OSS-RBA Business License in Indonesia 2026: Risk-Based Licensing for PT PMA in Bali
OSS-RBA classifies every Indonesian business as Low, Medium-Low, Medium-High or High risk and your licenses depend entirely on which tier you fall into. Here is the 2026 playbook for Bali PT PMA owners.
Indonesia’s OSS-RBA system grades every business by risk. The tier you fall into decides whether you start operating tomorrow, or wait six months for a sectoral permit.
Since 2021, every Indonesian business license now flows through the OSS-RBA (Online Single Submission, Risk-Based Approach) portal at oss.go.id. The system reflects Government Regulation 5/2021 and assigns every KBLI a risk tier — Low, Medium-Low, Medium-High or High — that controls the licenses you receive and the inspections you face. For PT PMAs in Bali, the risk tier is often the difference between opening tomorrow and waiting half a year.
How OSS-RBA changed Indonesian licensing
The old SIUP/TDP regime issued a generic trading license regardless of activity. OSS-RBA flipped it: instead of one license fits all, each KBLI is graded by environmental impact, occupational safety risk, and public health exposure. A consulting firm gets an instant NIB and is operational immediately. A petrol station goes through environmental impact assessment (AMDAL), sectoral permits and full inspections before it can sell its first litre.
For foreign founders, this is good news where the activity is low-risk (digital, consulting, creative) and challenging where it is medium-high or high (hospitality, F&B, tourism). Knowing your tier before incorporation lets you plan timelines realistically.
The four risk tiers, fully explained
| Tier | License received | Inspection? | Typical time to operate |
|---|---|---|---|
| Low | NIB (Business Identification Number) only | No | Same day to 3 days |
| Medium-Low | NIB + self-declared Standard Certificate | No (verified later) | 1 to 2 weeks |
| Medium-High | NIB + Standard Certificate verified by ministry | Yes | 4 to 12 weeks |
| High | NIB + Business License + sectoral permits | Yes, ongoing | 3 to 9 months |
The Bali-specific permits OSS does not handle
OSS-RBA covers most national permits, but several Bali-specific permits sit outside it. PBG (Persetujuan Bangunan Gedung — the new IMB building permit), TDUP (tourism business sign), SLF (building suitability certificate), and the desa adat letter (recommendation from the local traditional village) all need to be obtained separately. For villa rental, restaurants, bars, surf schools and tour operators, these local-government permits often take longer than the OSS process itself.
Bali is also actively enforcing the new Tourist Tax (Pungutan Wisata) regime, the Quality Tourism Roadmap, and updated zoning maps in Badung and Gianyar that reshape what is permitted in each subzone.
The OSS-RBA filing flow for a PT PMA
Step one is incorporation: notarised deed of establishment, AHU approval, NPWP tax registration. Step two is the OSS account creation linked to the PT PMA’s NPWP. Step three is KBLI registration inside OSS, after which the system automatically assigns the risk tier. Step four is generating the NIB and any standard certificates. Step five is uploading supporting documents and waiting for verification at the ministry or local government as applicable.
For foreign founders, the friction usually comes at step four when the system asks for documents that only make sense once you have a physical address, an Indonesian business email and a working bank account. We sequence those before the OSS submission to avoid bounce-backs.
When OSS-RBA blocks you
The two most common blocking conditions: missing or expired LKPM quarterly reports, and a missing AHU Annual Report (mandatory since 1 June 2026). OSS now performs a real-time check against AHU and BKPM before allowing certain corporate actions and renewals. We see PT PMAs unable to update directors or shareholders because of compliance gaps reaching back several years.
Get your OSS-RBA stack right from day one
We map your KBLI to the correct risk tier, prepare every supporting permit Bali needs (PBG, TDUP, SLF, desa adat), and file your NIB, Standard Certificate and Business License through OSS-RBA. Most PT PMAs reach operational status within 3 to 8 weeks.
Frequently asked questions
Is the NIB enough to start trading?
For Low-risk KBLI, yes. For Medium-Low you can usually start, with the Standard Certificate as a self-declared formality. For Medium-High and High you need the verified Standard Certificate or Business License before commencing.
Can a foreign individual without a PT PMA register in OSS?
No. OSS-RBA business registration requires either an Indonesian legal entity (PT, PT PMA, CV, koperasi) or an Indonesian citizen as the registered owner.
Does OSS-RBA replace the old SIUP and TDP?
Yes. SIUP and TDP have been deprecated since 2021. The NIB now serves the same identification function across tax, customs and banking.