KBLI 2025 Licensing Guide | Permits by Risk Level & Sector

Q: Do all businesses need the same licenses?

No. Your KBLI code and risk level determine your licensing pathway. Low-risk businesses (e.g., consulting 70209) only need NIB. High-risk businesses (e.g., residential construction 41011) need NIB plus full government permits.

Q: What is SLHS and do I need it?

SLHS (Sertifikat Laik Higiene Sanitasi) is a hygiene sanitation certificate required for F&B businesses. Bali Zero provides this service for IDR 9,000,000. It's mandatory for restaurants, cafes, catering, and food service operations.

Q: Do I need an alcohol license for my bar?

Yes. NPBBKC (Nomor Pokok Barang Kena Cukai) is required for any business selling alcohol — bars, nightclubs, restaurants with alcohol. Bali Zero provides NPBBKC A+B+C licensing for IDR 15,000,000.

Zantara AI

Loading Zantara...

The License Stack Starts With Your KBLI Code

In Indonesia, there is no universal business license. What you need — and how much compliance work sits between you and legal operation — depends entirely on your KBLI code and its assigned risk level. Under KBLI 2025, every five-digit business code carries a risk classification that determines your licensing pathway through the OSS (Online Single Submission) system. Get the code right, and licensing is a structured process. Get it wrong, and you either over-license (wasting time and money) or under-license (risking enforcement action).

The June 2026 transition window has closed. Every business operating in Indonesia — whether a new PT PMA or an existing company migrating from KBLI 2020 — must verify the correct code and corresponding licenses now, before the next OSS filing, amendment, or renewal.

This guide maps KBLI 2025 risk levels to their exact licensing requirements, then breaks down the sector-specific permits that sit on top of the base framework.

The Three-Tier Risk System: How OSS Classifies Your Business

The Indonesian government uses a Risk-Based Approach (RBA) through the OSS system to determine licensing requirements. Every KBLI code is assigned one of three risk levels, and each level triggers a different license stack.

Risk Level	Indonesian Term	License Requirement	OSS Process	Typical Timeline
Low (Rendah)	Risiko Rendah	NIB only	Automatic issuance	Instant (same day)
Medium (Sedang)	Risiko Menengah	NIB + Sertifikat Standar	Self-declaration or LSPr verification	1-4 weeks
High (Tinggi)	Risiko Tinggi	NIB + Izin (full permit)	Government review and inspection	4-12 weeks

Low Risk: NIB Only

For low-risk KBLI codes, the NIB (Nomor Induk Berusaha) — your master business identification number — is both your registration and your license. OSS issues it automatically upon completing the online registration. No inspections, no waiting periods, no third-party verification.

Examples of low-risk codes:

70209 — Management Consulting
62011 — Application Software Programming
56101 — Restaurant
56303 — Cafe/Coffee Shop
73200 — Market Research

This is the lightest compliance path available. For consulting firms, IT companies, and many service businesses, this is why KBLI code selection matters — choosing a low-risk code (where your business genuinely qualifies) saves weeks of licensing work.

Medium Risk: NIB + Sertifikat Standar

Medium-risk codes require a Standard Certificate (Sertifikat Standar) on top of the NIB. This certificate confirms that your business meets the technical standards defined for your sector. There are two pathways to obtain it:

Dokumen Penilaian Mandiri (Self-Assessment) — You submit a self-declaration that your business meets the required standards. OSS issues the certificate based on your declaration, but you remain subject to post-issuance verification.
LSPr Verification — For certain codes (particularly PMA businesses), the certificate must be issued by a Lembaga Sertifikasi Profesi (Professional Certification Body). This involves an actual assessment by accredited auditors.

Examples of medium-risk codes:

56103 — Food Stall (Kedai Makanan)
56210 — Event Catering
55111 — Starred Hotel
46100 — Wholesale Agent

The self-assessment path looks easy on paper, but it carries liability. If a post-issuance audit reveals that your self-declaration was inaccurate, the government can revoke your certificate and require full remediation.

