Rule · OJK · 28 Apr 2025
Financial Services Authority (OJK) Circular No. 4/SEOJK.07/2025 establishes reporting requirements for Financial Sector Technology Innovation (ITSK) providers holding business licenses, including Alternative Credit Scorers (PKA), Financial Service Aggregation Providers (PAJK), and Digital Financial Asset Traders. The Circular mandates the submission of an Annual Business Plan by November 10 each year, alongside periodic reports (monthly, semi-annual, and annual) and incidental reports for events such as business changes, institutional changes, or cyberattacks. It specifies submission formats via the OJK Reporting System, defines deadlines for various reports, and outlines procedures for technical failures or offline submissions.
To:
Financial Sector Technology Innovation Providers who hold a business license at the Financial Services Authority, Attn.
COPY
CIRCULAR OF THE FINANCIAL SERVICES AUTHORITY
OF THE REPUBLIC OF INDONESIA
NUMBER 4/SEOJK.07/2025
CONCERNING
REPORTING BY FINANCIAL SECTOR TECHNOLOGY INNOVATION PROVIDERS WHO HOLD A BUSINESS LICENSE AT THE FINANCIAL SERVICES AUTHORITY
In light of the implementation of the Financial Services Authority Regulation Number 3 of 2024 concerning the Implementation of Financial Sector Technology Innovation (State Gazette of the Republic of Indonesia Year 2024 Number 5/OJK, Supplement to the State Gazette of the Republic of Indonesia Number 73/OJK), the Financial Services Authority Regulation Number 29 of 2024 concerning Alternative Credit Scoring (State Gazette of the Republic of Indonesia Year 2024 Number 41/OJK, Supplement to the State Gazette of the Republic of Indonesia Number 109/OJK), and the Financial Services Authority Regulation Number 4 of 2025 concerning the Implementation of Financial Service Aggregation (State Gazette of the Republic of Indonesia Year 2025 Number 8/OJK, Supplement to the State Gazette of the Republic of Indonesia Number 138/OJK), it is necessary to further regulate the implementation provisions regarding the form, procedures, and mechanisms for reporting by Financial Sector Technology Innovation providers who hold a business license at the Financial Services Authority in this Financial Services Authority Circular as follows:
I. GENERAL PROVISIONS
In this Financial Services Authority Circular, the following terms are defined as:
a. Financial Sector Technology Innovation, hereinafter abbreviated as ITSK, is technology-based innovation that impacts products, activities, services, and business models within the digital financial ecosystem. b. Consumer is every person who owns and/or utilizes products and/or services provided by financial sector business actors.
c. Financial Services Authority Reporting System is an information system used as a medium for submitting reports online by ITSK providers to the Financial Services Authority.
d. ITSK Provider is every party that implements ITSK and holds a business license at the Financial Services Authority. e. Digital Financial Asset Trader, hereinafter referred to as Trader, is a business entity that trades digital financial assets, either on its own behalf and/or facilitating Consumers. f. Alternative Credit Scorer, hereinafter abbreviated as PKA, is an ITSK Provider that processes data other than credit or financing data with the aim of describing the feasibility, condition, or profile of a Consumer. g. Financial Service Aggregation Provider, hereinafter abbreviated as PAJK, is an ITSK Provider that conducts aggregation business activities through electronic systems using the internet. h. Periodic Report is a report made and submitted by an ITSK Provider to the Financial Services Authority within a specific period.
i. Incidental Report is a report made and submitted by an ITSK Provider to the Financial Services Authority at a specific time.
j. Board of Directors is the corporate organ authorized and fully responsible for managing the company for the company's interests, in accordance with the company's purpose and objectives, and representing the company, both inside and outside of court, in accordance with the provisions of the articles of association for companies in the form of a limited liability company or equivalent to the Board of Directors for companies in other legal entity forms. k. Annual Business Plan is a written document describing the business activity plan of an ITSK Provider over a period of 1 (one) year, including plans to improve business performance and strategies to realize such plans in accordance with set targets and timelines, while still observing risk management and prudence principles.
ITSK Providers include:
a. PKA; b. PAJK; and
c. Other ITSK Providers in accordance with applicable legislation,
who hold a business license from the Financial Services Authority.
II. ANNUAL BUSINESS PLAN
ITSK Providers submit an Annual Business Plan in accordance with the format contained in Appendix I, which is an integral part of this Financial Services Authority Circular.
The Annual Business Plan referred to in paragraph 1 consists of at least:
a. information regarding the enhancement of technology capacity, infrastructure, and human resources; b. plans to improve business performance;
c. realization strategies in accordance with set targets and timelines; and
d. retention of a portion of the ITSK Provider's profit.
The Financial Services Authority may request ITSK Providers to make adjustments if the submitted Annual Business Plan is deemed not to fully meet the scope referred to in paragraph 2.
ITSK Providers appoint a member of the Board of Directors responsible for the preparation and presentation of the Annual Business Plan.
The Annual Business Plan referred to in paragraph 1 is signed by the member of the Board of Directors responsible as referred to in paragraph 4.
The Annual Business Plan referred to in paragraph 1 is submitted by the ITSK Provider no later than November 10 before the year the Annual Business Plan is implemented.
If the deadline for submitting the Annual Business Plan referred to in paragraph 6 falls on a holiday, the submission deadline is on the first working day following the holiday.
Example:
If the deadline for submitting the Annual Business Plan falls on a Saturday, the submission deadline is the first working day, which is the Monday of the following week.
ITSK Providers may only change the Annual Business Plan 1 (one) time.
Changes to the Annual Business Plan referred to in paragraph 8 may only be made no later than the end of June of the current year.
Changes to the Annual Business Plan referred to in paragraph 9 must be submitted to the Financial Services Authority no later than 30 (thirty) working days before the implementation of the Annual Business Plan changes, accompanied by written reasons for the changes.
III. ITSK PROVIDER REPORTS
ITSK Provider Reports consist of:
a. Periodic Reports; and b. Incidental Reports.
