Every business entity seeking to operate legally in Indonesia must navigate one central gateway: the OSS RBA system. The Online Single Submission Risk Based Approach is an integrated business licensing platform managed by the Ministry of Investment/Investment Coordinating Board (Kementerian Investasi/Badan Koordinasi Penanaman Modal or BKPM), through which all licensing applications, issuances, and monitoring are conducted electronically within a single portal.
Entering 2026, the OSS RBA system has undergone significant updates with the enactment of Government Regulation (Peraturan Pemerintah or PP) No. 28 of 2025, replacing the previous PP 5/2021. These changes carry direct implications for licensing workflows, processing time guarantees, and oversight mechanisms that every business operator must understand, whether a domestic enterprise or a foreign investment company (Perseroan Terbatas Penanaman Modal Asing or PT PMA).
This article provides a comprehensive overview of how the OSS RBA system operates in 2026, what has changed, and how businesses can navigate the licensing process more efficiently.
Legal Framework: The Transition from PP 5/2021 to PP 28/2025
PP 28/2025 has officially replaced PP 5/2021 as the primary legal basis governing the OSS RBA system. The government recognized that the initial implementation following the Job Creation Law (Undang-Undang Cipta Kerja) still faced challenges, including data fragmentation across agencies and inconsistent regulatory interpretation at the regional level.
The latest regulation is designed to refine business processes by centralizing strategic authority within the system, while providing clearer delegation to regional governments.
The following table summarizes the key changes that directly affect business operators:
| Parameter | PP 5/2021 (Former) | PP 28/2025 (Effective 2026) |
| Legal Status | Revoked, no longer applicable | Fully effective as the primary legal basis |
| Number of Business Sectors | 16 sectors | 22 sectors |
| Environmental Integration | Sequential (staged process) | Fully integrated and parallel through Amdalnet |
| Processing Time Assurance | No strict standardization | SLA measured in minutes and hours with deemed approval mechanism |
| Business Scale Verification | Self declared by the business operator | Automated validation based on investment versus revenue |
The expansion from 16 to 22 sectors reflects the government’s response to an evolving economy increasingly oriented toward digital innovation and sustainability. Newly covered sectors within the OSS RBA system include the creative economy, legal metrology, geospatial information, cooperatives, capital investment, and electronic systems and transactions.
How Risk Classification Works within the OSS RBA System
The core principle of the OSS RBA system is a risk based approach, where the complexity of licensing requirements is proportional to the risk level of the business activity being conducted. Risk assessment is carried out through an analysis of potential hazards encompassing health, safety, environmental, and natural resource management considerations.
Based on this assessment matrix, each business activity is categorized into one of four levels.
Low Risk
Business activities with minimal negative impact on public interest. The licensing instrument issued by the OSS RBA system is the Business Identification Number (Nomor Induk Berusaha or NIB) alone.
At this category, the NIB simultaneously functions as an Importer Identification Number (Angka Pengenal Importir or API) and provides customs access rights. For Micro and Small Enterprises (Usaha Mikro dan Kecil or UMK), the government applies a Single Licensing policy where the NIB already encompasses all basic legal requirements needed to operate.
Medium Low Risk
Business operators are required to hold an NIB and a Standard Certificate (Sertifikat Standar) in the form of a self declaration submitted directly through the OSS portal.
The business operator declares its commitment to comply with the established operational standards and may commence operations immediately. However, compliance with these standards is monitored through routine inspections by the relevant authorities.
Medium High Risk
This category requires an NIB and a Standard Certificate that must be verified by the relevant Ministry, Agency, or Regional Government before commercial operations may commence.
Until verification is completed, the issued licensing serves only as limited authorization for preparatory activities such as land acquisition, infrastructure development, and workforce recruitment. Technical verification may involve accredited third parties appointed by the government.
High Risk
Business activities with broad impact on public safety, public health, or environmental sustainability. The required licensing instruments are an NIB and a formal Permit (Izin) issued by the government.
This permit must be obtained through in depth verification of technical and environmental requirements, and in certain sectors must be accompanied by a verified Standard Certificate for the relevant products or services.
Important note: Misunderstanding risk classification frequently results in operational disruptions. Many PT PMA entities in the construction and tourism sectors are unaware that their NIB is not yet effective until the Standard Certificate has been manually verified by the relevant regional agency.
Mandatory Prerequisites Before Obtaining an NIB
Before the OSS RBA system issues an NIB, business operators must fulfill a number of mandatory prerequisites. The integration of these requirements represents a regulatory simplification that consolidates multiple ministerial authorities into a single portal.
Spatial Utilization Conformity (Kesesuaian Kegiatan Pemanfaatan Ruang or KKPR)
KKPR ensures that the business location complies with the designated regional spatial plan. The system automates this process through integration with the digital Detailed Spatial Plan (Rencana Detail Tata Ruang or RDTR).
In regions where the digital RDTR is already integrated, business operators receive instant KKPR confirmation after plotting their location coordinates. For micro enterprises, the government provides additional facilitation through a self declaration mechanism that replaces multi layered verification procedures.
