facts, official checks, accepted evidence, open conditions, and responsible owners into one dated decision file.
Require the consultant to prove each material judgment
A PT PMA consultant should convert the founders' business model into documented decisions on entity fit, foreign ownership, KBLI, capital, shareholders, directors and commissioners, beneficial owners, address, risk-based licensing, tax, banking, employment, immigration, and launch controls. A checklist that records only submitted or done is insufficient; each high-risk conclusion needs the fact source, legal or official basis, responsible specialist, assumptions, output, and unresolved condition. For the consultant due diligence, the immediate acceptance point is to name accountable owners against the documented specialists, submissions, corrections, and status.
Assess competence by reviewing a redacted work product, not testimonials alone. Confirm the contracting entity, named adviser, notary relationship, tax and immigration boundaries, conflicts, data handling, professional insurance where applicable, change-control process, and escalation route. The contract should deliver the source-data sheet, written advice, official files, credentials, originals, payment evidence, compliance calendar, and open-item register so the company can continue without the consultant. Within the consultant due diligence file, the responsible officer should preserve files, access, calendar, and open items as evidence for the decision to test independence.
Consultant acceptance
Advice
Facts, basis, assumptions, and conclusion
Require written evidenceExecution
Specialists, submissions, corrections, and status
Name accountable ownersHandover
Files, access, calendar, and open items
Test independencePerform KYC on the registration agent before sharing documents or money
Founder KYC should begin with the agent's full legal name, registration number, address, directors, beneficial owners, bank account, tax invoice capacity, website and domain, named contact, professional role, notary or specialist relationships, and authority to handle filings. Compare the contract, invoice, bank beneficiary, email domain, WhatsApp identity, and official registry evidence. A logo, office photograph, social-media following, or copy of another client's certificate does not prove authority. For the consultant due diligence, the immediate acceptance point is to apply least access against the documented money, documents, credentials, and data.
Risk-screen the agent for sanctions, adverse regulatory history, conflicts, unexplained changes of entity, personal payment requests, reused contact details, unrealistic approval promises, pressure to sign blank documents, and refusal to identify subcontractors. Limit the personal and corporate data supplied to the verified task, use secure transfer, watermark copies where appropriate, record recipients, and require deletion or return at termination. The company should control official email, phone, credentials, recovery methods, and originals from the start. Within the consultant due diligence file, the responsible officer should preserve entity, owners, directors, address, and domain as evidence for the decision to verify independently.
Resolve the open conditions in the consultant due diligence
Reconcile the corporate, regulatory, document, payment, and operating dependencies that can change the result for this company.
Normalize price, scope, taxes, and exclusions
A provider quote is comparable only when scope, assumptions, taxes, third-party charges, and acceptance evidence are normalized. Headings such as complete setup, bank support, or all licenses have no operational meaning unless the proposal names the precise output and any condition outside the provider's control. The investor should convert each offer into the same comparison sheet. For the consultant due diligence, the immediate acceptance point is to mark included, excluded, or conditional against the documented named output and acceptance test.
Require legal entity, KBLI analysis, foreign ownership review, deed, AHU output, tax setup, OSS output, license verification, address work, bank assistance, immigration, compliance onboarding, originals, credentials, corrections, and cancellation terms to appear as included, excluded, optional, or conditional. Link payments to verifiable milestones and never pay capital or government charges into an unexplained personal or intermediary account. Within the consultant due diligence file, the responsible officer should preserve fee, tax, disbursement, and currency as evidence for the decision to compare the same commercial basis.
The termination terms should preserve the evidence needed for changing a registration agent mid-setup without surrendering filings, originals, credentials, or payment history.
Quote normalization
Scope. Named output and acceptance test; mark included, excluded, or conditional.
Price. Fee, tax, disbursement, and currency; compare the same commercial basis.
Risk. Correction, delay, refund, and liability term; allocate foreseeable failure costs.
Release setup payments against independently verified evidence
A safe payment schedule links each amount to a defined deliverable, responsible professional, government or third-party charge, acceptance document, correction obligation, and refund rule. Separate incorporation, licensing, tax, bank-support, immigration, registered-address, translation, apostille, and optional advisory work. A deposit should not be described as a government fee unless the official amount, payee, payment channel, and receipt can be verified. For the consultant due diligence, the immediate acceptance point is to release only earned value against the documented specific output and independent acceptance evidence.
Verify that the contract entity, invoice issuer, bank-account holder, and provider identity match. Before each payment, review the actual deed draft, filing receipt, AHU output, NIB or license status, tax activation, original-document custody, and access handover promised at that milestone. Retain a stop right for identity mismatches, unauthorized substitutions, unexplained change orders, rejected work, and provider-controlled credentials. Within the consultant due diligence file, the responsible officer should preserve correction, refund, stop right, and handover as evidence for the decision to control failure consequences.
Payment release matrix
| Control | Evidence | Decision |
|---|---|---|
| Payee | Verified legal entity, invoice, account, and tax identity | Pay the correct party |
| Milestone | Specific output and independent acceptance evidence | Release only earned value |
| Protection | Correction, refund, stop right, and handover | Control failure consequences |
Approve the provider only after identity, authority, scope, and payment checks
The approval decision for the consultant due diligence should name the selected route, responsible company officer, accepted source data, supporting documents, official outputs, payment limits, unresolved conditions, and the event that permits the next commitment. For incorporation consultant identity and engagement controls, a conditional result should remain a visible gate rather than being absorbed into a broad statement that setup is complete.
The founders or board should sign a short consultant due diligence mandate that records the current facts, authority, required corrections, evidence location, system and credential owners, review date, and first transaction that the company intends to perform. The working file should connect legal identity, ownership, governance, activity, capital, premises, licensing, tax, banking, immigration, and real conduct wherever those facts are relevant. Recheck current official and institution-specific requirements immediately before filing, funding, signing, employing, or operating.
Put the approved consultant due diligence under company control
Record the final route, authority, source documents, access, payment limits, handover, review date, and next operating trigger.
Frequently asked questions
What should be confirmed before approving the consultant due diligence?
Confirm the current official position, recipient-specific requirements, authority, source documents, and unresolved conditions for incorporation consultant identity and engagement controls. Record the approval and evidence before the company signs, pays, files, or operates.
Can a registration provider guarantee approval?
No. The notary, AHU, OSS, tax authority, sector authority, bank, and Immigration make their own decisions; contracts should use evidence-based endpoints. For this consultant due diligence, record how that answer applies to incorporation consultant identity and engagement controls and preserve the evidence used.
Who should own the OSS and tax credentials?
The company should control registered contacts, authentication, recovery, downloads, and filing history through authorized officers, with limited provider access. For this consultant due diligence, record how that answer applies to incorporation consultant identity and engagement controls and preserve the evidence used.
How should third-party charges be paid?
Use an itemized approval, verified beneficiary, official or supplier evidence, receipt, unused-balance treatment, and reconciliation to the relevant deliverable. For this consultant due diligence, record how that answer applies to incorporation consultant identity and engagement controls and preserve the evidence used.
What should happen at termination?
Stop authority and access, return data and originals, transfer credentials and work files, reconcile money, identify pending submissions, and record correction and cooperation duties. For this consultant due diligence, record how that answer applies to incorporation consultant identity and engagement controls and preserve the evidence used.
Regulatory notes, official references, and review basis
Requirements affecting incorporation consultant identity and engagement controls were checked against the linked official or institution-specific materials on August 10, 2026. The responsible company officer should reconfirm the rule, system status, recipient requirements, and transitional conditions that apply on the actual filing, payment, signing, or operating date for the consultant due diligence.