High Risk: NIB + Izin (Full Permit)

High-risk KBLI codes require a full government-issued permit (Izin) in addition to the NIB. This means a government agency reviews your application, inspects your premises or operations, and makes an approval decision. There is no self-declaration option.

Examples of high-risk codes:

41011 — Residential Building Construction
10710 — Bakery Product Manufacturing
21011 — Pharmaceutical Raw Material Manufacturing
35101 — Electricity Generation

High-risk licensing involves the most documentation, the longest timelines, and often requires environmental permits (AMDAL) as a prerequisite. For foreign investors, high-risk codes also tend to have the strictest PMA ownership caps.

Fiktif Positif: The 258 Auto-Approval Codes

Within the OSS system, 258 KBLI codes carry a "Fiktif Positif" (deemed approved) status. This means that if the government does not respond to your license application within the statutory processing period, your application is automatically approved by operation of law.

This is a significant procedural safeguard. For businesses operating under Fiktif Positif codes, bureaucratic delay cannot become a permanent blocker. If the relevant ministry or local government office fails to review your application within the defined timeline (typically 10-15 business days for medium risk, 20-30 for high risk), approval is granted by default.

Important caveats:

Fiktif Positif does not exempt you from meeting the actual standards — it only prevents indefinite processing delays
The government retains the right to revoke an auto-approved license if subsequent inspection reveals non-compliance
Not all KBLI codes qualify — the 258 codes are specifically designated in the implementing regulation

Check whether your KBLI code carries Fiktif Positif status before starting the licensing process. It affects your timeline planning and risk assessment significantly.

Sector-Specific Permits: Beyond the Base License

The risk-based NIB/Sertifikat Standar/Izin framework is only the foundation. Most businesses operating in regulated sectors need additional sector-specific permits that are layered on top. These permits are issued by different government agencies and have their own requirements, timelines, and costs.

Food & Beverage (F&B)

F&B businesses face the most layered licensing requirements of any common business type in Bali. On top of the base license, you need health, hygiene, and potentially alcohol and halal certifications.

Permit	Full Name	Required For	Issuing Authority	Bali Zero Price
HSP	Label Higiene Sanitasi Pangan	All F&B businesses	Dinas Kesehatan	Included with SLHS
SLHS	Sertifikat Laik Higiene Sanitasi	Restaurants, cafes, catering	Dinas Kesehatan	IDR 9,000,000
NPBBKC	Nomor Pokok Pengusaha Barang Kena Cukai (A+B+C)	Any business selling alcohol	Bea Cukai (Customs & Excise)	IDR 15,000,000
Halal Certificate	Sertifikat Halal	Food production, packaged food	BPJPH	IDR 5,000,000 - 8,000,000
PIRT	Pangan Industri Rumah Tangga	Home-based food production	Dinas Kesehatan	IDR 500,000 - 1,000,000

SLHS is non-negotiable for any establishment serving food to the public. The certification involves an on-site health inspection covering kitchen facilities, food storage, water quality, waste disposal, and staff hygiene practices. Without it, your establishment can be shut down during a routine Dinas Kesehatan inspection — and these inspections in Bali have increased significantly since 2025.

NPBBKC is required the moment alcohol appears on your menu — whether your primary business is a bar, a restaurant that serves wine, or a cafe with a beer list. The license covers three alcohol categories (A: up to 5%, B: 5-20%, C: above 20%). Most establishments need all three. Operating without NPBBKC is a criminal offense under excise law, not merely an administrative violation.

Halal Certification is mandatory for food production businesses under the Halal Product Assurance Law (JPH). If you manufacture, process, or package food products — even artisanal products — halal certification is legally required. Restaurants and cafes serving food on-premises are currently exempt from mandatory halal certification, though this may change.

For a deeper breakdown of F&B codes and their specific requirements, see our complete F&B KBLI 2025 guide.

Hospitality and Accommodation

Hotels, villas, guesthouses, and serviced apartments require health and safety certifications that go beyond the base license.