Environmental Approval through Amdalnet
Environmental approval is now fully integrated through the Amdalnet system, which connects directly to the OSS account. The classification of required environmental documentation is determined through automated screening, which identifies whether the business operator requires an Environmental Management and Monitoring Statement (Surat Pernyataan Kesanggupan Pengelolaan dan Pemantauan Lingkungan Hidup or SPPL), an Environmental Management and Monitoring Effort (Upaya Pengelolaan Lingkungan dan Upaya Pemantauan Lingkungan or UKL UPL), or an Environmental Impact Assessment (Analisis Mengenai Dampak Lingkungan or AMDAL).
One of the most significant improvements under PP 28/2025 is the provision allowing environmental approval applications to be submitted in parallel with other technical approvals, drastically reducing overall licensing wait times.
Building Approval (Persetujuan Bangunan Gedung or PBG) and Functional Worthiness Certificate (Sertifikat Laik Fungsi or SLF)
The Building Approval, which replaces the former Building Construction Permit (Izin Mendirikan Bangunan or IMB), must be obtained before physical construction commences. Meanwhile, the Functional Worthiness Certificate must be secured before the building is utilized for business activities. The entire process is conducted electronically, and the results are published through the OSS portal to ensure the integrity and cohesion of all licensing documentation.
Service Level Agreements and the Deemed Approval Mechanism
One of the most important innovations within the OSS RBA system in 2026 is the implementation of legally binding Service Level Agreements (SLAs).
Every stage of the licensing process now carries a defined deadline that business operators can monitor transparently through the system dashboard. Where previously verification processes could stall indefinitely without explanation, every licensing authority is now bound by measurable time limits.
The primary enforcement instrument is the deemed approval principle (asas fiktif positif). Pursuant to Articles 12 and 138 of PP 28/2025, if the authorized official does not issue a decision (whether approval or rejection) within the designated SLA timeframe, the application is automatically deemed approved by the system.
This mechanism is particularly relevant at the prerequisite stages, such as KKPR and certain environmental approvals. Business operators are no longer held captive by protracted technical assessments, enabling more accurate investment realization scheduling.
However, operators must still ensure the accuracy of all submitted data, as compliance based monitoring continues through post issuance audits.
LKPM Reporting: A Post Licensing Obligation That Must Not Be Overlooked
The supervisory approach within the OSS RBA system is ex post in nature, meaning that primary oversight is conducted after licensing has been issued, rather than before. The principal supervisory instrument is the Investment Activity Report (Laporan Kegiatan Penanaman Modal or LKPM), which must be submitted periodically through the OSS portal.
Medium and large scale business operators are required to submit the LKPM on a quarterly basis, with a deadline of the 15th of each reporting period. Small enterprises report on a semi annual basis. Reporting must be completed in detail per business location and per Indonesian Standard Business Classification (Klasifikasi Baku Lapangan Usaha Indonesia or KBLI) code held.
Failure to submit the LKPM for two consecutive periods triggers an automatic warning from the system. If this warning is disregarded, the consequences may include the freezing of the NIB and the closure of OSS portal access.
In addition to the LKPM, oversight is also conducted through integrated field inspections, with high risk enterprises prioritized for environmental compliance and occupational safety audits.
Common Technical Issues and How to Resolve Them
In day to day operations, the OSS RBA system is not immune to technical challenges. The following are the most frequently encountered issues along with their recommended solutions.
Data verification failure
This issue typically occurs because the company deed data or the identification number of company officers cannot be read by the system. The primary solution is to ensure that data in the Legal Entity Administration System (Administrasi Hukum Umum or AHU Online) is synchronized with the latest notarial ratification.
If the issue originates from the central system, business operators may submit a technical assistance request through the official email of the Ministry of Investment to reset the stalled application status.
System maintenance
The government routinely conducts maintenance on the OSS digital infrastructure. During these periods, the system may be inaccessible for new registrations or reporting. Business operators are advised to monitor official announcements at oss.go.id and complete administrative activities before reporting deadlines.
Stalled application status
In some cases, the application status does not progress without explanation. Business operators may contact the Ministry of Investment’s WhatsApp service at 0815-1182-8000, the Regional One Stop Integrated Service (Dinas Penanaman Modal dan Pelayanan Terpadu Satu Pintu or DPM PTSP) helpdesk at the provincial level, or attend Coaching Clinic sessions organized periodically by BKPM to socialize the latest system features.
How XPND Helps You Navigate the OSS RBA System
The transition from PP 5/2021 to PP 28/2025 has introduced numerous simultaneous changes. The expansion to 22 sectors, the enforcement of strict SLAs, the deemed approval mechanism, and more structured LKPM obligations are all elements that must be understood holistically to prevent licensing processes from stalling midway.
In practice, many business operators encounter obstacles at the very earliest stages, such as data verification failures due to discrepancies between the company deed and the AHU database, or application statuses that remain stalled without any clarification from the relevant authorities. Technical issues of this nature can delay operations by weeks if not managed by parties with deep familiarity with the system’s workflows.
XPND routinely supports clients through every stage of licensing within the OSS RBA system, from fulfilling mandatory prerequisites such as KKPR and environmental approval, to processing NIB and Standard Certificates in accordance with the applicable risk classification, to monitoring SLA timelines to ensure that clients’ deemed approval rights remain protected in the event of processing delays by the authorities. Following licensing issuance, our team also provides ongoing support for quarterly LKPM reporting to ensure that clients’ NIB and OSS access are not at risk of suspension.
If you are currently processing or updating your business licenses and require professional support from a team that understands the latest developments in the OSS RBA system, contact XPND for a complimentary consultation.