ITSK Providers submit Periodic Reports and Incidental Reports to the Financial Services Authority accurately and completely.
Terms used:
a. Accurate means in accordance with the actual conditions of the ITSK Provider and does not contain incorrect information or facts; and b. Complete means containing all report elements and does not omit material information or facts.
ITSK Providers appoint a member of the Board of Directors responsible for the preparation and presentation of ITSK Provider Reports.
ITSK Provider Reports referred to in paragraph 1 are signed by the member of the Board of Directors responsible as referred to in paragraph 3.
IV. PERIODIC REPORTS
Periodic Reports consist of:
a. monthly reports; b. semi-annual reports; and/or
c. annual reports.
Monthly Reports
a. Monthly reports referred to in paragraph 1 letter a consist of at least:
1) financial data; and
2) other information.
b. ITSK Providers submit monthly reports referred to in paragraph 1 letter a in accordance with the format contained in Appendix II Part A, which is an integral part of this Financial Services Authority Circular.
c. For monthly reports for the periods of June and December, ITSK Providers submit monthly reports referred to in paragraph 1 letter a in accordance with the format contained in Appendix II Part B, which is an integral part of this Financial Services Authority Circular.
d. Monthly reports referred to in letter a are submitted no later than 10 (ten) working days after the reporting period ends. e. The obligation to submit monthly reports by ITSK Providers is implemented in accordance with Financial Services Authority Regulations governing each type of ITSK.
Semi-Annual Reports
a. ITSK Providers submit semi-annual reports referred to in paragraph 1 letter b consisting of at least:
1) reports on the realization of the Annual Business Plan; and
2) the application of risk management and prudence.
b. Reports on the realization of the Annual Business Plan referred to in letter b paragraph 1) are submitted in accordance with the format contained in Appendix II Part C, which is an integral part of this Financial Services Authority Circular, consisting of at least the following information:
1) explanations regarding the achievement of the Annual Business Plan, including the focus and priority of achieving the Annual Business Plan as well as a comparison between the plan and its realization;
2) explanations regarding deviations from the realization of the Annual Business Plan. Example: causes and obstacles faced; and
3) follow-up actions or efforts to be taken to improve the realization achievement of the Annual Business Plan.
c. The application of risk management and prudence referred to in letter b paragraph 2) is submitted in accordance with the format contained in Appendix II Part D, which is an integral part of this Financial Services Authority Circular.
d. In the event that an ITSK Provider has an obligation to submit semi-annual reports containing financial data, the ITSK Provider submits semi-annual reports referred to in letter b accompanied by financial data in accordance with the format contained in Appendix II Part B, which is an integral part of this Financial Services Authority Circular. e. Semi-annual reports referred to in letter b and letter d are submitted no later than July 31 of the current year for the first semester and January 31 of the following year for the second semester. f. If the deadline for submitting semi-annual reports referred to in letter e falls on a holiday, the submission deadline is on the first working day following the holiday. Example:
If the deadline for submitting semi-annual reports falls on a Saturday, the submission deadline is the first working day, which is the Monday of the following week.
Annual Reports
a. ITSK Providers submit annual reports referred to in paragraph 1 letter c consisting of at least:
1) annual financial reports audited by a public accountant registered with the Financial Services Authority; and
2) governance reports.
b. Governance reports referred to in letter a paragraph 2) are submitted in accordance with the format contained in Appendix II Part E, which is an integral part of this Financial Services Authority Circular.
c. Annual reports referred to in letter a are submitted no later than April 30 of the following year.
d. If the deadline for submitting annual reports referred to in letter c falls on a holiday, the submission deadline is on the first working day following the holiday. Example:
If the deadline for submitting annual reports falls on a Saturday, the submission deadline is the first working day, which is the Monday of the following week.
V. INCIDENTAL REPORTS
Incidental Reports consist of:
a. reports related to changes in business activities, including changes in products and/or activities related to business models or partnerships; b. reports related to institutional matters, including changes in share ownership, management, office addresses, articles of association/company bylaws;
c. reports related to incidents, including fraud not involving the ITSK Provider, force majeure, legal disputes, and/or cyberattacks; and/or
d. other reports requested by the Financial Services Authority under specific conditions. Example:
compliance reports and transaction reports during the pandemic.
Reports related to changes in business activities referred to in paragraph 1 letter a and reports related to institutional matters referred to in paragraph 1 letter b consist of at least:
a. a brief description of the changes; b. the background of the changes; and
c. supporting documents.
Reports related to incidents referred to in paragraph 1 letter c consist of at least:
a. a brief description of the incident; b. steps taken by the ITSK Provider to resolve the incident;
c. post-incident prevention follow-up plans; and
d. supporting documents.
In the event of a cyberattack, ITSK Providers submit an initial notification of the cyberattack to the Financial Services Authority no later than 24 (twenty-four) hours after the ITSK Provider becomes aware of the cyberattack.
The submission of initial cyberattack notifications is directed to the relevant supervisor via electronic media in writing.
ITSK Providers submit:
a. Incidental Reports referred to in paragraph 1 letter a, letter b, and letter c no later than 5 (five) working days from the occurrence of the incident; and b. Incidental Reports referred to in paragraph 1 letter d no later than the date requested by the Financial Services Authority.
ITSK Providers submit:
a. reports related to changes in business activities referred to in paragraph 1 letter a in accordance with the format contained in Appendix III Part A, which is an integral part of this Financial Services Authority Circular. b. reports related to institutional matters referred to in paragraph 1 letter b regarding changes in share ownership in accordance with the format contained in Appendix III Part B, which is an integral part of this Financial Services Authority Circular.
The preparation and submission of reports related to institutional matters referred to in paragraph 1 letter b regarding changes in management refer to Appendix III Part C, which is an integral part of this Financial Services Authority Circular.
The preparation and submission of reports related to institutional matters referred to in paragraph 1 letter b regarding changes in office addresses refer to Appendix III Part D, which is an integral part of this Financial Services Authority Circular.
