E-COMMERCE SETUP

Setting Up a PT PMA E-Commerce Company in Indonesia

A decision-led brief on the difference between selling goods, operating a marketplace, developing software, processing data, and providing digital intermediation, built for foreign investors who need a controlled path from filing to lawful operations.

By Elara Vance Updated August 3, 2026 4-minute read

An e-commerce PT PMA may be a merchant, marketplace, software operator, or digital intermediary. The correct registration depends on who owns the goods, contracts with customers, receives payment, operates the system, controls data, and delivers or returns products. The conclusion must be matched to the exact KBLI, ownership, location, risk level, product or service, funding, and first transaction rather than applied as a general slogan. Document the official basis, approved source data, responsible owner, acceptance evidence, and unresolved conditions before signing, depositing capital, ordering assets, or operating. For the difference between selling goods, operating a marketplace, developing software, processing data, and providing digital intermediation, use current official outputs and fact-specific Indonesian advice instead of guaranteed provider claims. Learn more about the core Indonesia company registration service before selecting a filing scope.

Key takeaways

Do not release the next stage until the prior official output and source data are verified.
Choose the entity, KBLI, ownership model, and location before finalizing the deed.
Treat AHU incorporation, OSS licensing, tax readiness, banking, and immigration as separate evidence gates.
Keep investment value and paid-up capital separate from provider fees and recurring operating costs.

Distinguish merchant, marketplace, platform, payment, and logistics roles

An e-commerce company can be the merchant that owns inventory, a marketplace that intermediates third-party sales, a software developer, a marketing channel, a logistics coordinator, or several of those businesses. Each role changes the KBLI, ownership and investment calculation, consumer obligations, tax, product permits, payment flow, customs, warehousing, returns, data processing, and PSE analysis. The website label alone does not establish the licensed activity.

Compare the current OSS e-commerce application-development classification with the classifications for internet retail and digital intermediation, then test the live scope in OSS . A domestic electronic-system operator should review Komdigi PSE registration requirements . Build a transaction map showing seller of record, title to goods, merchant of record, payment recipient, invoicing party, platform commission, delivery, returns, complaints, personal data, prohibited products, and cross-border flows before the deed and OSS submission.

E-commerce roles

Merchant

Owns goods and sells to customer Register product and channel

Marketplace

Connects seller and buyer for commission Map platform duties

Technology

Develops or operates software and data Review PSE and privacy

Choose five-digit KBLI codes from actual revenue activities

Choose a five-digit KBLI from what the PT PMA will actually sell or perform, not from a broad website label or the code that appears easiest to register. Map each revenue stream, product, customer promise, delivery method, location, assets, people, import or distribution function, and regulated input to the current KBLI description. One company can use multiple eligible codes, but each code adds ownership, investment, licensing, premises, and reporting consequences.

Screen foreign ownership under Presidential Regulation 49 of 2021 and risk-based outputs under Government Regulation 28 of 2025 before finalizing the deed and OSS. Keep a rationale with example invoices, contracts, process maps, product lists, and sector advice. Do not use an inaccurate consulting code to conceal trading, construction, transport, health, education, food, property, or another regulated activity. Recheck when the business launches a new revenue line.

KBLI evidence	Evidence	Control action
Revenue	What customers pay the company to do	Map each stream
Conditions	Ownership, risk, sector, and premises	Check exact code
Records	Deed, OSS, contracts, and invoices	Keep facts consistent

Translate the OSS risk tier into an operating gate

Indonesia's OSS framework connects each business activity to a risk tier, and the tier determines the principal licensing output. Low-risk activity uses the NIB; medium-low uses the NIB plus an unverified Standard Certificate; medium-high uses the NIB plus a Standard Certificate that must be verified; and high-risk activity uses the NIB plus a license. Sector and supporting approvals can add conditions beyond that simplified sequence.