Permit	Required For	Notes
Sertifikat Laik Sehat	Hotels, villas with guest services	Health worthiness certificate from Dinas Kesehatan
Dokumen Penilaian Mandiri	Medium-risk accommodation	Self-assessment document for OSS
LSPr Sertifikat Standar Usaha	PMA accommodation businesses	Issued by accredited Professional Certification Body
PBG	All physical premises	Building approval permit (replaced IMB)

The hospitality sector in Bali is under increased regulatory scrutiny. Villa operators who previously operated in a grey zone between property rental and hospitality are now forced to classify correctly under KBLI 2025 — and the wrong classification means the wrong license stack. See our Bali transformation guide for the villa classification analysis.

Construction

Construction businesses face some of the heaviest licensing requirements in the KBLI framework.

Permit	Full Name	Required For	Issuing Authority
SBU	Sertifikat Badan Usaha	All construction businesses	LPJK (Construction Services Development Board)
AMDAL	Analisis Mengenai Dampak Lingkungan	Large-scale construction projects	Ministry of Environment
UKL-UPL	Upaya Pengelolaan Lingkungan - Upaya Pemantauan Lingkungan	Medium-scale construction	Local environmental agency
PBG	Persetujuan Bangunan Gedung	All building construction	Local government

The SBU is the gate-keeper license. Without it, your company cannot legally bid on or execute construction projects in Indonesia. It is issued by LPJK after verifying your company's technical capabilities, staffing qualifications, and financial capacity. The SBU is graded by qualification level, which determines the maximum project value your company can handle.

For construction-specific KBLI codes, see our construction and building guide.

Import and Export

Businesses that import goods into Indonesia need trade-specific licenses beyond the base NIB.

License	Full Name	Purpose	Who Needs It
API-P	Angka Pengenal Importir Produsen	Producer Import License	Manufacturers importing raw materials for own production
API-U	Angka Pengenal Importir Umum	General Import License	Trading companies importing goods for resale

The distinction between API-P and API-U is critical. API-P allows you to import raw materials and components for your own manufacturing — but you cannot resell the imported goods directly. API-U allows general trading imports but comes with stricter quota controls and reporting requirements. Choosing the wrong import license type can result in goods being held at customs.

Under KBLI 2025, the Factoryless Goods Producer (FGP) classification allows certain businesses that design products but outsource manufacturing to qualify for API-P rather than API-U — a significant advantage. See our Bali transformation guide for the FGP analysis.

Environmental Permits: AMDAL, UKL-UPL, and SPPL

Environmental permits form a separate but mandatory layer for many businesses, determined by the scale and environmental impact of your operations rather than the KBLI code alone.

Permit	Scale	Applies To	Process
AMDAL	Large impact	Major construction, industrial facilities, large hospitality developments	Full environmental impact assessment, public consultation, expert panel review
UKL-UPL	Medium impact	Medium construction, manufacturing, hotels above threshold	Environmental management and monitoring plan, government review
SPPL	Small/minimal impact	Small businesses, offices, retail, most service businesses	Self-declaration letter of environmental management commitment

AMDAL is the most comprehensive and expensive environmental compliance requirement. It involves hiring certified environmental consultants, conducting baseline studies, holding public consultations, and submitting to an expert review panel. Timeline: 3-6 months minimum. If your project requires AMDAL, factor this into your business launch timeline before any other licensing.

UKL-UPL is the middle tier — a structured environmental management and monitoring plan that requires government review but not the full AMDAL process. Most medium-scale hospitality and construction projects in Bali fall into this category.

SPPL (Surat Pernyataan Pengelolaan Lingkungan) is a self-declaration for small businesses with minimal environmental impact. Most consulting firms, IT companies, small retail operations, and service businesses only need an SPPL. The process is straightforward: you submit a letter declaring your commitment to basic environmental management practices.

For environmental permit requirements in detail, see our environmental permits guide.