The preparation and submission of initial cyberattack notifications referred to in paragraph 4 refer to Appendix III Part E, which is an integral part of this Financial Services Authority Circular.
The preparation and submission of reports related to incidents referred to in paragraph 1 letter c regarding cyberattacks refer to Appendix III Part F, which is an integral part of this Financial Services Authority Circular.
VI. OTHER REPORTS
Under certain conditions, the Financial Services Authority may request other reports besides Periodic Reports and Incidental Reports from ITSK Providers as referred to in Section IV and Section V.
The form and structure of other reports besides Incidental Reports referred to in paragraph 1 are determined in the request letter from the Financial Services Authority.
The submission of other reports besides Periodic Reports and Incidental Reports referred to in paragraph 1 is submitted to the Financial Services Authority in accordance with the timeframe established in the request letter.
ITSK Providers and Traders prepare and submit reports related to the implementation of anti-fraud strategies.
The preparation and submission of reports related to the implementation of anti-fraud strategies by ITSK Providers and Traders are carried out in accordance with the procedures and mechanisms of Other Financial Service Institutions as referred to in the Financial Services Authority Regulation regarding the implementation of anti-fraud strategies for financial service institutions.
VII. REPORTING MECHANISM
The submission of Annual Business Plans, Periodic Reports, and Incidental Reports is conducted online via the Financial Services Authority Reporting System.
In the event that the Financial Services Authority Reporting System referred to in paragraph 1 is not yet available or experiences technical difficulties, ITSK Providers submit Annual Business Plans, Periodic Reports, and Incidental Reports in the form of electronic documents via email to:
a. mailingroomsumitro@ojk.go.id, in the event that the Financial Services Authority Reporting System is not yet available; b. mailingroommrp@ojk.go.id, in the event that the Financial Services Authority Reporting System experiences technical difficulties; or
c. other addresses determined by the Financial Services Authority.
The submission of Annual Business Plans, Periodic Reports, and Incidental Reports in the form of electronic documents via email as referred to in paragraph 2 is directed to:
a. Head of the Department of Supervision of Financial Sector Technology Innovation, Digital Financial Assets, and Crypto Assets, in the event that the Financial Services Authority Reporting System is not yet available; or b. Head of the Department of Data and Statistics with a copy to the Head of the Department of Supervision of Financial Sector Technology Innovation, Digital Financial Assets, and Crypto Assets, in the event that the Financial Services Authority Reporting System experiences technical difficulties.
In the event that the Financial Services Authority email referred to in paragraph 2 experiences technical difficulties, the submission of Annual Business Plans, Periodic Reports, and Incidental Reports is submitted to the Financial Services Authority offline by:
a. direct handover; or b. sending via a courier service company.
Offline report submission as referred to in paragraph 4 is directed to:
a. Head of the Department of Supervision of Financial Sector Technology Innovation, Digital Financial Assets, and Crypto Assets Soemitro Djojohadikusumo Building East Banteng Field Street 2-4 Jakarta 10710, Indonesia, in the event that the Financial Services Authority Reporting System is not yet available and the Financial Services Authority email experiences technical difficulties; or b. Head of the Department of Data and Statistics Radius Prawiro Tower Building, 14th Floor Bank Indonesia Office Complex MH. Thamrin Street Number 2, Central Jakarta, 10350, with a copy to:
Head of the Department of Supervision of Financial Sector Technology Innovation, Digital Financial Assets, and Crypto Assets Soemitro Djojohadikusumo Building East Banteng Field Street 2-4 Jakarta 10710, Indonesia, in the event that the Financial Services Authority Reporting System is available and the Financial Services Authority email experiences technical difficulties.
ITSK Providers submitting reports via the Financial Services Authority Reporting System as referred to in paragraph 1 must have report preparers who have a user ID and password.
To obtain the user ID and password as referred to in paragraph 6, members of the Board of Directors must submit the registration of report preparers to the Financial Services Authority Reporting System.
Registration as referred to in paragraph 7 is accompanied by a Request Letter for User ID and Password for the Financial Services Authority Reporting System in accordance with the format contained in Appendix IV Part A, which is an integral part of this Financial Services Authority Circular, via email to the address mailingroommrp@ojk.go.id.
In the event that an ITSK Provider changes report preparers, the ITSK Provider must submit a Request Letter for Changes to Financial Services Authority Reporting System Access as per Appendix IV Part B, which is an integral part of this Financial Services Authority Circular, via email to the address mailingroommrp@ojk.go.id.
ITSK Providers are deemed to have submitted reports if:
a. submission via the Financial Services Authority Reporting System is proven by an acceptance receipt from the Financial Services Authority Reporting System; b. submission via email is proven by a receipt from the Financial Services Authority email; or
c. offline submission is proven by a receipt from the Financial Services Authority.
This copy is in accordance with the original
Director of Legal Development
Legal Department signed
Aat Windradi
VIII. CLOSING
The provisions in this Financial Services Authority Circular take effect on the date of determination.
Determined in Jakarta on April 28, 2025
EXECUTIVE HEAD OF SUPERVISION
OF FINANCIAL SECTOR TECHNOLOGY INNOVATION,
DIGITAL FINANCIAL ASSETS AND CRYPTO ASSETS
FINANCIAL SERVICES AUTHORITY
REPUBLIC OF INDONESIA,
HASAN FAWZI signed https://jdih.ojk.go.id/
APPENDIX I
CIRCULAR OF THE FINANCIAL SERVICES AUTHORITY
OF THE REPUBLIC OF INDONESIA
NUMBER 4/SEOJK.07/2025
CONCERNING
REPORTING BY FINANCIAL SECTOR TECHNOLOGY INNOVATION PROVIDERS WHO HOLD A BUSINESS LICENSE AT THE FINANCIAL SERVICES AUTHORITY
ANNUAL BUSINESS PLAN
Format of Information Technology System Development Plan
Description
Actual Performance
Projection
Strategy and Explanation
Oct (T) Dec (T) Dec (T+1) Dec (T+2) Dec (T+3) a. Example: Changes (development) of IT Systems such as network topology b. ...
b. Human Resources Development Plan
Human resources development plans include, among others, plans for HR education and training needs, including plans for education and training costs or budgets for employees, Directors, and Commissioners of the ITSK Provider, as well as plans for implementing risk management certification for management and certain officials.