Use the current structure in Government Regulation 28 of 2025 and BKPM Regulation 5 of 2025 . Risk is assigned to the exact KBLI, scale, product, location, and facts entered in OSS, so an incorrect classification is not a strategy. Maintain a license matrix for every project showing status, prerequisites, verification, inspections, PB UMKU, obligations, reporting, and renewal. Operational approval should follow evidence, not merely NIB issuance.

Risk outputs

Low

NIB

Action: Check obligations

Medium-low or high

Standard Certificate

Action: Read verification status

High

NIB plus license

Action: Do not operate early

Build an accepted shareholder and authority file

The filing team needs usable evidence for each shareholder, authorized signer, director, commissioner, address, and declared business activity. Foreign individuals typically provide passport and contact data, while foreign corporate shareholders need constitutional and authority records that identify the entity and the person empowered to sign. The accepting notary should confirm the exact document, legalization, apostille, translation, and validity requirements.

Build a document register with issuer, document date, expiry or freshness rule, language, certification route, signatory, original location, and accepting institution. Indonesian company formation is processed through notarial and AHU business-entity services workflows, so a scan that looks complete to a provider may still require a different form or supporting authority. Resolve discrepancies in names, addresses, dates, and ownership before execution.

Document readiness

Identity

Passports and consistent personal data Resolve spelling and expiry issues

Corporate authority

Charter, registry proof, and signer mandate Confirm the shareholder can subscribe

Execution

POA, legalization, and translation path Obtain notarial acceptance before signing

Test the company before its first commercial transaction

Legal incorporation is only one readiness state. The company may still need verified OSS outputs, sector or supporting permits, tax access, PKP analysis, accounting and invoice controls, payroll arrangements, a bank account, premises evidence, and recurring reporting ownership before it can execute the planned transaction. Each state should be independently evidenced.

Use DGT registration guidance for the tax registration workstream and Government Regulation 28 of 2025 for the licensing baseline. Build a first-transaction test covering authority, contract, invoice, tax, payment, license, delivery, accounting entry, and reporting. Do not let a certificate date become the commercial launch date unless every required control passes.

Readiness gates	Evidence	Control action
Incorporated	Deed and AHU legal-entity approval	Entity legally exists
Licensed and tax-ready	Applicable OSS and tax outputs	Activity can proceed under conditions
Operational	Bank, people, premises, controls, and reporting	First transaction can be executed

Approve the e-commerce structure after product, platform, payment, data, and logistics roles are fixed

The decision for Setting Up a PT PMA E-Commerce Company in Indonesia should be approved only when the company structure, ownership position, documents, governance, capital, address, licensing, tax, banking, and responsible owners are consistent. If one of those facts remains conditional, record it as a pre-filing or pre-operation gate instead of hiding it inside a broad provider promise.

The board or founders should sign a short mandate naming the chosen route, approved source data, budget, payment limits, acceptance evidence, unresolved conditions, and first lawful transaction. That mandate gives the notary and providers clear instructions while preserving investor control over changes. Recheck current official rules immediately before filing because sector, OSS, tax, banking, and immigration requirements can change.

Frequently asked questions

Is an online seller the same as a marketplace operator?

What is the correct registration order?

Define activity and structure, screen ownership and KBLI, approve documents and governance, execute the deed, obtain AHU approval, complete tax data, enter OSS, and satisfy the applicable risk-based and sector requirements.

Who should verify the final outputs?

An authorized company officer should compare the deed, AHU, tax, OSS, license, beneficial-owner, and bank data against the approved master record and retain direct access to each system or document.

Does company registration alone allow the business to start operating?

Not always. Legal-entity approval and an NIB are important outputs, but the activity may still require a verified Standard Certificate, a license, supporting PB UMKU, premises evidence, tax activation, or another sector condition. Read the status and obligations attached to the exact KBLI before the first commercial transaction.

Is paid-up capital the same as a registration fee?

No. Paid-up capital belongs to the company as shareholder equity and must be documented and used consistently with current rules. Provider fees, official charges, translations, address costs, and operating expenses are separate. Never transfer a capital amount to an agent merely because an invoice calls it a setup fee.

Official references