FOUNDER CONTROL
Protecting Control in an Indonesian PT PMA Setup Guide
A decision-led briefing on shareholder rights, board authority, reserved matters, payments, credentials, originals, and provider exit, for foreign investors who need evidence they can verify before acting in Indonesia.
Control in a PT PMA comes from lawful share ownership, enforceable constitutional and shareholder arrangements, properly appointed directors and commissioners, reserved matters, signing limits, payment controls, and possession of company records and credentials. It should not depend on nominee promises, a provider's personal accounts, blank documents, undisclosed powers, or one person's exclusive access to the bank, OSS, tax, email, and originals. Treat every important claim as an evidence question: who has authority, which rule applies, what official output is required, what status makes it usable, and who owns the next action. If the result is conditional, record the condition as a pre-signing or pre-operation gate. That approach prevents a certificate, title, payment receipt, or provider message from being mistaken for a complete approval.
Key takeaways
- Control in a PT PMA comes from lawful share ownership, enforceable constitutional and shareholder arrangements, properly appointed directors and commissioners, reserved matters, signing limits, payment controls, and possession of company records and credentials.
- Build the control framework from current official requirements and recipient-accepted evidence.
- Treat the control framework as incomplete until its corporate, regulatory, payment, and operating records agree.
- Keep official outputs, source data, payments, credentials, and unresolved conditions under company control.
Design lawful ownership, board roles, and signing authority
The governance file should identify shareholders, subscription amounts, directors, commissioners, authorized signers, reserved decisions, and beneficial owners. Under the Indonesian Company Law, a conventional PT is established by two or more persons subject to statutory exceptions, and its organs include the shareholders' meeting, board of directors, and board of commissioners. PT PMA planning should use the conventional corporate framework unless qualified Indonesian advice confirms another route. For the control framework, the immediate acceptance point is to verify authority and funding against the documented subscribers, shares, and beneficial owners.
Check the current consolidated effect of the Indonesian Company Law and sector rules with the notary. Foreign directors or commissioners can raise immigration, employment, tax-residency, bank-presence, and practical signing questions even where corporate eligibility is available. Define who can bind the company, open and operate accounts, approve payments, sign tax filings, and respond to authorities before the deed is executed. Within the control framework file, the responsible officer should preserve directors, commissioners, and duties as evidence for the decision to check eligibility and practical presence.
If a provider receives temporary filing power, the closing checklist should incorporate power-of-attorney revocation and handover controls rather than leaving authority open after registration.
Governance controls
Ownership. Subscribers, shares, and beneficial owners; verify authority and funding.
Management. Directors, commissioners, and duties; check eligibility and practical presence.
Authority. Reserved matters and signing limits; adopt resolutions and controls.
Validate the evidence before the next commitment
Convert the open questions into a dated review file with named owners, accepted evidence, and a clear stop condition.
Trace signing power from the deed to the specific transaction
A director's title does not answer every authority question. Start with the Indonesian Company Law , the articles of association, current AHU record, shareholders' or board resolutions, reserved matters, transaction thresholds, joint-signature rules, conflicts, and any lender, license, or shareholder-agreement condition. Then identify the legal act: an ordinary contract, property commitment, financing, guarantee, bank instruction, employment action, notarial deed, tax filing, OSS declaration, or delegated power can require different evidence. For the control framework, the immediate acceptance point is to match the transaction against the documented board or shareholder resolution and limits.
Prepare an authority certificate for material transactions that states the company, current directors, relevant constitutional clause, approval body, resolution date, signatory combination, financial limit, validity, and exclusions. Compare it with the counterparty's original or independently verified corporate documents. A specimen signature, business card, email, or possession of a company stamp is not enough. Where authority is delegated, inspect the power of attorney, authentication, substitution right, expiry, revocation, and whether the principal retained the power to grant it. Within the control framework file, the responsible officer should preserve signer, joint rules, and power of attorney as evidence for the decision to verify before commitment.
Authority chain
| Control | Evidence | Decision |
|---|---|---|
| Constitution | Deed, AHU record, and reserved matters | Use current corporate evidence |
| Approval | Board or shareholder resolution and limits | Match the transaction |
| Execution | Signer, joint rules, and power of attorney | Verify before commitment |
Verify provider authority, custody, and correction liability
Provider due diligence should establish identity, contracting entity, professional role, authority, payment account, and responsibility for every filing. An agent may coordinate work without being the notary, lawyer, tax adviser, immigration sponsor, or bank decision-maker. The engagement should identify each actual performer and the limits of their authority. For the control framework, the immediate acceptance point is to set handover and recovery rights against the documented originals, credentials, and official outputs.
