The Compliance Horizon 2026: Strategic Implications of Indonesia's Core Tax (PSIAP) Migration for Foreign Investment Entities

Executive Summary

Foreign directors of PT PMA companies face three immediate compliance risks under Indonesia's Coretax migration—and organizations that prepared in Q4 2025 are now operating without disruption while others confront NPWP registration delays, reporting gaps, and heightened audit exposure.

• The System Is Live: The Core Tax Administration System (CTAS/PSIAP) launched January 1, 2025, for corporate functions including withholding tax and VAT invoicing. Individual taxpayer SPT filing via Coretax became mandatory for the 2025 tax year, with filing deadlines in March-April 2026.
• Operational Disruptions Are Documented: Temporary difficulties in issuing tax identification numbers (NPWP) for PMA companies and registering personal NPWPs persist during data migration. Companies without pre-migration preparation are experiencing real-time compliance gaps.
• Surveillance Architecture Has Shifted: The Directorate General of Taxes (DGT) now deploys Compliance Risk Management (CRM) capabilities designed to cross-reference SPT filings against third-party data sources. The operational scope of this cross-referencing continues to expand as system integration matures.
• Filing Deadlines Are Imminent: Individual taxpayers must file SPT by March 31, 2026; corporate taxpayers face an April 30, 2026 deadline.

The Verdict: Organizations with historical data discrepancies face elevated audit risk upon filing. The companies that conducted pre-migration reconciliation are operating with confidence; those that delayed are now discovering what the new system surfaces.

What is Indonesia's CoreTax System (PSIAP)?

CoreTax (Sistem Inti Administrasi Perpajakan / PSIAP) is Indonesia's modernized tax administration platform that replaces DJP Online effective January 1, 2025 for corporate functions and 2026 for individual tax filing.

Key differences from DJP Online:

Who must use CoreTax: All Indonesian taxpayers including foreign individuals and foreign-owned companies (PT PMA).

Coretax Deployment Timeline: Understanding Where You Are in the Transition

Before assessing risk exposure, foreign directors must understand the phased rollout of Coretax implementation:

Source: DGT announcements and PMK 81/2024

Implication for Readers: If you are reading this during the March 2026 filing period, the "immediate actions" below should be completed now—before your filing deadline. Companies that completed these steps in Q4 2025 report smoother operations; those acting now face compressed timelines but can still achieve compliance continuity.

The Context: From Siloed Administration to Integrated Data Architecture

Why This Migration Is Happening Now

Indonesia's tax enforcement historically operated within fragmented data architecture. Immigration records, banking activity, corporate filings, and individual tax obligations existed in disconnected systems. The Coretax initiative, formally known as Pembaruan Sistem Inti Administrasi Perpajakan (PSIAP), restructures this architecture fundamentally.

Regulated under Presidential Decree No. 40 of 2018, Coretax is built on Commercial Off-The-Shelf (COTS) solutions designed to render the tax system "easy to navigate, reliable, seamlessly integrated, highly accurate, and unfailingly precise". The system consolidates previously separate applications—e-Faktur, e-SPT, e-Billing, and others—into a single integrated platform.

Strategic Insight: According to official DJP documentation, Coretax was developed to establish "a more modern, credible, and accountable tax authority supported by information technology that meets current digital demands". This represents architectural transformation, not merely interface modernization.

The 21 Business Processes Under Redesign

The scope of transformation extends across virtually every taxpayer interaction:

Important Distinction: The system is designed for comprehensive data integration. The operational deployment of specific integration features—particularly cross-referencing with banking data and other external institutions—is being implemented progressively. Foreign directors should assume integration capabilities will expand throughout 2026 and beyond.

The Three Strategic Exposures for Foreign Capital

Exposure 1: The "Pre-Populated" Liability Trap

The Mechanism: Under Coretax, VAT (PPN) and Withholding Tax (PPh 21/23/26) forms can be pre-filled based on e-Invoices (e-Faktur) and counterparty data submissions. The system processes taxpayer data with the aim of providing "accurate and up-to-date information".