Format of Human Resources Development Plan
Description
Actual Performance
Projection
Strategy and Explanation
Oct (T) Dec (T) Dec (T+1) Dec (T+2) Dec (T+3) a. Example: Addition of HR, etc. b.
...
Format of Management Policies and Strategies
Detailed Business Development Strategy
Actual Performance
Projection
Strategy and Explanation
Oct (T) Dec (T) Dec (T+1) Dec (T+2) Dec (T+3) a. Partnership plans b. Number of Transactions
c. Number of Consumers
d. Number of Products e. Corporate actions f. Other business development strategies
b. Financial Projections
This section contains information regarding the actual financial condition of the ITSK Provider (position at the end of October of the year the Annual Business Plan is prepared) and projections for the next 3 (three) years.
Format of Financial Projections
Component
Actual Performance
Projection
Strategy and Explanation
Oct T Dec T Dec T+1 Dec T+2 Dec T+3
Assets
Current Assets
Non-Current Assets
Total Assets
Liabilities
Short-Term Liabilities
Long-Term Liabilities
Total Liabilities
Equity
Share Capital
Additional Paid-In Capital
Retained Earnings
Retained Earnings/Profits with Designated Use
Retained Earnings/Profits with Undesignated Use Other Equity Total Equity Total Liabilities and Equity
Components
Performance
Actual Projection
Strategy and Explanation
Oct T Dec T Dec T+1 Dec T+2 Dec T+3
Operational Revenue
Operational Expenses
Operating Profit (Loss)
Non-Operational Income (Expense)
Profit (Loss) Before Income Tax
Income Tax Expense/(Benefit)
Current Year Net Profit (Loss)
Other Comprehensive Income
Current Year Comprehensive Profit (Loss)
3. Capital Change Plan
This section contains projections of current capital (end-of-October position at the time of Annual Business Plan preparation) and projections for the next 3 (three) years regarding both capital structure and capital amount. Included in the capital change plan are plans for capital additions from existing shareholders, public offerings (initial public offering), rights issues (right issue), issuance of equity-like debt instruments, and other capital addition plans, as well as descriptions of ownership changes or replacements (if any). Format for capital change plan Name Component Performance Actual Projection Strategy and Explanation Oct T Dec T Dec T+1 Dec T+2 Dec T+3 CAPITAL POSITION Shareholders*
This copy is consistent with the original
Director of Legal Development
Legal Department signed
Aat Windradi
1............
2............
3............
Total Paid-up Capital
Others
Filled with capital instruments in the form of shares or other instruments that meet the requirements Total Established in Jakarta on 28 April 2025 EXECUTIVE HEAD OF SUPERVISOR OF FINANCIAL SECTOR TECHNOLOGY INNOVATION, DIGITAL FINANCIAL ASSETS AND CRYPTO ASSETS FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA,
HASAN FAWZI signed
APPENDIX II
CIRCULAR OF THE FINANCIAL SERVICES AUTHORITY
REPUBLIC OF INDONESIA
NUMBER 4/SEOJK.07/2025
REGARDING
REPORTING BY FINANCIAL SECTOR TECHNOLOGY INNOVATION PROVIDERS WHO HAVE BUSINESS LICENSES AT THE FINANCIAL SERVICES AUTHORITY
A. MONTHLY REPORT
Partner Details
No Partner Name
Partner Type
(LJK/PJTI/
Others)
Partner Category Partner Location
Description
Service Type
B. MONTHLY REPORT FOR JUNE AND DECEMBER
Related Party Trade Payables
*Filled with the amount of the company's debts to Directors, commissioners, shareholders, and others Third-Party Trade Payables *Filled with the amount of the company's debts to parties related to the business, e.g., service users of LJK Loans - Short-Term Related Party Loans *Filled with the amount of obligations borrowed by the company from Directors, commissioners, shareholders, and others Third-Party Loans *Filled with the amount of obligations borrowed by the company from unaffiliated parties, including debts of Providers Tax Payables *Filled with the amount of the company's debts to government for taxes due Unearned Revenue *Filled with the amount of obligations representing money received by the company from customers before goods or services are delivered Short-Term Lease Liabilities *Filled with the amount of the company's debts to other parties for lease payments not yet made Other Short-Term Liabilities *Filled with current obligations representing the company's debts to other parties that cannot be classified into existing current liability account categories Total Short-Term Liabilities Long-Term Liabilities Trade Payables - Long-Term Related Party Trade Payables *Filled with the amount of the company's debts to Directors, commissioners, shareholders, and others that mature more than 1 year from the balance sheet date Third-Party Trade Payables *Filled with the amount of the company's debts to parties related to the business, e.g., service users of LJK that mature more than 1 year from the balance sheet date Loans - Long-Term Related Party Loans *Filled with the amount of obligations borrowed by the company from Directors, commissioners, shareholders, and others that mature more than 1 year from the balance sheet date
Third-Party Loans
*Filled with the amount of obligations borrowed by the company from unaffiliated parties, including debts of Providers that mature more than 1 year from the balance sheet date Long-Term Lease Liabilities *Filled with the amount of the company's debts to other parties for lease payments that mature more than 1 year from the balance sheet date Post-Employment Benefit Liabilities *Filled with the company's debts to its employees for benefits to be provided in the future after they retire or stop working Other Long-Term Liabilities *Filled with the company's debts to other parties that cannot be classified into existing long-term liability account categories Total Long-Term Liabilities Total Liabilities EQUITY Amount (Rp) Share Capital *Filled with the amount of capital contributed by shareholders to the company Additional Paid-in Capital *Filled with the amount of additional capital contributed by shareholders to the company Retained Earnings Balance Retained Earnings/Undetermined Losses Balance *Filled with the amount of profits retained in the company and current year profit/(loss) to finance operations and investments in the future Undetermined Retained Earnings/Undetermined Losses Balance *Filled with the amount of profits retained in the company and