How to Register Through Indonesia’s OSS RBA System: A Step-by-Step Guide for Foreign Companies

Most foreign companies approaching the OSS RBA registration process for the first time make the same mistake. They spend months preparing the correct legal structure, selecting the right KBLI codes, and translating documents, and then they log into oss.go.id and cannot get past the account creation screen. The system requires inputs that are only available after certain corporate steps are complete, in a specific order, and those dependencies are not explained anywhere on the platform itself.

This guide covers the OSS RBA registration sequence as it applies specifically to foreign-invested companies (PT PMA) in 2026. It does not repeat the regulatory framework behind the system, which is covered in detail in XPND’s OSS RBA system guide. What it does cover is the practical input-by-input process, including the decisions that cannot be reversed after submission and the errors that consistently delay first-time applicants.

What You Must Have Before You Open the Portal

The OSS RBA system at oss.go.id is not a starting point. It is a destination that requires several preconditions to be met before any data entry is meaningful.

For a PT PMA registration, the following must be in place before the OSS account is created:

• A valid notarial Deed of Establishment (Akta Pendirian), approved by the Ministry of Law and Human Rights (Kemenkumham), with a company registration number (Nomor AHU) issued.
• A Taxpayer Identification Number (NPWP) for every foreign shareholder listed in the deed. Individual foreign shareholders must obtain a personal NPWP from the Directorate General of Taxes before the OSS account can be linked to them.
• An active Indonesian SIM card registered to a valid identity document, because the OSS account activation uses an SMS verification code sent to an Indonesian mobile number.
• A physical office address in Indonesia, with a complete address including RT/RW, kelurahan, kecamatan, city, and postal code. Virtual office addresses are accepted but must be at a location registered with the local government as a business address. The implication of virtual office restrictions in certain provinces, particularly Bali, is covered separately in XPND’s analysis of the 2026 Bali KBLI closure proposals.
• The five-digit KBLI codes that will be registered. These must have been finalized and embedded in the notarial deed before the OSS account is opened, because the OSS system cross-references the company’s AHU data against the deed.

The NPWP requirement for foreign shareholders is the most common upstream delay. A foreign national who holds an Investor KITAS can apply for a personal NPWP through the tax office (KPP) in their area of domicile, but the process takes time and requires the KITAS to be active first. For foreign shareholders who are corporate entities rather than individuals, the foreign company’s tax identification equivalent (apostilled and sworn-translated) must be submitted alongside the deed. This dependency between immigration, tax registration, and company registration is the primary reason XPND structures these three tracks in parallel from the start of an engagement, rather than sequentially.

Creating the OSS Account for a PT PMA

Once the prerequisites are in order, the OSS account registration begins at oss.go.id using the Non-Perorangan (non-individual entity) pathway. This is the correct account type for all PT PMA entities, regardless of the number of shareholders.

The account is created using the company’s Nomor AHU from Kemenkumham. The system pulls the company’s basic data from the Kemenkumham database automatically, including the company name, registered address in the deed, and the names of directors and commissioners. If there are discrepancies between the deed and the OSS-pulled data, the registration will fail at this step. The most common discrepancy is a difference in how the company address is formatted. The deed may list an address using an older administrative boundary name that was merged or renamed, and the OSS system references the current administrative mapping. Correcting this requires amending the deed through a notary, which adds weeks to the timeline.

After account activation, the user sets a login credential and is issued an OSS User ID. This ID is the company’s permanent login for all subsequent OSS interactions, including LKPM quarterly reporting. It must be stored securely because OSS does not provide a simple account recovery pathway if credentials are lost.

The KBLI Input Step: Where Most Errors Are Made

Once logged in, the first substantive registration step is entering the company’s business activities through the KBLI codes. This step determines everything: the risk classification of each activity, the type of license required, the investment minimum per code, and the SLA within which the government must process the application.

Each five-digit KBLI code entered is validated against the Positive Investment List (Daftar Positif Investasi) in real time. The system checks:

• Whether the code is open to 100% foreign ownership, restricted to a local partnership percentage, or closed to foreign investment entirely.
• The risk level assigned to that code under the latest KBLI 2025 classification, which became effective on 18 December 2025. Under Government Regulation No. 28 of 2025, companies are required to align their registered KBLI codes with the KBLI 2025 classification by 18 June 2026 if there is any discrepancy.
• Whether the code requires a sectoral prerequisite before the license can be issued, such as a location permit (KKPR) or an environmental clearance.

A detailed breakdown of how KBLI codes function and how to select the correct ones for specific sectors is in XPND’s 2026 KBLI guide for foreign investors. The decision on which codes to register is irreversible after the deed is notarized. At the OSS stage, adding a code that was not in the deed requires a notarial amendment before it can be saved. Removing a code from OSS that was in the deed does not remove it from the company’s legal structure.

The Risk Level Assignment and What It Means for Your Timeline

After the KBLI codes are confirmed, the system generates a risk classification for each activity:

Low Risk (Risiko Rendah): The company receives an NIB immediately upon completing the data input. No additional license documents are required for operations. The NIB itself serves as proof of business legality for low-risk activities. Most professional services, IT services, and consulting activities fall in this category.