The Risk: Foreign entities can no longer easily reconcile discrepancies at year-end. If a vendor issues an invoice to your PT PMA through the Coretax e-Faktur system, the transaction is recorded in DGT's integrated database. Inconsistencies between your reported inputs and counterparty-reported outputs become visible through the system's cross-referencing capabilities.

The "Zero Reporting" Problem: PT PMAs that historically filed minimal or zero returns while maintaining active operations face elevated exposure. The system's design enables cross-referencing of your declared revenue against:

• VAT invoices issued to you by Indonesian vendors (via integrated e-Faktur)
• Withholding tax certificates filed by your counterparties
• Third-party institutional data (the scope of which continues to expand)

Implication: The compliance strategy of "we'll reconcile during audit" carries higher risk under the new architecture. Proactive data cleansing before filing reduces exposure.

Exposure 2: The Beneficial Owner Visibility Problem

The Mechanism: Coretax is designed to integrate with the Ministry of Law and Human Rights (AHU) database containing Ultimate Beneficial Owner (UBO) declarations. The system architecture links corporate tax liability to declared ownership structures.

The Risk: PT PMAs utilizing informal arrangements face multiple layers of exposure.

Critical Legal Context: So-called "nominee" structures are not merely a tax risk—they are illegal under Indonesian law. The Investment Law (Law No. 25 of 2007) and its implementing regulations prohibit nominee arrangements for foreign investment. The risk extends beyond tax exposure to include:

• Licensing revocation
• Investment permit cancellation
• Potential criminal liability

Foreign directors should understand that Coretax visibility is one dimension of a broader legal exposure that predates this system.

Implication: Directors with any ambiguity in ownership structures should seek legal counsel immediately—not primarily for Coretax compliance, but for fundamental regulatory exposure that the new system may accelerate.

Exposure 3: The Global Minimum Tax Intersection (Primarily Relevant for Large MNEs)

The Mechanism: Indonesia's Coretax implementation coincides with global enforcement of the OECD Pillar Two Income Inclusion Rule (IIR) in 2026. The global minimum effective tax rate (ETR) of 15% applies to multinational enterprises with consolidated revenue exceeding €750 million.

Scope Clarification: This exposure applies to a specific subset of PT PMAs. Most foreign-owned entities in Indonesia fall well below the €750 million threshold. For smaller PT PMAs, the Pillar Two analysis is informational context rather than direct exposure.

For In-Scope MNEs: The transparency features of Coretax mean effective tax rate calculations become more visible to both Indonesian authorities and foreign tax administrations. Transfer pricing arrangements, intercompany transactions, and profit allocations surface through the integrated system.

Key Terms Defined:

• IIR (Income Inclusion Rule): Mechanism requiring parent jurisdictions to impose "top-up tax" if a subsidiary's effective tax rate falls below 15%
• QDMTT (Qualified Domestic Minimum Top-up Tax): Indonesia's potential domestic mechanism to collect minimum tax before foreign jurisdictions can claim it
• Arm's-length benchmark: The pricing standard requiring related-party transactions to reflect market rates between unrelated parties

Implication for Large MNEs: Administrative efficiency—not fiscal incentives—becomes the competitive differentiator. For smaller PT PMAs, the primary exposures remain Exposure 1 (pre-populated liability) and Exposure 2 (beneficial owner visibility).

The Compliance Risk Management Framework

How DGT's Risk Profiling Works

The DGT's CRM module is designed to classify taxpayers into risk categories based on behavioral analysis and data cross-referencing.

Analytical Framework: Based on publicly available DGT guidance and tax practitioner analysis, the risk classification approach can be understood through a tiered model:

Important Caveat: The specific taxonomy and classification thresholds used by DGT are not publicly documented in detail. The framework above represents an analytical interpretation based on DGT's stated objectives of using CRM to "identify taxpayer compliance risk profiles based on Tax Notices (SPT) compared to third-party data". Individual taxpayer classifications are determined by DGT algorithms and official review processes.

