BUSINESS LICENSING
Sector-Specific Business Licences in Indonesia: Check the Regulator and Application Route
Separate the rule owner, filing channel and approval evidence before starting a regulated activity.
An Indonesian sector-licensing plan depends on what the business actually does, who operates it and which approval covers that function. Online Single Submission (OSS) is a filing system; the responsible sector authority and the evidence needed to start operations are separate questions. A Business Identification Number (NIB) does not, by itself, authorize every regulated activity.
Confirm the activity and operator before selecting an application route. The national risk-based framework now uses Government Regulation 28 of 2025 , which replaced Government Regulation 5 of 2021. The route examples below distinguish business licensing, specialist financial-service applications and processed-food product registration; they are checks for choosing a route, rather than a catalogue of all Indonesian licences.
Key takeaways
- One company can need approvals for different activities, locations or products; establish the scope of each record before filing.
- Record the decision-making authority alongside the portal name so a technical submission problem reaches the right recipient.
- Bank Indonesia directs new applications to ease, while its notice keeps ongoing applications in e-Licensing.
- A submitted application, account activation and an issued approval are different evidence milestones.
- Choose the application module from the regulated business model; a broad label such as fintech or manufacturing is insufficient.
Define the activity that needs permission
Start with an activity statement that another person can test against the proposed contracts: what the Indonesian entity supplies, who receives it, where the work happens and which party takes responsibility. A product name or an investor presentation often leaves those points unresolved. For a digital service, describe what the system does with payments, customer information and financial decisions. For goods, distinguish manufacture, import, distribution and product release.
Create one activity record for each materially different function. Include the legal operator, relevant business classification, location, product or service, intended customer and proposed start condition. Then attach the supporting rule or official service description. This is a planning record, not a government form, and it should expose assumptions before they become filing errors.
Use the live OSS business-classification catalogue when matching Klasifikasi Baku Lapangan Usaha Indonesia (KBLI) codes; the public catalogue currently labels its classification KBLI 2025 and offers a conversion check from KBLI 2020. Compare the activity description as well as the number. An old code in a spreadsheet is a reason to reconcile the records, not a reason to guess a replacement.
The corporate workstream also needs a defined endpoint. forming a company in Indonesia establishes the underlying entity and registration records; the licence plan must then identify the permissions that cover its actual operations. Legal-entity formation and permission to perform a regulated activity are separate completion tests.
Before committing to shareholders, premises or a launch contract, flag any sector conditions that could change those choices. Obtain a project-specific reading of those conditions rather than borrowing another company's result. The same commercial label can describe an unregulated supplier, a licensed operator or a business supporting a licensed institution.
Identify the function before choosing a portal
Describe the proposed service, operator and location so the company and licence workstreams can be scoped together.
Match the regulator to the submission route
For an Indonesian business, match the proposed function to its responsible authority, then use that authority's published submission channel and required output. OSS business licensing may coexist with a specialist application or product approval. The crosswalk separates those jobs; a portal account or filing receipt should never be substituted for the approval in its final column.
| Activity or decision | Responsible authority | Submission route to check | Completion evidence to retain |
|---|---|---|---|
| Ordinary risk-based business licensing | The authority designated for the particular OSS activity and project | OSS; resolve the risk level and any supporting PB UMKU | NIB plus the required Standard Certificate or licence and fulfilled conditions |
| Payment-system activity requiring Bank Indonesia permission | Bank Indonesia (BI) | New applications: ease. Ongoing files: e-Licensing under BI's published notice | BI decision covering the proposed activity, with its applicable conditions |
| Innovative credit scoring (ICS) or financial-services aggregation (FSAO) | Otoritas Jasa Keuangan (OJK), the financial-services regulator | Business Licensing module in SPRINT; these models do not use FSTI Registration | OJK business licence for the applicable model and authorized scope |
| Processed food requiring BPOM registration | Badan Pengawas Obat dan Makanan (BPOM), the food and drug authority | OSS-integrated e-Reg RBA, with the relevant operator and product records | Applicable product authorization, in addition to business and facility prerequisites |
Bank Indonesia's portal notice distinguishes new and ongoing applications from 28 February 2025. Use that distinction when locating an existing case; an old bookmark is not evidence that a new file belongs there. For a business whose model could cross financial regulatory boundaries, financial technology and payment licensing choices should be resolved before incorporation assumptions are fixed.
OJK's current licensing instructions specifically direct ICS and FSAO applicants away from FSTI Registration and into SPRINT Business Licensing. Separately, OJK's SPRINT transition announcement confirms the transfer of SIJINGGA licensing services into SPRINT. Neither instruction means that every financial business uses the same application module.
BPOM's processed-food service guidance identifies e-Reg RBA as integrated with OSS. Integration does not make a product authorization identical to the operator's NIB. Keep the business, facility and product records connected, while tracking each required result separately. These examples are route checks, not findings that a particular product or service qualifies for a licence.
A company can follow more than one lane. The diagram joins the filing routes at the point where their outputs must describe the same operator and proposed scope.
Read the OSS output for each risk level
For an OSS activity, risk level determines the business-licensing output . It does not settle every product, facility or specialist regulatory question. Save the activity-specific result rather than applying a company-wide label such as low risk to every line of business.
| OSS risk level | Business-licensing output | Check before operational use |
|---|---|---|
| Low | NIB | The selected activity and its conditions are correct; check other applicable obligations |
| Medium-low | NIB and Standard Certificate | The required declaration and standards are addressed |
| Medium-high | NIB and verified Standard Certificate | Verification is complete for the relevant scope |
| High | NIB and Business Licence (Izin) | Required licence and applicable operating conditions have been satisfied |
The OSS output guide illustrates issued records and the distinction between submission and verification; BPOM's operator requirements also distinguish Standard Certificates, verified certificates and licences by business risk. Use current project records for the actual result. A downloadable document must be read together with its status and conditions.