current year profit/(loss) and undetermined use Other Equity *Filled with the balance of equity accounts that cannot be classified into existing other equity account categories Total Equity Operational Revenue Amount (Rp) Revenue from Business as a Financial Sector Technology Innovation Provider *Filled with the amount of the company's revenue according to its business model as a Financial Sector Technology Innovation Provider Other Business Revenue *Filled with the amount of the company's other revenue during a specific accounting period Total Operational Revenue Operational Expenses Amount (Rp) Marketing Expenses *Filled with all costs incurred by the company for marketing its products or services to customers General and Administrative Expenses *Filled with all costs incurred by the company to operate its business in general Salary Expenses *Filled with costs incurred by the company to pay salaries and allowances to its employees Depreciation Expenses *Filled with costs related to the decline in value of the company's fixed assets during a specific accounting period Other Expenses *Filled with the balance of expense accounts that cannot be classified into existing other expense account categories Total Operational Expenses Operating Profit (Loss) Non-Operational Income (Expense) Amount (Rp) Income (expense) from Financial Assets *Filled with income and expenses arising from the ownership of financial assets by the Company Other Non-Operational Income (Expense) *Filled with all income and expenses not related to the Company's main operational activities Profit (Loss) Before Tax Expense Tax Expense Amount (Rp) Income Tax Expense/(Benefit) *Filled with income tax expense paid or accrued by the
company on its profits Current Year Net Profit (Loss) Other Comprehensive Income Amount (Rp) Other Comprehensive Income (expense) *Filled with all income and expense components recognized outside net profit Total Current Year Comprehensive Profit (Loss)
2. OTHER INFORMATION
Financial Sector Technology Innovation Provider Activities Description Amount Total Transactions (Rp) Monthly Total Transactions (Rp) Year-to-Date (Ytd) Total Number of Transactions (Qty) Monthly Total Number of Transactions (Qty) Year-to-Date (Ytd) Total Consumer Hits on Platform User Type Individual User Type Institution Total Users on Platform User Demographics by Region Province Amount Total
Partner Details
No Partner Name
Partner Type
(LJK/PJTI/
Others)
Partner Category Partner Location
Description
Service Type
1. LJK/PJTI/Others Multifinance/P2P
Lending/Others etc.
Consumer Protection
N o
Case Date
Consumer Name
Case Type
Reason for Untreated
IT Incident
No. Date Event IT Incident Handling Status
1.
2.
No. Server Type Ownership Location Description
1. DC/DRC
Workforce
Description Amount
Number of Permanent Employees
Number of Contract Employees
Total Employees
Number of Indonesian Citizens (WNI)
Number of Foreign Citizens (WNA)
Total WNI and WNA Employees
(filled with city name, date, month, and year) Board of Directors
…………................
signature
(Full Name)
For the Interests of the Financial Services Authority Note:
C. ANNUAL BUSINESS PLAN REALIZATION REPORT
b. Finance
This section contains information regarding the financial condition of the Financial Sector Technology Innovation Provider, actual position, and projections for the next 2 (two) years included in the Annual Business Plan. Format for financial realization Component Realization (T) Projection Explanation (T) (T+1) (T+2) Jun Dec Assets Current Assets Non-Current Assets Total Assets Liabilities Short-Term Liabilities Long-Term Liabilities Total Liabilities Equity Share Capital Additional Paid-in Capital Retained Earnings Balance Retained Earnings/Undetermined Losses Balance Undetermined Retained Earnings/Undetermined Losses Balance Other Equity Total Equity Total Liabilities and Equity
Component
Realization
(T)
Projection
(T) (T+1) (T+2) Explanation
Jun Dec
Operational Revenue
Operational Expenses
Operating Profit (Loss)
Non-Operational Income (Expense)
Profit (Loss) Before Income Tax
Income Tax Expense/(Benefit)
Current Year Net Profit (Loss)
Other Comprehensive Income
Current Year Comprehensive Profit (Loss)
Operational Revenue
3. Capital Changes
This section contains the realization of capital changes regarding both capital structure and capital amount. Included in capital changes are the realization of capital additions from existing shareholders, public offerings (initial public offering), rights issues (right issue), issuance of equity-like debt instruments, and other capital additions, and descriptions of ownership changes or replacements (if any), as well as projections included in the Annual Business Plan. Format for capital changes Component Realization (T) Projection T T+1 T+2 Explanation Jun Dec CAPITAL POSITION Shareholders*
1.............
2............
3............
Total Paid-up Capital
Others
Filled with capital instruments in the form of shares or other instruments that meet requirements Total
D. IMPLEMENTATION OF RISK MANAGEMENT AND PRUDENCE No Risk Profile Risk Name Risk Owner Inherent Risk Residual Risk Risk Impact (1-5) Likelihood of risk occurring (1-5) Risk Level (Risk Impact x Likelihood of occurring) Mitigation Plan Risk Risk Impact (1-5) Likelihood of risk occurring (1-5) Risk Level (Risk Impact x Likelihood of occurring)
No Risk Profile Risk Name
Risk Owner
Inherent Risk Residual Risk
Risk Impact
(1-5)
Likelihood of risk occurring
(1-5)
Risk Level
(Risk Impact x
Likelihood of occurring)
Mitigation Plan
Risk
Risk Impact
(1-5)
Likelihood of risk occurring
(1-5)
Risk Level
(Risk Impact x
Likelihood of occurring)
4.
Consumer Data Protection
Risk
5.
Third-Party Service Usage
Risk
6. Cyber Risk
Total
Risk Analysis
Filled with risk analysis descriptions
E. GOVERNANCE REPORT
d. Brief biography of Board of Commissioners, work history in the last five years, Education, and professional degrees e. In the event that during the reporting year there are changes in the composition of Board of Directors and Board of Commissioners members, the previous composition of Board of Directors and Board of Commissioners members must be stated Format for Data on changes in the composition of Board of Directors and Board of Commissioners members No. Name Position Date of Appointment by GMS Date of Dismissal by GMS Etc.
