Registering a .co.id domain for a law firm: the NIB is not the only route

A .co.id address tells clients that they are dealing with an Indonesian entity, not an individual or an anonymous website. For a law firm, it is also the address behind the firm’s email — the channel through which clients, courts and opposing counsel increasingly correspond.

Many firms assume that a .co.id domain can only be registered with a Business Identification Number (Nomor Induk Berusaha, NIB) issued through the OSS system, because that is what most registrar checklists show. For firms that do not hold an NIB, that assumption can stall the process. The current policy of PANDI, the registry for .id domain names, is broader.

What PANDI’s policy says

PANDI’s Domain Name Registration Policy, version 10.0, in force since 29 August 2025, provides that .co.id is intended for legal entities, businesses, organisations and other entities operating in Indonesia (point 8.1). For these applicants, the required documents are (point 8.1.1):

1. an NIB, an NPWP, or an SK Kemenkumham; and
2. a valid identity document of the person responsible — an e-KTP, passport, e.id or other valid identification.

The three documents in the first item are alternatives. A firm that has no NIB can rely on its NPWP (tax identification number) or, where it has one, a decree of the Ministry of Law (SK Kemenkumham).

The policy adds two general conditions. Every applicant must have identity and/or legality documents (such as a deed of establishment) and a clear and lawful domicile or place of business (point 5.1). And the applicant guarantees that the documents submitted are true, authentic, valid and complete (point 5.2).

Why this matters for law firms

Law firms in Indonesia are commonly organised as a partnership of advocates or as a sole practice, rather than as a limited liability company. Depending on how a firm is set up and registered, it may not have an NIB to hand when it needs a domain name. The policy does not require one: a firm with its own NPWP meets the document requirement for .co.id.

Other second-level domains are not a substitute. .or.id is intended for social, community and similar organisations; .ac.id and .sch.id for educational institutions; and .web.id or .id for individuals and general use. For a professional practice that serves clients, .co.id is the appropriate category.

Where it gets stuck: registrars read the policy differently

The policy is clear on paper. In practice, it is applied by each registrar, and registrars do not all read it the same way. Some registration forms still label the document field “NIB” and treat it as mandatory; some reviewers return an application that relies on an NPWP and ask for an NIB instead; and the explanation offered can differ from one registrar — or one support agent — to the next.

We experienced this first-hand. When we registered drlawoffice.co.id, the domain was ultimately activated on the basis of the firm’s NPWP, exactly as point 8.1.1 allows. But the uneven understanding of that rule held up the process: additional correspondence was needed before the document was accepted.

The lesson is not that the NPWP route is uncertain — it is expressly provided for — but that you should expect to have to point to the rule, and plan your timeline accordingly.

Practical tips

1. Confirm with the registrar before you pay. Ask in writing whether they will accept the firm’s NPWP for a .co.id domain, citing point 8.1.1.1 of PANDI’s policy. Keep their answer — it is useful if a reviewer later asks for an NIB.
2. Build in time. Do not schedule a website launch or a change of email address for the day after registration. Allow for at least one round of document clarification.
3. Use the firm’s own documents. The NPWP should be in the name of the firm, and the identity document should belong to the partner or person responsible for the registration.
4. Keep the name consistent. The domain registrant name, the NPWP and the firm’s letterhead should match, to avoid questions during verification.
5. Register early. Domain names are first come, first served. An expired domain can be re-registered by a third party within weeks — and then used for content that has nothing to do with your firm.
6. Protect it once you have it. Turn on auto-renewal and the registrar lock, and keep the account under a firm email address rather than a personal one.

In short

For a .co.id domain, PANDI accepts an NIB, an NPWP or an SK Kemenkumham, together with a valid identity document. A law firm without an NIB does not need to settle for a different domain category — its NPWP is enough. Expect, however, that not every registrar will read the policy the same way: confirm the NPWP route in advance, keep the rule at hand, and allow for clarification before activation.

Source: PANDI, Kebijakan Pendaftaran Nama Domain / Domain Name Registration Policy, version 10.0 (No. 002/K/DNP/Kebijakan Pendaftaran Nama Domain/VIII/2025/PANDI), effective 29 August 2025, points 5.1, 5.2 and 8.1.