Medium-Low Risk (Risiko Menengah Rendah): The NIB is issued immediately, but the company must also obtain a Standard Certificate (Sertifikat Standar) before operations begin. This certificate is self-declared by the company through OSS, stating that it meets the operational standards required for that activity. For most medium-low activities, the standard certificate is issued the same day it is submitted.

Medium-High Risk (Risiko Menengah Tinggi): The company receives an NIB and must obtain a Standard Certificate, but this certificate requires verification by the relevant technical ministry or local government. Processing time varies by sector, typically running two to four weeks, and can require site visits or document submission outside the OSS portal.

High Risk (Risiko Tinggi): The company receives an NIB but cannot commence operations until a full Operational License (Izin Usaha) is issued. This requires sectoral approval from the competent ministry, and processing times range from one to six months depending on the sector. Healthcare, mining, energy, and financial services all fall in this category.

Most PT PMA companies incorporating in the professional services or technology space will encounter predominantly low-risk and medium-low risk codes. However, companies that include ancillary activities, such as importing goods alongside a consulting operation, may find that one code in their portfolio carries a medium-high or high risk classification that triggers a longer overall timeline.

The NIB: What It Covers and What It Does Not

When the OSS data entry is complete and the risk-level requirements are satisfied, the system generates the NIB (Nomor Induk Berusaha). The NIB is a thirteen-digit permanent business identification number that functions simultaneously as:

• The company’s business registration number
• The company’s customs identification for import and export activities
• The company’s access credential for all subsequent government service integrations
• Proof of business legality for low-risk activities

What the NIB does not do is replace the need for sector-specific operational licenses in medium-high and high-risk activities, the company’s NPWP for tax filing purposes, or the LKPM reporting obligation that begins in the quarter following NIB issuance. Every PT PMA must submit a quarterly Investment Activity Report (LKPM) through the OSS system starting from the first quarter after the NIB is issued, regardless of whether the company has yet generated any revenue.

PT PMA-Specific Steps After the NIB

For a PT PMA, the NIB issuance is not the end of the OSS process. Three additional integrations must be completed through OSS after NIB is received:

First, the company’s capital commitment must be recorded in the OSS system. Under BKPM Regulation No. 5 of 2025, the paid-up capital (at least IDR 2.5 billion) must be deposited in the company’s Indonesian bank account within the timeline specified in the OSS investment commitment declaration. The bank confirmation letter must then be uploaded through OSS to close the capital commitment record. Failure to close this record creates a discrepancy flag that can affect subsequent licensing applications and LKPM filing.

Second, if the company intends to employ foreign nationals under a work permit, the RPTKA (Foreign Worker Placement Plan) application is submitted through a Kemnaker portal that is integrated with the company’s OSS record. The company’s NIB must be active and its business licenses complete before the Kemnaker system will accept an RPTKA submission.

Third, tax registration for PKP (Pengusaha Kena Pajak, Taxable Entrepreneur) status must be applied for through the Coretax DJP system once the company’s taxable turnover approaches the IDR 4.8 billion annual threshold, or earlier if the company prefers to self-elect PKP status. The Coretax registration references the company’s NPWP, which in turn was linked to the NIB during the OSS setup.

Explore Our Services Establish Your PT PMA in Indonesia

The Errors That Actually Delay Companies

Based on the patterns XPND observes across PT PMA registrations in Jakarta, Surabaya, Semarang, Batam, and Bali, the errors that cause the most significant delays are not technical glitches. They are data mismatches.

The most frequent: the name of a foreign shareholder in the OSS system does not exactly match the apostilled document submitted to Kemenkumham. A middle name present in the passport but absent from the notarial deed, or a romanization difference in how a Chinese name is rendered in Indonesian, creates a data mismatch that the system flags and that requires both a Kemenkumham amendment and an OSS data correction to resolve.

The second most frequent: an incorrect or outdated KBLI code is embedded in the deed before the KBLI 2025 reclassification is checked. Under the 18 June 2026 deadline, any company registered with a KBLI code that was reclassified under KBLI 2025 must update its OSS registration. If the company was incorporated before December 2025 and has not verified its codes against KBLI 2025, this step should be confirmed before submitting any new OSS applications.

The third: applying for a sectoral license before the supporting prerequisite is complete. Some technical ministries require a KKPR (spatial conformity letter) before they will process a sectoral license application. Companies that submit the license request without the KKPR receive an automatic rejection in OSS, and the rejection itself resets their SLA clock.

A compliance and registration team that has direct experience with the OSS administrator for a company’s specific sector and location can pre-identify these blockers before the submission is filed. XPND’s incorporation team handles OSS NIB issuance, post-NIB license coordination, capital commitment documentation, and the LKPM setup across all five XPND office locations.

If your company is preparing for OSS registration or is already in a delayed application, a consultation with XPND’s incorporation team can identify exactly where the process is blocked and what document correction is needed before you resubmit.