THAILAND BUSINESS CONTROLS

Thailand Company Setup Checklist: From Name Reservation to Legal Operation

A closeout register for owners who need to prove that incorporation, tax, permissions, banking, people, and launch controls are complete.

By Elara Vance Updated September 4, 2026 15-minute read

Incorporation is only one gate : a Thai limited company reaches legal operation only after every requirement triggered by its ownership, activities, premises, taxes, staff, and foreign workers has been closed. Since July 1, 2026, new limited-company incorporation applications are submitted online through DBD Biz Regist, but the resulting registration certificate does not itself activate VAT, authorize a restricted foreign business, open a bank account, register employees, or permit a foreign national to work.

Use one accountable owner for each gate and do not mark a stage complete merely because a form was sent. Close it only when the official output is received, saved in the evidence folder, checked against the intended facts, and released to the next owner.

Key takeaways

Start with the actual revenue activities, foreign participation, premises, and staffing plan; these facts determine the downstream gates.
Treat name approval, signed filing, payment, approval, and downloadable company records as different control states.
Build tax, foreign-business, sector-licence, bank, social-security, and work-authorization branches before launch.
Assign a recovery action and escalation owner whenever an output is rejected, inconsistent, expired, or still pending.
Release operations only from a dated evidence index that shows which gates apply, which do not, and who approved each conclusion.

Define legal operation before reserving a name

The controlling question is not “Has the company been registered?” It is “May this company, with these shareholders, at this location, using these people, perform this specific activity and issue the required documents today?” A launch definition should name the first transaction, the legal entity that will sign it, the tax treatment, the site from which it will be delivered, and every person who will work on it. That definition prevents a clean DBD filing from masking an unresolved licence or employment problem.

Build a single gate register before preparing forms. “Not applicable” is an acceptable result only when the owner records the tested facts, the governing source, the reviewer, and the review date. A blank field is not the same result. A company is ready to launch only when every gate triggered by its actual activity has a dated, retrievable completion record.

Gate 0 — scope, ownership, and permission map

Stage: Pre-commitment legal scoping, before the name, leases, hires, or capital plan become difficult to change.
Owner: Business sponsor, with Thai legal and tax reviewers signing off on their own workstreams.
Prerequisite: A plain-language list of products, services, customers, revenue flows, ownership percentages, work locations, equipment, imports, and planned headcount.
Submission or action: Classify each activity under the Foreign Business Act and applicable sector, location, environmental, product, and professional rules. Identify any approval required before incorporation, construction, staffing, or trading.
Official output: The applicable authority’s approval, eligibility confirmation, or certificate when an advance decision is available; otherwise no government output exists at this stage.
Completion evidence: An activity-by-activity control memo citing the current official rule, facts tested, filing route, timing, and named approver, plus copies of any advance output.
Blocking dependency: The ownership, capital, objects, premises, and launch schedule cannot be finalized until restricted and regulated activities are separated from unrestricted work.
Recovery action: Narrow the activity, change the structure or ownership on lawful commercial grounds, select the correct permission route, or pause the affected line until specialist confirmation is documented.

The Department of Business Development explains that foreign participation and restricted activities are governed separately from ordinary entity registration, while the Board of Investment’s 2026 starting-business guide maps DBD, foreign-business, tax, and investment-promotion workstreams. Use those sources to identify the authority, then verify the rule for the exact activity rather than treating a broad business objective as permission.

Set two milestones: “incorporated” means the DBD registration has been accepted and the company records reconcile; “released for operation” means all launch-critical gates in this register are green. This distinction also tells the project manager which activities may continue while a conditional licence is pending—for example, document preparation may continue, but the regulated service cannot start.

Lock the pre-filing control pack

The pre-filing pack must use one controlled version of the company name, Thai registered-office address, objectives, promoter and shareholder details, director powers, capital, and share structure. Reconcile that version to the underlying identity and authority evidence before anyone signs. The general Thailand company registration requirements provide the entity-formation baseline; the control register below adds ownership-specific and launch-specific dependencies outside that baseline.

Gate 1 — name and registered office

Stage: Name reservation and address evidence.
Owner: Authorized promoter or filing coordinator; premises owner or lessor supplies address authority.
Prerequisite: Candidate names checked for DBD naming conflicts and an address that can lawfully and practically support registration, tax correspondence, banking checks, and the intended activity.
Submission or action: Reserve the name through DBD Biz Regist, then lock the approved spelling into every Thai and English working document. Obtain signed occupancy and premises evidence appropriate to later filings.
Official output: DBD name-reservation approval. The 2026 BOI guide states that an approved name is valid for 30 days.
Completion evidence: Approval file, expiry date, address consent or lease, owner identification, map and premises evidence needed for the planned tax or licence branch.
Blocking dependency: The memorandum and downstream registrations must use a live approved name and consistent address. An unsuitable address can block VAT or sector inspection even if DBD accepts it.
Recovery action: Re-reserve before expiry, correct all controlled documents, or replace the premises package before filing instead of carrying mismatched facts forward.