On SP2DK Issuance: While CRM-driven risk profiling accelerates the identification of potential discrepancies, SP2DK (Surat Permintaan Penjelasan atas Data dan/atau Keterangan—formal clarification request letters) are authorized by DGT officials. The system enables faster targeting; human authorization remains part of the issuance process based on current procedures.

The Pre-Migration Governance Framework

Phase 1: Immediate Actions (Complete Before Filing Deadline)

Operational Note: Unlike DJP Online, Coretax does not require an EFIN for verification. Taxpayers verify accounts using registered email addresses or phone numbers. Directors should confirm these details are current and accessible.

Phase 2: Pre-Filing Reconciliation (Before April 30, 2026 Corporate Deadline)

Phase 3: Strategic Positioning (Ongoing)

The Regulatory Foundation

Key Legal References

Note: Foreign directors should monitor pajak.go.id for regulatory updates. The government has indicated supporting regulations continue to be finalized to "facilitate the operation of the core tax system".

JCSS Strategic Analysis

Assessment: The Coretax migration represents an inflection point for Indonesian tax compliance. For organizations with clean historical positions, the system offers improved processing speed, reduced administrative burden, and potential audit probability reduction. For those with legacy gaps—whether in documentation, beneficial ownership clarity, or historical filing consistency—the integrated architecture creates exposure that previously remained fragmented across disconnected systems.

The Positioning Reality: As DGT's own published analysis indicates, the focus for tax authorities and taxpayers alike is "understandably fixed on the migration of data, the new interface, and the procedural shifts that CTAS brings." Organizations that treated 2025 as a year of proactive preparation—rather than reactive waiting—now operate with structural advantage.

What Distinguishes Prepared Organizations:

JCSS Methodology: Our Coretax Readiness Diagnostic applies a three-phase assessment framework: (1) Registration and access verification, (2) Historical data reconciliation against current system visibility, and (3) Forward positioning for CRM classification optimization. This methodology reflects our experience advising foreign-invested entities through Indonesia's previous tax administration transitions and our ongoing engagement with regulatory developments.

Next Steps: The Coretax Migration Assessment

Filing deadlines are imminent. Foreign directors managing PT PMA entities require clarity on:

1. Registration Status: Has your NPWP successfully migrated? Are director credentials active in the new system?
2. Historical Position: What does your TAM dashboard reveal about consolidated obligations?
3. Documentation Sufficiency: Does your supporting documentation withstand the transparency the new architecture provides?
4. Strategic Positioning: How does your compliance history translate under the CRM framework?

The organizations that prepared are filing with confidence. Those that delayed are managing compressed timelines and discovering what the integrated system now surfaces.

JCSS conducts Coretax Readiness Diagnostics for foreign-owned entities in Indonesia. Our Tax Governance Team assesses specific exposure to the PSIAP migration—including historical data reconciliation, transfer pricing documentation review, and compliance positioning analysis.

Schedule a Coretax Migration Assessment to address your compliance positioning before the April filing deadline.

Don't wait for the SP2DK clarification request. Understand your position before filing.

Endnotes on Methodology

This strategic briefing distinguishes between three categories of information:

1. Confirmed operational features: Capabilities documented as live in DGT announcements and PMK 81/2024
2. Designed system capabilities: Features described in architectural documentation that are being deployed progressively
3. Analytical interpretation: JCSS assessment of implications based on stated DGT objectives and system design

Where specific claims require attribution, source references are provided. The CRM risk classification framework presented reflects analytical interpretation of DGT's stated compliance monitoring objectives rather than formally published taxonomy.

This briefing reflects conditions as of early March 2026. Regulatory guidance continues to evolve; foreign directors should consult qualified advisors for entity-specific analysis.