2. Implementation of risk management, compliance, internal audit, external audit, and operational procedures
a. Active supervision by Board of Commissioners and Board of Directors Filled with brief descriptions, for example, ensuring that the Financial Sector Technology Innovation Provider implements good governance b. Sufficiency of policies, procedures, and risk limit determinations Filled with brief descriptions regarding the sufficiency of policies, procedures, and risk limit determinations
c. Sufficiency of risk identification, measurement, monitoring, and control processes
Filled with brief descriptions regarding the sufficiency of risk identification, measurement, monitoring, and control processes d. Risk management information system Filled with brief descriptions regarding the risk management information system e. Comprehensive internal control system Filled with brief descriptions regarding the comprehensive internal control system
3. Handling Conflicts of Interest
Format for handling conflicts of interest occurring in the current year
No. Name and Position Party with
Conflict of Interest
Name and Position
Decision Maker Type of Transaction Transaction Value (millions Rupiah) Description Etc. Brief description of conflicts of interest
4. Feasibility of Annual Business Plan
Brief description regarding capital and liquidity related to targets in the BAP
5. Transparency of Company Financial Conditions
No. Question/Statement
The company implements transparency of financial and non-financial conditions to stakeholders. 1 2 3 4 5 2 The company provides data and information to OJK completely and on time. 1 2 3 4 5 The company has a financial reporting system relied upon for supervision and for the needs of other stakeholders. 1 2 3 4 5 4 The company transparently communicates consumer complaint procedures. Yes No
6. Implementation of control functions for Personal Data Protection and information system security
a. written information system policies and procedures Filled with policies and standard operating procedures b. use of safe and reliable systems, including:
i. security and protection of data confidentiality
ii. model development
iii. fulfillment of certifications, security standards, and/or system reliability
This copy is consistent with the original
Director of Legal Development
Legal Department signed
Aat Windradi
iv. maintenance and enhancement of technology security;
c. implementation of cybersecurity standards
Filled with the company's steps in implementing cybersecurity standards d. data and information security Filled with the company's steps in implementing data and information security e. information system audit implementation Audit Date Party conducting the audit Audit Cost Established in Jakarta on 28 April 2025 EXECUTIVE HEAD OF SUPERVISOR OF FINANCIAL SECTOR TECHNOLOGY INNOVATION, DIGITAL FINANCIAL ASSETS AND CRYPTO ASSETS FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA,
HASAN FAWZI signed
APPENDIX III
CIRCULAR OF THE FINANCIAL SERVICES AUTHORITY
REPUBLIC OF INDONESIA
NUMBER 4/SEOJK.07/2025
REGARDING
REPORTING BY FINANCIAL SECTOR TECHNOLOGY INNOVATION PROVIDERS WHO HAVE BUSINESS LICENSES AT THE FINANCIAL SERVICES AUTHORITY
A. REPORTS RELATED TO CHANGES IN BUSINESS ACTIVITIES To Yth. Executive Head of Supervisor of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets u.p. Head of Department of Regulation and Licensing of Financial Sector Technology Innovation Digital Financial Assets and Crypto Assets Hereby we:
Company Name :
.....................................................................
Company Address :
.....................................................................
City .....
Province .....
Postal Code .....
Company Website
Address :
.....................................................................
Company Address :
.....................................................................
Company Email :
.....................................................................
submit reporting regarding changes in business activities, attached herewith we submit documents consisting of:
B. REPORTS RELATED TO CORPORATE MATTERS REGARDING SHARE OWNERSHIP CHANGES To Yth. Executive Head of Supervisor of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets u.p. Head of Department of Regulation and Licensing of Financial Sector Technology Innovation Digital Financial Assets and Crypto Assets Hereby we:
Company Name : .....................................................................
Company Address : .....................................................................
report that in accordance with the General Meeting of Shareholders on date……………., share ownership adjustments have been made, with the following change data:
Before Changes After Changes
Name
Shareholder
Total Value of Shares (Rp)
(%) Name
Shareholder
Total Value of Shares (Rp)
(%)
Total 100 Total 100 as data completeness, attached herewith we submit articles of association that have been approved by the competent authority to the Financial Services Authority, approved by or notified to the competent authority. We can inform that for these purposes, you can contact Mr./Ms. ..., via email ... or phone number... This report is submitted and for your attention Sir/Madam*), we thank you.
.....,............ 20.....
Sincerely,
Board of Directors of PT*
Stamp Duty
Rp.10.000,-
......................................
(Clear Name and Signature)
*) Strike out what is not necessary
C. REPORT ON CORPORATE GOVERNANCE CHANGES
To
The Executive Head of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Asset Supervision
Attention: Head of the Department of Regulation and Licensing of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets
Hereby we:
Company Name : .....................................................................
Company Address : .....................................................................
report that in accordance with the General Meeting of Shareholders dated……………, a change in management has been carried out, with the following change data:
| Before Change | After Change | ||
|---|---|---|---|
| Position | Name | Position | Name |
| Board of Directors | Board of Directors | ||
| …… | …… | …… | …… |
| Board of Commissioners | Board of Commissioners | ||
| …… | …… | …… | …… |
As supporting data, we hereby submit the Articles of Association which have been approved by the competent authority to the Financial Services Authority, approved, agreed upon, or notified to the competent authority.
We inform you that for this purpose, you may contact Mr./Ms. ..., via email ... or telephone number...
This report is submitted, and for your attention, Sir/Madam*), we express our gratitude.
Sincerely,
Board of Directors of PT*
Stamp Duty
Rp.10,000,-
......................................
(Clear Name and Signature)
*) Strike out what is not necessary
D. REPORT ON CORPORATE GOVERNANCE REGARDING OFFICE ADDRESS CHANGE
To
The Executive Head of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Asset Supervision
Attention: Head of the Department of Regulation and Licensing of Financial Sector Technology Innovation, Digital Financial Assets and Crypto Assets
Hereby we:
Company Name : .....................................................................