The OSS-RBA Licensing Pathway: Step by Step

Regardless of your risk level, all licensing flows through the OSS (Online Single Submission) system using the Risk-Based Approach (RBA). Here is the unified pathway:

Step 1: Company Registration — Establish your legal entity (PT PMA for foreign investors, PT for domestic). This happens through AHU Online (Ministry of Law) before you touch OSS.

Step 2: NIB Issuance — Register on OSS and obtain your NIB. Select your KBLI codes during this process. The NIB is issued automatically for all risk levels — this is your base registration.

Step 3: Risk Classification — OSS automatically assigns your risk level based on your KBLI code. This determines what happens next.

Step 4 (Low Risk): You are done. The NIB is your operating license. Begin operations.

Step 4 (Medium Risk): Complete the Sertifikat Standar process — either self-assessment (Penilaian Mandiri) or LSPr verification. Submit through OSS.

Step 4 (High Risk): Apply for the full Izin through OSS. The relevant government ministry reviews your application, may conduct inspections, and issues the permit.

Step 5: Sector-Specific Permits — Apply for any additional permits required by your sector (SLHS, NPBBKC, SBU, API, environmental permits, etc.). These are processed through their respective agencies, not through OSS.

Step 6: PBG (if applicable) — If your business operates from a physical premises, obtain PBG (Persetujuan Bangunan Gedung), which replaced the old IMB (Izin Mendirikan Bangunan). This is required for any construction, renovation, or change of building use.

Note on OSS integration: Verify the live OSS workflow before filing KBLI 2025 changes. Businesses should keep documentation and code mapping ready, then execute formal registration through the current official path. See our OSS registration guide for current system navigation.

Complete License Matrix: Risk Level + Sector

The following table combines the base risk framework with sector-specific requirements for the most common business types in Bali.

Business Type	Example KBLI	Risk Level	Base License	Sector Permits	Environmental
IT Consulting	62011	Low	NIB only	None	SPPL
Management Consulting	70209	Low	NIB only	None	SPPL
Restaurant	56101	Low	NIB only	HSP, SLHS	SPPL
Restaurant + Alcohol	56101	Low	NIB only	HSP, SLHS, NPBBKC	SPPL
Cafe	56303	Low	NIB only	HSP, SLHS	SPPL
Bar / Nightclub

What This Costs Through Bali Zero

Licensing is where operational costs add up quickly. Below is a summary of sector-specific permit pricing available through Bali Zero. Base licensing (NIB, Sertifikat Standar) is handled as part of your company setup package.

Service	Description	Price (IDR)
SLHS	Hygiene Sanitation Certificate for F&B	9,000,000
NPBBKC (A+B+C)	Alcohol License — all three categories	15,000,000
Halal Certificate	Mandatory for food production	5,000,000 - 8,000,000
PIRT	Home industry food production license	500,000 - 1,000,000

For company formation packages that include base licensing, NIB registration, and KBLI code selection, contact Bali Zero for a consultation tailored to your business type and sector.

Key Takeaways

Your KBLI code determines your license pathway. Low risk = NIB only. Medium risk = NIB + Standard Certificate. High risk = NIB + full government permit. There are no shortcuts around this framework.
Sector-specific permits stack on top of the base license. A low-risk restaurant still needs SLHS. A low-risk bar still needs NPBBKC. The risk level only determines the base — the sector determines the extras.
258 Fiktif Positif codes have automatic approval safeguards. If your code qualifies, bureaucratic delay cannot permanently block your license.
Environmental permits are a separate track. AMDAL, UKL-UPL, or SPPL requirements are based on your operational scale, not just your KBLI code. Large projects need AMDAL before anything else.
Verify live OSS handling before filing. The June 2026 window has closed; treat unresolved legacy mappings as overdue and remediate through the current workflow.
Wrong code = wrong license stack = wrong tax benchmarks. The Coretax system compares your financials against industry standards for your specific KBLI code. Misclassification creates audit exposure on multiple fronts.

For a strategic overview of how KBLI 2025 impacts Bali-specific sectors, read our Bali transformation guide. For foreign ownership rules by code, see the PMA ownership guide. For the full list of KBLI 2025 codes and migration paths, see our migration guide.