OSS risk-based licensing — the Online Single Submission Risk-Based Approach, or OSS-RBA — is Indonesia’s national business-licensing framework under UU No. 11/2020 on Job Creation and its implementing regulation PP No. 5/2021. It assigns every registered business activity a risk classification — Low, Medium-Low, Medium-High, or High — and that classification determines whether a company needs only its business identification number (NIB) to begin operating, or whether it must pass through certificate verification, full licence review, and additional sectoral approvals before it can lawfully open its doors. For a foreign investor building a hotel or resort in Labuan Bajo — including inside the BPOLBF-managed Parapuar zone — OSS-RBA is the gateway through which every permit obligation flows. Understanding where your activity sits in the risk matrix is not a compliance afterthought; it shapes your timeline, your capital-call sequence, and the bureaucratic footprint you manage across multiple government agencies.
This piece covers the mechanics of OSS-RBA and how they apply to tourism investment in Labuan Bajo. It is information, not legal or investment advice. OSS-RBA classifications and sectoral requirements change. Before acting, consult an independent Indonesian legal adviser. For introductions to vetted independent specialists with NTT experience, use our enquiry form.
What OSS-RBA Replaced and Why It Matters
Before UU 11/2020, Indonesia’s investment licensing was a patchwork of sectoral permits — each ministry issuing its own approvals on its own timeline, with no single portal and no binding sequencing logic. The result was famous: investors built hotels for years while simultaneously chasing licences that technically should have preceded construction. OSS-RBA did not eliminate bureaucracy, but it centralised the entry point. Every business activity is now registered through a single portal (oss.go.id), and the portal’s risk classification determines the permit stack automatically based on the KBLI code the company selects at registration.
The practical effect for tourism investors is two-fold. First, the NIB — Nomor Induk Berusaha, the business identification number — is generated immediately upon registration, regardless of risk level. That number exists before any permit is approved. Second, the subsequent obligations are risk-contingent: a low-risk activity can use that NIB to begin operating straight away; a high-risk activity — a star hotel being the paradigm case — faces a substantive review track that the NIB merely opens. The NIB is the key; it is not the door.
The Four Risk Tiers: What Each Demands
PP No. 5/2021 defines the four risk categories. Their practical meaning in the tourism context is as follows.
- Low Risk
- NIB alone is sufficient to commence lawful operations. The company self-declares compliance with applicable technical standards; no government agency actively verifies that declaration before the business opens. This tier is rare for hotel-scale hospitality operations. Some very small food-and-beverage or souvenir retail activities land here, but any operation involving accommodation, significant construction, or regulated health/safety standards will almost certainly sit higher.
- Medium-Low Risk
- NIB plus a self-declared compliance statement registered in OSS-RBA. Still largely self-regulatory, but the declaration creates a paper trail that government can audit after the fact. Some ancillary tourism services — tour-operator agencies, transport services, certain cultural-experience operators — may fall at this tier depending on the KBLI selected.
- Medium-High Risk
- NIB plus a government-verified sertifikat standar (standards certificate). The company lodges a self-declaration, but the competent authority — typically the local DPMPTSP (one-stop investment and services office) or the relevant technical ministry — reviews and validates it before the business is cleared to operate. Many mid-scale hospitality sub-activities sit here. Restaurant operations, non-star guesthouses, and some wellness services are commonly classified Medium-High.
- High Risk
- NIB plus a full izin usaha (operating licence) issued after substantive review. The licence is not granted on self-declaration — the company must demonstrate compliance with technical, safety, and environmental standards to the satisfaction of the competent authority before it may lawfully commence. Star hotel accommodation (KBLI 55110) sits here. The review tracks both national requirements through the Ministry of Tourism and local requirements through DPMPTSP Manggarai Barat. Construction approvals and environmental clearances must precede or run concurrently with the izin usaha process.
Mapping Tourism KBLI Codes to Risk Tiers
KBLI — Klasifikasi Baku Lapangan Usaha Indonesia — is the five-digit activity classification that OSS-RBA uses to assign the risk level and determine what additional permits apply. The table below maps the most relevant codes for a Labuan Bajo hospitality project. Important caveat: OSS-RBA risk classifications are updated periodically, sometimes without any public announcement. Always verify the current classification in the OSS portal (oss.go.id) at the time of your actual registration — what this table records reflects available information as of mid-2026.
| KBLI Code | Activity (Indonesian) | Common English Label | Typical Risk Tier | Verify Current OSS Setting |
|---|---|---|---|---|
| 55110 | Penyediaan akomodasi hotel berbintang | Star hotel accommodation | High | Yes — confirm in OSS-RBA portal before registration |
| 55120 | Penyediaan akomodasi hotel melati | Non-star hotel | Medium-High | Yes — classification can shift with KBLI updates |
| 55194 | Penyediaan akomodasi vila | Villa accommodation | Verify in OSS-RBA | Exact code and risk level — confirm KBLI 2020 nomenclature |
| 56101 | Restoran | Restaurant | Medium-High | Yes — food-safety and hygiene certificates required |
| 82301 | Jasa penyelenggaraan pertemuan, insentif, konferensi | Meeting/conference/incentive organising | Verify in OSS-RBA | MICE-component KBLI; confirm exact nomenclature in KBLI 2020 |
| 82302 | Jasa penyelenggaraan pameran, konvensi, dan event lainnya | Exhibition, convention, and event organising | Verify in OSS-RBA | Common for venue-plus-event operations; verify current risk level |
| 96121 | Aktivitas spa | Spa services | Verify in OSS-RBA | Health-related; provincial health-office requirements may apply — verify |
| 93119 / 96091 | Aktivitas olahraga / kebugaran lainnya | Fitness and sport activities | Verify in OSS-RBA | Confirm which code applies to the specific concept before selecting |
A practical note on how KBLI selection works in practice: an integrated resort does not register every activity under a single code. The star hotel accommodation code (55110) anchors the main hotel operation. The restaurant, spa, fitness centre, and event-organising activities are registered as separate KBLIs. Each carries its own risk classification and its own permit obligations. The NIB covers all of them under the one legal entity, but the sectoral licence (izin usaha) for each High-risk KBLI must be obtained independently. A fully integrated resort in Labuan Bajo might be managing three or four separate OSS-RBA permit tracks simultaneously.
The Labuan Bajo Investor Sequence: Entity, NIB, Sectoral Permits
The sequence for a foreign investor entering Labuan Bajo’s tourism sector through a PT PMA runs through three distinct phases. These do not compress well — each phase has hard dependencies on the previous one.
Phase 1: Legal entity formation
A PT PMA — Perseroan Terbatas Penanaman Modal Asing — is constituted by a notarial deed before an Indonesian notary, then ratified by the Ministry of Law and Human Rights (Kemenkumham) to produce legal-entity status. The entity must have a minimum total investment commitment exceeding IDR 10 billion excluding land and buildings, and minimum issued/paid-up capital of IDR 10 billion, per Peraturan BKPM No. 4/2021. These are per-KBLI-per-project-location thresholds for total investment; the IDR 10 billion paid-up-capital floor applies to the company as a whole.
KBLI selection happens here, not during OSS-RBA registration. The articles of association fix the company’s stated purposes and activities; the KBLIs selected in OSS-RBA should mirror those articles exactly. Mismatches between the deed and the OSS registration create amendment headaches downstream.
Phase 2: NIB and risk-appropriate permit track in OSS-RBA
Once Kemenkumham ratification is complete, the entity registers in OSS-RBA to receive its NIB. The portal assigns the risk classification automatically based on the KBLI codes entered, the project location, and whether the project falls within any special zone or sector-specific regulation. For a star hotel at Parapuar (KBLI 55110, High risk), the NIB registration opens the izin usaha track — it does not close it. The company now has a legal identity and a permit timeline; it does not yet have permission to build or operate.
At this stage, the investor must also confirm whether any other national regulations apply to the project’s specific location. Parapuar sits inside a zone managed by BPOLBF under a Perpres (Perpres No. 32/2018). That adds a regulatory layer that OSS-RBA does not automatically surface: the BPOLBF cooperation agreement.
Phase 3: Sectoral permits and location-specific requirements
For a High-risk tourism project, the sectoral permit stack typically includes:
- Environmental clearance — UKL-UPL (environmental management and monitoring plan) for projects below the AMDAL threshold, or full AMDAL for larger/more ecologically sensitive projects, under PP No. 22/2021. For a hillside hotel in what was, until recently, state forest in Bowosie, early engagement with the environmental-review process is not optional — it is the critical-path item that determines everything else.
- Building approval (PBG) — the Persetujuan Bangunan Gedung, which replaced the former IMB under UU No. 11/2020. PBG is issued by the local government (Pemkab Manggarai Barat) and cannot formally precede environmental clearance.
- Tourism operating registration (TDUP) — Tanda Daftar Usaha Pariwisata, issued by DPMPTSP Manggarai Barat. For a star hotel, this is accompanied by the Hotel Star Classification process administered by the Ministry of Tourism (Kemenpar), which involves physical inspection against the SNI 8601:2018 hotel classification standard.
- Ancillary sectoral permits — food-business registration for F&B operations, health-facility registration for spa services (which may involve the provincial health office), and any adventure-activity safety certification if the project incorporates guided outdoor activities.
The DPMPTSP Manggarai Barat is a smaller agency than its counterparts in Bali or Java. Physical presence in Labuan Bajo during the permitting phase is typically necessary; remote-only management of the process tends to cause delays that physical attendance resolves quickly. Factor that into your project management budget.
Adding the Parapuar Layer: BPOLBF Cooperation
For investors targeting a specific lot inside Parapuar, OSS-RBA and entity formation are necessary conditions, not sufficient ones. BPOLBF holds the Zone 1 HPL (≈129.6 ha, certificate handed over 15 September 2023) as a state Land Management Right. Investors do not buy or lease land from BPOLBF in the commercial-property sense — they enter a cooperation agreement that grants derivative land rights, most likely in the form of HGB-on-HPL or a utilisation-cooperation instrument.
No public BPOLBF document confirms the exact legal instrument or the tenure term for Parapuar lots. General law (PP No. 18/2021) allows HGB on HPL for 30 years, extendable by 20 years and renewable for a further 30 years. Whether BPOLBF’s cooperation agreements match that ceiling, or impose a shorter or different structure, is not in the public record. Investors must request the draft cooperation agreement from BPOLBF’s investment and cooperation division and have it reviewed by independent counsel before committing capital.
The sequencing for a Parapuar lot therefore runs: PT PMA incorporated → NIB via OSS-RBA → engagement with BPOLBF → cooperation agreement negotiated and signed → HGB-on-HPL registered with ATR/BPN Manggarai Barat → environmental clearance (UKL-UPL/AMDAL) → PBG → TDUP and hotel classification. BPOLBF’s cooperation process is not part of OSS-RBA; it runs in parallel or sequentially, on BPOLBF’s own timeline, and cannot be substituted by the NIB alone.
No published lot pricing exists. All 19 lots are available only through direct negotiation with BPOLBF. The two investors publicly named — Dusit (reported US$15 million commitment on Lot 1.6, single-source, April 2025) and Eiger (reported US$1.2 million store-and-coffee project, single-source, April 2025) — negotiated their terms bilaterally. BPOLBF’s Plt Dirut Frans Teguh stated 5–6 committed investors in 2025; only those two have been publicly identified.
Infrastructure at Parapuar as of mid-2026: the access road and 360° viewpoint exist and are actively used for BPOLBF’s Weekend at Parapuar event series. Utilities — electricity, water, and waste — are described as being staged; no project-level documentation of per-lot utility availability has been published. Require written confirmation from BPOLBF on utility timelines per lot before signing any cooperation agreement. The Wae Mese spring is the main PDAM source for Labuan Bajo town, and the town already runs on constrained water supply; Parapuar’s water situation at project scale is a legitimate due-diligence question, not a hypothetical.
If you are at the scoping stage and want introductions to independent legal and market-entry specialists familiar with BPOLBF’s process, our enquiry form connects you to that network. No one can pay to change what we write; if you proceed with a specialist introduced through us, they may pay us a referral fee at no extra cost to you.
What OSS-RBA Does Not Solve
A common misconception among investors who have encountered OSS-RBA through consultancy marketing is that getting the NIB means the business is licensed. It does not — at least not for High-risk activities. The NIB starts the clock on a permit process that the investor must actively manage. OSS-RBA is a system for channelling and tracking permit obligations; it does not compel government agencies to issue those permits on any fixed schedule.
OSS-RBA also does not resolve sectoral ministry requirements that sit outside the portal’s automation. Hotel star classification, food-safety registrations, and health-related spa permits involve agency-specific inspections and documentation that OSS-RBA coordinates but does not replace. The portal is the front door; the rooms are still furnished by separate agencies at their own pace.