Company Address : .....................................................................
City .....
Province .....
Postal Code .....
Company Website Address : .....................................................................
Company Address : .....................................................................
Company Email : .....................................................................
Telephone : .....................................................................
report that our Office has moved to a new address with the following details:
New Address : .....................................................................
Company Email : .....................................................................
Telephone : .....................................................................
Date of Move : .....................................................................
As supporting data, we hereby submit documents consisting of:
This is our report, and for your attention, Sir/Madam), we express our gratitude.
Sincerely,
Board of Directors of PT*
Stamp Duty
Rp.10,000,-
......................................
(Clear Name and Signature)
E. INITIAL NOTIFICATION OF CYBER ATTACK
ITSK ORGANIZER INFORMATION
a. Organizer Name : .....................
b. Head Office Address : .....................
c. Telephone Number : .....................
d. Contact Person Name : .....................
e. Contact Person Telephone Number : .....................
f. Other Authorities/Institutions
Receiving Information (if any)
: .....................
1)
GENERAL CYBER INCIDENT INFORMATION
a. Date and Time of Cyber Incident Occurrence: 2) ..../..../.......... (dd/mm/yyyy), ... : .... (hh:mm) b. Date and Time Cyber Incident Was Discovered:
..../..../.......... (dd/mm/yyyy), ... : .... (hh:mm)
c. Type of Cyber Incident : .................. 3)
d. Attack Point : .................. 4) e. Initial Response by ITSK Organizer Post Cyber Incident : .................. 5) f. Initial Assessment of Cyber Incident Impact on ITSK Organizer : .................. 6)
Notes:
1) Filled with the name of authorities and/or institutions other than the Financial Services Authority that also receive this initial notification report (if any).
2) Filled in case the ITSK Organizer has identified the date and time of the cyber incident occurrence.
3) Contains information regarding the type of cyber incident. Examples: malware, hacking, ransomware, web defacement, denial of services (DoS)/distributed denial of services (DDoS).
4) Contains information regarding the name of the system or network that was attacked or experienced disruption.
5) Contains information regarding the initial handling actions taken by the ITSK Organizer after the cyber incident was discovered.
6) Filled in case the impact of the cyber incident has been identified (cyber incidents can impact among others the ITSK Organizer's products, third parties, the ITSK Organizer's finances, and the ITSK Organizer's reputation).
F. REPORT ON INCIDENTS REGARDING CYBER ATTACKS
REPORTER INFORMATION
ITSK Organizer Name : .....................
Head Office Address : .....................
Telephone Number : .....................
Contact Person Name : .....................
Contact Person Telephone Number : .....................
Date of Initial Notification Submission :…./…/…/ (dd/mm/yyyy) Authority/Institution Receiving : ..................... 1)
GENERAL CYBER ATTACK INFORMATION 2)
a. Date and Time of Cyber Attack Occurrence: 3) …/…./……. (dd/mm/yyyy), ….:… (hh:mm) b. Date and Time Cyber Attack Discovered:
…/…./……. (dd/mm/yyyy), ….:… (hh:mm)
c. Type of Cyber Attack : ..................... 4)
d. Attack Point : ..................... 5) e. Initial Response by Organizer Post Incident : ..................... 6)
ASSESSMENT OF CYBER ATTACK IMPACT ON ITSK ORGANIZER 7)
a. Assessment of Cyber Attack Impact on Availability and Operational Services of ITSK Organizer 8)
............................................................................................
b. Assessment of Cyber Attack Impact on Financials of ITSK Organizer 9)
............................................................................................
c. Assessment of Cyber Attack Impact on Reputation
of ITSK Organizer 10)
............................................................................................
d. Assessment of Cyber Attack Impact on Legal and Compliance Aspects of ITSK Organizer 11)
............................................................................................
e. Assessment of Cyber Attack Impact on Third Parties 12)
............................................................................................
f. Other Impacts of Cyber Attacks That Can Be
Identified by ITSK Organizer
……………….........................................................................
INCIDENT CHRONOLOGY
a. Duration of the cyber attack occurrence. b. Escalation steps of the cyber attack carried out.
c. Mitigation steps of the cyber attack carried out.
d. Recovery steps of the cyber attack carried out. e. Involvement of third parties in mitigation and recovery of the cyber attack. f. Parties receiving information related to the cyber attack (stakeholders, examples: authorities, service partners, and Consumers). g. Supporting information used to identify the cyber attack, if known. (examples: suspicious IP addresses, unusual network traffic, high authentication failure rates, and repeated file requests).
ANALYSIS OF CAUSES OF CYBER ATTACK
a. Attack Source:
1) Party : ..................... 13)
2) Country of Origin : ..................... 14)
3) Attack Motive : ..................... 15)
b. Incident Causative Factors : ...................... 16)
FINAL ANALYSIS
a. Conclusion b. Improvement steps
c. Target time for cyber attack resolution: (dd/mm/yy)
Notes:
1) Filled with the name of authorities and/or institutions other than the Financial Services Authority that also receive this report (if any).
2) Contains information consistent with the information submitted in the initial notification, but may be added to or adjusted with additional information if available.
3) Filled in case the ITSK Organizer has identified the date and time of the cyber incident occurrence.
4) Contains information regarding the type of cyber incident. Examples: malware, hacking, ransomware, web defacement, denial of services (DoS)/distributed denial of services (DDoS).
5) Contains information regarding the name of the system or network that was attacked or experienced disruption.
6) Contains information regarding the initial handling actions taken by the ITSK Organizer after the cyber incident was discovered.
7) In this section, the information provided is additional explanation from the initial assessment already conducted by the ITSK Organizer during the initial notification report of the cyber incident.
8) Filled in case there is an impact on the ITSK Organizer's business, including in relation to the availability and operational services of the ITSK Organizer. Information must at least contain:
a. type of service and/or name of product affected (examples: treasury services, trade finance, cash management, and digital organization services); and b. explanation of the impact that occurred (if more than 1 (one) service and/or product is affected, the explanation is provided for all affected services and products).