Before payment, verify official company and registration evidence and use a controlled contract. An independent document and payment check should support the provider review. Require no guaranteed approvals, no unexplained personal accounts, no withholding of company credentials, and no substitution of screenshots for downloadable official records. State how errors, rejected submissions, missed deadlines, and termination will be handled. Within the control framework file, the responsible officer should preserve contracting entity and actual professionals as evidence for the decision to verify authority and conflicts.
Provider checks
Identity and role
Contracting entity and actual professionals
Verify authority and conflictsMoney
Entity bank account, invoice, tax, and receipt
Control deposits and disbursementsCustody
Originals, credentials, and official outputs
Set handover and recovery rightsResolve the decision gaps before filing
Reconcile the corporate, regulatory, payment, and operating facts before they become amendments or rejected submissions.
Take control of documents, credentials, and open obligations
A registration engagement is not complete until the company can operate without dependence on the provider's personal accounts or device. Handover should cover final documents, source data, credentials, registered email and phone details, authentication methods, originals, payment receipts, filing history, and unresolved obligations. Access should be tested by an authorized company officer. For the control framework, the immediate acceptance point is to inventory and verify against the documented final files, originals, and filing receipts.
Remote matters need an especially clear revocation and recovery plan. Reconcile the deed, AHU approval, tax record, NIB, licenses, shareholder register, beneficial-owner data, and bank application before acceptance. Record who holds each original, how each credential can be recovered, and when any power of attorney or temporary access must end. Within the control framework file, the responsible officer should preserve OSS, tax, email, phone, and authentication as evidence for the decision to transfer and test control.
Prepare for the bank's independent KYC and account decision
A corporate bank account is not issued automatically because the PT PMA has an AHU approval, NPWP, or NIB. The bank independently assesses the company, beneficial owners, shareholders, directors, signatories, business purpose, licenses, address, contracts, expected transactions, currencies, source of funds and wealth, tax residence, sanctions and risk factors, and original-document or presence requirements. Criteria can differ by bank and branch. For the control framework, the immediate acceptance point is to complete KYC against the documented UBO, shareholders, directors, and signatories.
Build one KYC file that reconciles the executed deed, AHU corporate output , tax data, OSS licenses, UBO report, ownership chart, passports, corporate-shareholder documents, address evidence, business plan, contracts, and funding narrative. Ask the chosen bank for current requirements in writing, but preserve a fallback institution and visit plan. Before the first remittance, approve signatory combinations, online access, token custody, payment limits, beneficiary controls, accounting evidence, and how paid-up capital will be described and used. Within the control framework file, the responsible officer should preserve access, limits, funding, and evidence as evidence for the decision to control before deposit.
Bank onboarding
Company. Deed, AHU, tax, NIB, licenses, and address; use final outputs.
People. UBO, shareholders, directors, and signatories; complete kyc.
Account. Access, limits, funding, and evidence; control before deposit.
Protect lawful control through documents, approvals, access, and independent evidence
The approval decision for the control framework should name the selected route, responsible company officer, accepted source data, supporting documents, official outputs, payment limits, unresolved conditions, and the event that permits the next commitment. For shareholder rights, board authority, reserved matters, payments, credentials, originals, and provider exit, a conditional result should remain a visible gate rather than being absorbed into a broad statement that setup is complete.
The founders or board should sign a short control framework mandate that records the current facts, authority, required corrections, evidence location, system and credential owners, review date, and first transaction that the company intends to perform. A defensible decision begins with the real commercial activity and the people, money, documents, locations, and authority needed to carry it out. Recheck current official and institution-specific requirements immediately before filing, funding, signing, employing, or operating.
Put the approved route under company control
Record the decision, authority, documents, access, payment limits, and follow-up calendar in one owner-approved mandate.
Frequently asked questions
Can a shareholder agreement override the deed or mandatory law?
No. The governance documents should be drafted together and tested for enforceability, corporate implementation, conflicts, and third-party recognition under Indonesian law.
Can one director sign every PT PMA transaction?
Only if the current articles, approvals, joint-signature rules, limits, conflicts, and transaction-specific requirements allow it.
Should bank mandates match the deed exactly?
They should be supported by current corporate authority, but banks apply their own mandate forms, KYC, limits, and activation procedures.
How should emergency authority be handled?
Adopt defined succession, temporary delegation, approval, access, and revocation procedures before a director becomes unavailable.
What should be checked before relying on a resolution?
Verify the correct corporate body, notice and quorum, voting, conflicts, scope, date, signatures, supporting deed provisions, and any later revocation or amendment.