Additionally, OSS-RBA does not create any fiscal incentive that does not already exist by statute. Parapuar is not a KEK (Special Economic Zone), and the PP No. 40/2021 KEK facilities — income-tax reductions, PPN/PPnBM, customs and excise exemptions, and KEK-specific licensing easements — do not apply to projects here. No Parapuar-specific fiscal incentive has been publicly committed in any instrument. BPOLBF offers coordination and facilitation; that is a process benefit, not a financial one. For more on incentives, see our dedicated piece on the Parapuar incentives reality-check.
A Note on OSS-RBA and Changing Practice
OSS-RBA is not static. The KBLI classification list has been updated since PP No. 5/2021 took effect; individual activity codes have been reclassified upward or downward without dedicated public announcement. The Ministry of Investment/BKPM issues periodic guidance notes; sectoral ministries issue their own technical regulations that sit on top of the OSS framework. Any practitioner — whether lawyer, notary, or investment consultant — who quotes you a fixed timeline for OSS-RBA permit processing is either very well-connected or overconfident. Treat quoted durations as estimates, build contingencies, and keep a close watch on the OSS portal settings for the specific KBLI codes your project will use.
For the detailed mechanics of PT PMA formation — shareholder structure, capital call sequence, the notarial deed process, and how the entity connects to HGB-on-HPL in Parapuar — see our pillar piece on PT PMA, OSS and KBLI for tourism investment in Labuan Bajo. The two articles are intended to be read together: this one covers OSS-RBA’s risk framework; the pillar covers the company formation and land-rights sequence end-to-end.
Frequently Asked Questions
What does OSS-RBA mean and who does it apply to?
OSS-RBA stands for Online Single Submission — Risk-Based Approach. It is Indonesia’s national business licensing system, established by UU No. 11/2020 (Job Creation Law) and PP No. 5/2021. It applies to every business entity operating in Indonesia — domestic and foreign alike — that must register a commercial activity under a KBLI code. The risk level assigned to that KBLI code determines how many additional permits the company must obtain beyond its NIB before it can lawfully commence operations.
Is a hotel at Parapuar classified as High risk under OSS-RBA?
A star hotel registered under KBLI 55110 is typically classified as High risk, meaning the company requires a full operating licence (izin usaha) issued after substantive government review, not just its NIB. That classification holds for Parapuar as for any other location in Indonesia. However, KBLI risk classifications are updated periodically; always verify the current setting in the OSS-RBA portal (oss.go.id) at the time of your actual registration rather than relying on any third-party summary including this one.
Can I use OSS-RBA to get permits for a spa or event venue at Parapuar?
Yes — OSS-RBA is the registration point for spa activities (typically KBLI 96121) and event or meeting organising (KBLI 82301/82302). Each carries its own risk classification and its own permit obligations, which may include health-authority registration for spa services and venue-safety certification for event spaces. At Parapuar, these permits run through DPMPTSP Manggarai Barat and the relevant technical ministries; BPOLBF’s cooperation agreement provides the land-right basis, but does not substitute for the sectoral permit requirements. Verify current KBLI 2020 nomenclature and OSS-RBA risk levels in the portal for each code before filing.
Does getting an NIB through OSS-RBA mean my tourism business is licensed to operate?
Not for High-risk or Medium-High-risk activities. The NIB is a business identification number generated on registration — it is the entry point to the permit system, not the conclusion of it. For a High-risk activity like a star hotel, the NIB opens the izin usaha review track. The company is not cleared to operate until that licence is issued, and the licence requires prior environmental clearance, building approval, and compliance verification. For Low-risk activities, the NIB alone does suffice — but those are rare in full-scale hospitality.
What is the difference between OSS-RBA permits and the BPOLBF cooperation agreement at Parapuar?
They are entirely separate systems. OSS-RBA is the national licensing portal that governs what activities a company may legally conduct. The BPOLBF cooperation agreement is a bilateral arrangement between the investor’s entity and BPOLBF that grants the right to use a specific lot on BPOLBF’s HPL land. One does not substitute for the other. A company with a fully complete OSS-RBA permit stack but no BPOLBF cooperation agreement has no lawful right to build on a Parapuar lot. A company with a BPOLBF cooperation agreement but an incomplete OSS-RBA permit stack has land access but no operating authority. Both are required, and both must be in place before construction begins in earnest.