Gate 2 — promoters, capital, governance, and signatures

Stage: Formation decisions and execution readiness.
Owner: Promoters and intended directors, coordinated by the company secretary or filing lead.
Prerequisite: Verified identities, lawful beneficial ownership, agreed shares and consideration, director signing rules, business objectives, auditor choice, and enough capital for the regulatory and commercial plan.
Submission or action: Prepare and sign the memorandum, complete the statutory meeting decisions or lawful same-day formation route, subscribe all shares, appoint directors and auditor, and collect required share-payment evidence.
Official output: No final company certificate yet; the signed formation instruments become inputs to the DBD application.
Completion evidence: Final document index, signature authority matrix, signed memorandum and resolutions, subscription records, capital evidence, auditor consent, and a shareholder reconciliation.
Blocking dependency: Under the amended Civil and Commercial Code, at least two promoters form a limited company. The 2026 official guide states that at least 25% of each share’s par value must be paid and registration follows within three months after the statutory meeting.
Recovery action: Stop signatures when names, shares, powers, or capital evidence differ. Amend the controlled pack, repeat affected approvals, and obtain fresh signatures rather than annotating an executed version informally.

The Royal Gazette amendment is the primary source for the two-promoter rule. Do not confuse that formation minimum with an ownership strategy, a bank’s due-diligence expectations, or a regulator’s activity-specific conditions. Each is a separate control question.

Close incorporation through DBD Biz Regist

DBD announced that, from July 1, 2026, applications to establish new partnerships and limited companies are made online through DBD Biz Regist . The project plan therefore needs account creation, identity verification, form preparation, electronic signatures, fee payment, and document download—not a walk-in filing assumption. Confirm the current platform notice before the filing date because operational instructions can change.

Gate 3 — DBD application and registered record

Stage: Electronic incorporation filing and acceptance.
Owner: Named filing coordinator, with every required signer responsible for timely electronic execution.
Prerequisite: Live name approval, final formation pack, verified platform accounts and identities, signer availability, and a payment method.
Submission or action: Enter the controlled data, attach the prescribed evidence, route signatures, answer any DBD correction request, pay the official fee, and download the accepted outputs.
Official output: DBD acceptance, juristic-person registration number, registration certificate, receipt, and available certified registration documents.
Completion evidence: Downloaded originals and certified copies, portal status and receipt, plus a field-by-field reconciliation of name, number, address, objectives, capital, shareholders, and director powers.
Blocking dependency: No post-incorporation account, tax, bank, employment, or licence file should rely on draft company details. A submitted or paid application is not an accepted registration.
Recovery action: Log the exact rejection or mismatch, assign the source document owner, correct only the controlled version, re-sign if facts changed, and update every downstream copy after acceptance.

Create a read-only “as registered” folder immediately. Store the portal receipt and digital outputs without renaming away their document identity; add a separate index that maps each output to the downstream team that needs it. Evidence must survive handover to the tax, bank, payroll, licensing, and accounting owners.

The DBD record is the central handoff: tax and permission branches must then close before banking, people, and the final launch decision can be released.

Clear the post-registration blockers

Once DBD accepts the company, run the tax, permission, and banking workstreams in parallel only where their prerequisites are complete. Maintain separate status labels: not started, prepared, submitted, correction requested, approved, reconciled, and closed. A screenshot of a submission page should never be stored as proof of approval.

Gate 4 — tax identity, VAT, and invoice readiness

Stage: Revenue Department master data, filing access, indirect-tax decision, and compliant invoicing.
Owner: Thai tax owner or accountant, with the commercial lead confirming forecast revenue and supply types.
Prerequisite: Reconciled DBD number and company record, registered-office evidence, revenue model, customer and supplier flows, expected first invoice, and filing credentials.
Submission or action: Confirm the taxpayer record and e-filing access; decide VAT, voluntary VAT, exemption, or specific business tax treatment; file the applicable application and configure invoices only after the status is confirmed.
Official output: The DBD juristic registration number used as the 13-digit tax identifier, Revenue Department registration or acknowledgement records, and a VAT certificate when VAT registration is approved.
Completion evidence: Tax master-data confirmation, e-filing access test, filed forms and receipts, VAT or SBT result where applicable, invoice template approval, and first statutory-due-date calendar.
Blocking dependency: The Revenue Department states that ordinary VAT registration applies when annual turnover exceeds THB 1.8 million, with registration within 30 days after the threshold is exceeded. Taxability and exemptions still require activity-specific analysis.
Recovery action: Correct DBD or address inconsistencies, replace incomplete premises evidence, refile the tax application, and suspend VAT invoicing until the company has the required status.

The Revenue Department’s VAT registration rule supplies the threshold and timing, while its taxpayer registration guidance uses a 60-day control for companies and juristic partnerships as applicable. Because the DBD number functions as the tax identifier, the practical closeout is not obtaining an unrelated replacement number; it is verifying the Revenue Department record, activating the required filing channels, and completing separate VAT or SBT registration where triggered. See the post-incorporation tax identity closeout for that narrower handoff.

Gate 5 — foreign-business and sector permissions

Stage: Activity permission after or alongside incorporation.
Owner: Legal or regulatory owner for each controlled activity; the business sponsor owns adherence to the approved scope.
Prerequisite: Gate 0 classification, accepted DBD facts, ownership evidence, capital evidence, premises, operating plan, and the authority-specific file.
Submission or action: File the applicable Foreign Business Licence or Certificate, BOI certificate step, or sector approval. Track conditions, permitted activities, location, validity, pre-operation inspections, and reporting separately.
Official output: The relevant licence, certificate, approval, registration, inspection acceptance, or formal exemption basis—not merely an application receipt or promotional discussion.
Completion evidence: Official output, conditions schedule, activity-to-permission cross-reference, effective date, renewal and reporting calendar, and named operational owner.
Blocking dependency: The regulated or restricted activity cannot launch until the required output and any commencement conditions are effective. DBD incorporation does not cure that gap.
Recovery action: Answer the authority’s deficiency precisely, revise supporting facts consistently, or ring-fence and pause the affected activity. Escalate any proposed scope change before contracting or invoicing.

DBD’s e-Foreign Business portal is the official channel for covered FBL and FBC work. BOI-promoted projects have their own certificate-issuance requirements after approval, including company and shareholding records and, where applicable, foreign-fund evidence. Treat every conditional permit as blocking for the activity it governs until its effective output and commencement conditions are in the file.

Gate 6 — corporate bank and payment controls

Stage: Bank onboarding, signing mandate, and payment operations.
Owner: Finance owner and authorized directors; beneficial owners provide due-diligence evidence.
Prerequisite: Current DBD documents, shareholder and beneficial-owner information, board approval, signatory identities, business rationale, address, source-of-funds evidence, and any permission the bank requests.
Submission or action: Apply to the selected bank, complete KYC and beneficial-owner checks, approve the mandate, activate channels and controls, and test payments with segregation of duties.
Official output: Bank account-opening confirmation, account identifiers, approved mandate, channel enrollment, and any product-specific acceptance.
Completion evidence: Bank acceptance, mandate, maker-checker assignment, tested access, approved beneficiary and payment controls, and accounting-system mapping.
Blocking dependency: Bank approval is a financial institution decision, not an entitlement created by DBD registration. Missing or stale documents, opaque ownership, or inconsistent activity descriptions can halt onboarding.
Recovery action: Request the deficiency list, refresh certified documents, reconcile ownership and business explanations, arrange required in-person steps, and maintain a lawful interim payment plan without using personal accounts as a substitute.

A Thai bank’s current checklist can be used to prepare, but it is not a universal rule. For example, KBank’s business current-account page lists recent registration records, company documents, shareholder information, and board authority, while reserving the right to request more. Confirm the selected branch or channel’s current requirements before arranging signers.

Activate people and recurring compliance

A launch file must also show how the company will remain compliant after day one. Set the books, document numbering, approvals, payroll, filing calendar, and record retention before the first transaction. Do not defer these controls until the first tax return or annual meeting; missing source records are harder to reconstruct later.

Gate 7 — accounting, corporate records, and deadline calendar

Stage: Day-one books and recurring corporate and tax compliance.
Owner: Director responsible for compliance, Thai accountant or bookkeeper, and appointed auditor.
Prerequisite: Accepted DBD record, tax status, accounting period, bank design, contracts, invoice requirements, chart of accounts, and retention responsibilities.
Submission or action: Open the ledgers and statutory registers, configure approvals and source-document capture, record capital correctly, establish monthly tax closes, and calendar annual meeting, shareholder-list, audited-financial-statement, and corporate-income-tax duties.
Official output: There is no single launch certificate. Later official outputs include Revenue Department filing receipts and DBD e-Filing acknowledgements for shareholder lists and financial statements.
Completion evidence: Engagements and authorities, configured ledger, statutory books, capital entry, source-document repository, tax calendar, corporate calendar, and evidence owner for each filing.
Blocking dependency: For a typical December 31 year-end, the recurring framework includes an annual general meeting within four months, financial-statement filing within one month after the meeting, and the shareholder list within 14 days after the meeting; exact due dates must account for holidays and current DBD notices.
Recovery action: Reconstruct opening balances and missing source records immediately, assign overdue filings, quantify penalties and correction routes, and bring director-level exceptions into a dated remediation plan.

Use DBD e-Filing for the covered annual filing workflow and verify the current year’s deadline notice. The calendar should count backward from each statutory deadline to the board pack, audit evidence, shareholder communications, and responsible signatory; a due date without preparation milestones is not a functioning control.

Gate 8 — Thai employees and social security

Stage: Employer setup, insured-person registration, payroll, and employment records.
Owner: HR or payroll owner, with an authorized director and accountant coordinating employer and contribution data.
Prerequisite: Reconciled company record, worksite data, employment terms, employee identity and start date, payroll setup, and authorized SSO access.
Submission or action: Register the employer and each eligible insured employee, set the contribution workflow, retain contracts and time/pay data, and calendar payroll, withholding, and SSO submissions.
Official output: Social Security Office employer registration and insured-person registration confirmations, plus later contribution receipts.
Completion evidence: Employer and employee acknowledgements, authorized portal access, payroll reconciliation, contribution calendar, and a joiner-leaver control.
Blocking dependency: Section 34 of the Social Security Act requires the employer to submit employer and insured-person forms within 30 days after an employee becomes insured.
Recovery action: File promptly through the correct SSO channel, correct start-date or identity mismatches, reconcile missed contributions, and document remediation instead of changing employment dates to fit the filing.

The official English Social Security Act supports the 30-day employer and insured-person control, and the SSO e-Service portal provides current employer, insured-person, and contribution services. Capture the employer number and employee acknowledgement, not merely the uploaded form. Link each employee’s start date to the filing clock so the control runs automatically when the first or a later employee joins.

Gate 9 — foreign-worker authorization

Stage: Immigration status and work authorization before a foreign national performs work in Thailand.
Owner: Immigration or mobility owner, with the director, HR, and employee responsible for accurate supporting facts.
Prerequisite: Correct company and permission status, qualifying role, employment evidence, passport and immigration record, workplace, capital and Thai-employee evidence where the selected route requires them.
Submission or action: Confirm the visa and work-permit route, submit the application through the competent channel, answer deficiencies, and align permitted employer, position, location, scope, and validity with actual work.
Official output: Applicable visa or permission to stay and Department of Employment work-permit approval or digital work permit.
Completion evidence: Verified permit details and validity, immigration evidence, role and location match, renewal calendar, reporting duties, and an HR restriction against work outside scope.
Blocking dependency: Share ownership, directorship, company registration, or a pending permit application does not by itself authorize work. The foreign national must not begin work until the required authorization is effective.
Recovery action: Stop unauthorized duties, correct the company or role evidence, refile or change route on a documented legal basis, and obtain case-specific advice before the person resumes work.

The Department of Employment’s official launch notice records nationwide e-WorkPermit service from October 2025, and the current portal handles digital applications. Platform access does not answer route eligibility: check the person’s role, employer, location, immigration status, and any BOI or other special-channel conditions before submission.

Apply the legal-operation completion test

Approve launch only against a dated release pack. Green means the gate was correctly classified, its prerequisite was satisfied, the required action was accepted, the official output was reconciled, and the ongoing owner has acknowledged the conditions. Amber means the item is commercially incomplete but does not legally block the narrowly defined first activity—for example, a bank product that is not yet needed. Red means a required permission, tax status, employee registration, work authorization, or consistent corporate record is absent or unverified.

The release signer should test five questions: Does the registered entity match every downstream file? Is the first activity unrestricted or covered by an effective permission? Can the company issue the correct invoice and record the transaction? Are the bank and approval controls adequate for the payment? Is every person authorized, registered, and operating within scope? A missing output is a stop signal , not an invitation to assume that submission, incorporation, or an adviser’s work-in-progress is enough.

If any red item affects the first transaction, pause that activity and escalate the exact gate with its facts and missing evidence. If all applicable gates are green, record the approved activity, legal entity, site, people, effective date, and review date in the release. Reopen the control register whenever ownership, activities, premises, directors, capital, tax status, or staffing changes; legal operation is a maintained state, not a one-time filing event.