Perizinan Berusaha untuk Menunjang Kegiatan Usaha (PB UMKU) concerns supporting business activities within the PP 28/2025 framework . Its presence in a licensing plan is a prompt to identify the particular supporting authorization and recipient. Do not use PB UMKU as an interchangeable name for every sector licence or assume one supporting approval covers all products.
Untangle the missing approval or dependency
Bring the activity record, filing references and outstanding requirements to identify which workstream is holding the launch decision.
Prepare a route-specific submission and evidence trail
Prepare a separate submission pack for each required route, linked by one consistent activity record. The sequence below is a practical control method. It avoids presenting a generic document list as the legal checklist for every regulator.
- Assign the applicant and access holder. Record the company name, NIB where applicable, authorized representative and official email used for the case. Keep access and correspondence recoverable by the business rather than relying on a single intermediary's inbox.
- Capture the route evidence. Save the authority's instruction, the selected subsector or module, the required approval and the rule version checked. For the FSTI-related routes described by OJK, account access in SPRINT and SIPO and settlement of the SIPO registration invoice precede completing the licensing application; use the relevant subsector requirements.
- Build the requirement register. Put each requested document beside its purpose, issuer, signer, version and dependency. Separate company records from facility, product, technical, governance or personnel evidence. Mark an item not applicable only when the rule and actual business support that conclusion.
- Submit and preserve the transaction. Retain the application reference, submitted version, attachments, any official payment record and the acknowledgement. Those records prove what was filed; they do not prove approval. If a requirement is unclear, resolve that point before certifying a statement.
- Close the case against its actual output. Download the issued authorization and relevant attachments, check the operator and scope, and record outstanding conditions, validity and any follow-up obligation shown. Confirm the matching status in the appropriate system and retain the decision correspondence.
OJK publishes the SPRINT/SIPO preparation sequence in its licensing process description ; it should not be generalized to BI, BPOM or ordinary OSS applications. Likewise, BPOM's e-Reg RBA update notice identifies its own application developments. Enter specialist services through their official instructions rather than a search advertisement or a portal copied from another sector's checklist.
Keep a short dependency note wherever one result unlocks another. For example, a product-registration pack may depend on the operator and facility evidence specified by BPOM. Schedule document preparation around that dependency; do not treat a successfully created product account as permission to release the product.
The launch test is the authorized scope, not the existence of an application number. Ask the person responsible for the activity to match the final output to the intended transaction, location and product. If the match depends on an assumption, leave that item open in the register.
Resolve a routing error before resubmitting
Repair a routing error at the point where the evidence stops matching the proposed activity. Do not create a second application simply because the first case is difficult to find. Start by preserving the existing reference and correspondence, then establish whether the issue concerns classification, the application module, incomplete evidence or an actual licensing decision.
Use the symptom to choose the correction
- An activity is described differently across records: reconcile the commercial scope and underlying company data first, then determine which records require an authorized amendment. A convenient code should not be used to conceal the activity.
- A familiar portal has no new-application route: check the official transition notice and case date. Preserve continuity of the existing case and follow the authority's instruction before moving or recreating it.
- The regulator is right but the application is in the wrong module: identify the intended decision and correct module. For ICS/FSAO, OJK's express distinction from FSTI Registration is a concrete example of this problem.
- An upload succeeded but approval is absent: inspect the requirement status and decision correspondence. Supply the specific missing evidence through the designated case route and keep the revised version tied to the original request.
For a system fault, send the technical support channel the case reference, affected function, time and a concise description of the error. For a question about legal scope or a substantive requirement, identify the responsible licensing authority in the enquiry. Portal support and licensing discretion serve different purposes; a technical fix does not determine eligibility.
Fix the licence route before committing to launch
Set the order of work from the unresolved decision. If the activity itself is unclear, finish the operator-and-function record first. If the regulator is identified, lock the correct route and application module before preparing the full pack. If a case is already filed, reconcile its status and outstanding requirements before promising a launch date.
Commit to the regulated activity only when the required outputs support the planned scope and their conditions have been addressed. Keep a named owner for every remaining obligation and reopen the route assessment when the operator, function, product or location changes. A licence plan is complete when the business can explain what each approval permits and produce the evidence behind that explanation.
Turn the route decision into a licence plan
Set out the required outputs, responsible people and unresolved conditions before coordinating the company setup and operating launch.
Frequently asked questions
Can one company need more than one application route?
Yes. The route follows the activity and required decision. Keep each approval tied to its scope even when several applications use the same corporate records.
Can application preparation start before every company record is final?
You can organize the evidence and identify dependencies early. Formal account activation or submission must wait for the prerequisites specified by the relevant service.
What should an adviser hand over when a filing ends?
Request the submitted pack, references, correspondence, issued outputs and a list of remaining conditions. Agree how the company will retain access to its records and monitor follow-up obligations.
Can a licence held by a parent company prove the subsidiary is covered?
Check the named licence holder and approved scope. Group ownership alone does not establish that the Indonesian applicant is included in another entity's permission.
Does a licence-route review replace a full sector application checklist?
No. Route selection identifies the authority, channel and required result. The project still needs the applicable documents, technical conditions and sector-specific assessment.