9) Filled in case there is a financial impact from the cyber incident. Information must at least contain:
a. what is affected (examples: value or volume of transactions, withdrawals, and liquidity of the ITSK Organizer); and b. explanation of the impact that occurred (if the incident impacts more than 1 (one) item, the explanation is provided for all impacted items).
10) Filled in case there is an impact on the ITSK Organizer's reputation from the cyber incident (example: incident published by media).
11) Filled in case there is an impact on legal and compliance aspects (example: violation of statutory regulations and existence of legal claims from related parties).
12) Filled in case there is an impact on third parties of the ITSK Organizer. Information must at least contain:
a. category of third party (examples: Consumers, service providers, and service cooperation partners); and b. explanation of the impact that occurred (if the incident impacts more than 1 (one) category of partner, the explanation is provided for all impacted partners).
13) Contains information regarding the party conducting the attack or becoming the source of the attack, among others: internal party, external party, or third party (if known).
14) Contains information regarding the country of origin of the attack source (if known).
15) Contains information regarding the motive or purpose of the attack conducted by the perpetrator (if known).
16) Contains a complete explanation of the factors causing the cyber incident at the ITSK Organizer.
17) Contains information regarding steps taken by the ITSK Organizer to prevent similar incidents from occurring in the future.
This copy is consistent with the original
Director of Legal Development
Legal Department signed
Aat Windradi
18) Filled in case the incident has not been fully resolved at the time of submitting the report to the Financial Services Authority.
Established in Jakarta on 28 April 2025
EXECUTIVE HEAD OF SUPERVISION
FOR FINANCIAL SECTOR TECHNOLOGY
INNOVATION, DIGITAL FINANCIAL
ASSETS AND CRYPTO ASSETS
FINANCIAL SERVICES AUTHORITY
REPUBLIC OF INDONESIA,
HASAN FAWZI signed
APPENDIX IV
CIRCULAR LETTER OF THE FINANCIAL SERVICES AUTHORITY REPUBLIC OF INDONESIA NUMBER 4/SEOJK.07/2025 REGARDING REPORTING BY FINANCIAL SECTOR TECHNOLOGY INNOVATION PROVIDERS WHO HAVE BUSINESS LICENSES AT THE FINANCIAL SERVICES AUTHORITY
A. FORMAT FOR REQUEST LETTER FOR USER ID AND PASSWORD OF THE FINANCIAL SERVICES AUTHORITY REPORTING SYSTEM
COMPANY LETTERHEAD
Number :
Date :
Attachments :
Subject : Request for User ID and Password of the Financial Services Authority Reporting System
To
The Financial Services Authority
Attention: Director of Data Reporting
Department of Data Management and Statistics
Radius Prawiro Tower, 14th Floor, Bank Indonesia Office Complex, Jl. MH Thamrin No.2 Central Jakarta 10350
Referring to the Financial Services Authority Circular Letter Number … regarding Reporting by Financial Sector Technology Innovation Providers Who Have Business Licenses at the Financial Services Authority, we hereby, on behalf of:
Company : ______________________________________ Status : Business License
request to obtain a user ID and password for submitting ITSK Organizer Reports as follows:
Name of Report Preparer : ______________________________________ Position : ______________________________________ Email : ______________________________________ Telephone : ______________________________________ Taxpayer Identification Number (NPWP) : ______________________________________
This request is submitted, and for your attention, Sir/Madam, we express our gratitude.
Sincerely,
Board of Directors Member
( )
B. FORMAT FOR REQUEST LETTER FOR CHANGES TO FINANCIAL SERVICES AUTHORITY REPORTING SYSTEM ACCESS
COMPANY LETTERHEAD
Number :
Date :
Attachments :
Subject : Request for User ID and Password of the Financial Services Authority Reporting System
To
The Financial Services Authority
Attention: Director of Data Governance and Development Department of Data Management and Statistics Radius Prawiro Tower, 14th Floor, Bank Indonesia Office Complex JL. MH Thamrin No. 2, Central Jakarta, 10350
Referring to the Financial Services Authority Circular Letter Number … regarding Reporting by Financial Sector Technology Innovation Providers Who Have Business Licenses at the Financial Services Authority, we hereby, on behalf of:
Company : ______________________________________ Status : Business License
request to:
| Position | Description | Before | After |
|---|---|---|---|
| Responsible Board of Directors Member | Name | ||
| Position at ITSK Organizer | |||
| Telephone | |||
| Report Preparer | Name | ||
| Position at ITSK Organizer | |||
| Telephone |
This request is submitted, and for your attention, Sir/Madam, we express our gratitude.
Sincerely,
Board of Directors Member
( )
This copy is consistent with the original
Director of Legal Development
Legal Department signed
Aat Windradi
Established in Jakarta on 28 April 2025
EXECUTIVE HEAD OF SUPERVISION
FOR FINANCIAL SECTOR TECHNOLOGY
INNOVATION, DIGITAL FINANCIAL
ASSETS AND CRYPTO ASSETS
FINANCIAL SERVICES AUTHORITY
REPUBLIC OF INDONESIA,
HASAN FAWZI signed
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
A newer document in RegAlert replaces this one.
“Article 2 (1) ... Appendix II part E of Financial Services Authority Circular Letter Number 4/SEOJK.07/2025 ... is revoked and declared invalid.”
“The legal basis for this Circular Letter of the Financial Services Authority (SEOJK) is: ... and POJK No. 4 of 2025.”
“The legal basis for this Circular Letter of the Financial Services Authority (SEOJK) is: ... POJK No. 29 of 2024”
“In light of the implementation of the Financial Services Authority Regulation Number 3 of 2024 concerning the Implementation of Financial Sector Technology Innovation”
Amended 1 time · last 2026-09-07
More like this from OJK
We email you every new OJK publication the day it's published.
Source: Otoritas Jasa Keuangan (Financial Services Authority) — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated