This nonprofit website design Indonesia service builds websites for ormas (civil society organisations under Indonesian law), NGOs, communities, associations, professional bodies, and alumni associations. Each site carries your profile, a legal status visitors can verify, programmes, an events calendar, member sign-up, and reports for the public. A donation page goes up only once the permit exists. The accounts and the domain belong to the group, not to one person. So the website stays in good hands when the board changes. I build it myself, as a website engineer and technical lead.
In short
- An honest legal status page, whether you are an incorporated association (perkumpulan) or foundation (yayasan), an ormas holding an SKT, or a community that has not incorporated yet.
- A transparency page, updated each period, for member dues, donations, and annual reports.
- A membership form that asks only for what it needs, with consent that states the purpose and how long data is kept.
- An activity archive per event, which also becomes raw material for your own reports.
- A structure that meets the Google Ad Grants website policy, if you are eligible.
- One build fee, running costs of a domain plus a server if you choose one, and free malware cleanup for 3 months. Start with the form on the homepage.
Organisations are judged by what people can check
According to Antara, the World Giving Index 2024 named Indonesia the most generous country for the seventh year running. The 2025 report used a new method and placed Indonesia 21st out of 101 countries. PIRAC (Public Interest Research and Advocacy Center) named public trust in charities as a key factor, as Antara also reported.
There is no shortage of organisations, either. In Jakarta alone, the provincial Kesbangpol (the agency for national unity and politics) counts more than 32,000 ormas, although not all of them report officially. Prospective members, donors, partners, and journalists tell one group from another by what they can verify for themselves: the legal status, the board, the activities that really took place, and the financial reports.
A legal status written exactly as it stands
Law 17/2013 on Civil Society Organisations, amended by Law 16/2017, recognises ormas with and without legal entity status. An incorporated ormas takes one of two forms. It is either an association (perkumpulan), which is built on members, or a foundation (yayasan), which has no members. Article 15(3) says these do not need an SKT (surat keterangan terdaftar, a certificate of registration). An unincorporated ormas registers with an SKT, which is valid for five years under Home Affairs Ministry Regulation 57/2017.
A community that has not registered can still operate lawfully, as long as it breaks no law. Hukumonline explains this in its note on the Constitutional Court ruling about ormas registration. The catch is that an unregistered group does not get services from the government.
The websites I build for these groups describe that status as it is. An association or foundation lists the number of its ratification decree from the Ministry of Law. It also links to the association profile search on AHU, the ministry's general legal administration service, or to the foundation search. An ormas with an SKT shows the number and the date it expires. A community that is not incorporated just says so. That is nothing to hide. Honesty is itself a reason to trust you.
Transparency: reports the public can actually read
Article 21 of Law 17/2013 requires an ormas to manage its money in a transparent and accountable way. Article 38(2) is even firmer. An ormas that raises donations from the public must announce its financial report to the public at regular intervals.
For foundations, Article 52 of Law 28/2004 requires a summary of the annual report on the notice board of the foundation's office. Some foundations face more. If a foundation receives Rp500 million or more in aid in a year, or holds assets of Rp20 billion or more, a public accountant must audit its report. The summary must then appear in a newspaper.
The transparency page shows dues and donations per period, the annual report summary, and the full report as a download. The summary sits on the page as text, with the PDF as an extra. It is then easy to read on a phone, and search engines can find it. The treasurer keeps it current through the panel.
Public donations: the permit first, then the donate button
Asking the general public for money requires a PUB permit (pengumpulan uang atau barang, a permit to collect money or goods). Social Affairs Ministry Regulation 8/2021, amended by Regulation 8/2024, sets out who applies: an organisation with legal entity status. The collection itself may run through online services. A report on the collection is due within 30 days after it ends. If the proceeds pass Rp500 million, a public accountant has to audit it as well.
The order matters. The PUB permit number and its validity period appear on the website before any bank account or donate button does. A community that is not incorporated does better to keep to member dues than to run open fundraising. Religious institutions that also handle zakat and waqf work under other rules, and I cover them in the article on websites for pesantren and foundations.
The board list and the logo: consent and resemblance
Plenty of organisations list a public figure or an official as a patron or adviser. Article 11(2) of Home Affairs Ministry Regulation 57/2017 calls for the consent of every official or figure named in the board structure. On the website, then, a name appears only after that person has agreed in writing. Ask first, then publish.
The logo needs a check too, before it goes large on the home page. Article 57(c) of Law 24/2009 bans association or organisation emblems that match or resemble the Garuda Pancasila, the national emblem. Article 59(1) of Law 16/2017 bars an ormas from using a name, emblem, or attribute that is the same as a government body's. It also bars one that is substantially similar to another ormas or a political party.
The board page is arranged by term of office. When the members' assembly (musyawarah) elects a new board, the previous line-up stays on as an archive. The website accounts and the admin email run on the group's own address, never on the chair's personal inbox.
Events and an activity archive that double as reports
Every activity gets its own entry: name and type, venue, date, photos, and a short summary of the outcome. The archive helps members who could not come, and partners who want to see a track record before they commit. An ormas holding an SKT must file an activity report every six months through SIORMAS, the ministry's ormas information system. That duty sits in Articles 39 and 40 of Home Affairs Ministry Regulation 57/2017, and the archive on the website makes the report quicker to compile.
One detail worth knowing: the special event display in Google results, known as the Event rich result, is not yet available in Indonesia. So an events page has to earn its value from what it says. People can still find it on Google, and AI answers such as AI Overviews, ChatGPT, and Perplexity can quote it.
Membership: a short form and clear consent
Law 27/2022 on Personal Data Protection covers groups whether or not they are incorporated. Even a small community falls under it. Where processing rests on consent, Article 21 requires telling people the purpose, the kinds of data, and how long the data is kept. Article 46 requires written notice within 3 x 24 hours if a breach occurs.
Collect less, and there is less to lose. The member form on websites I build asks for a name, contact details, city, and graduating class or profession. A consent box then says what the data will be used for. It never asks for a photo of an ID card (KTP) or for health history. Applicants under 18 need a parent's consent, as Article 25 requires.
A public member or alumni directory lists only those who agree to be listed, with no phone numbers or home addresses. Members pay dues by bank transfer to the group's account, and questions go through WhatsApp chat or email. A membership system with logins and automatic dues billing is worth building only once you have at least one admin and chat can no longer keep up. It costs far more, so take your time. I weighed a similar choice in the article on a catalogue store that takes orders on WhatsApp.
What Google for Nonprofits and Ad Grants expect from the website
In Indonesia, Google for Nonprofits is open to incorporated foundations and associations. It is also open to ormas registered with the Ministry of Home Affairs (Kemendagri) or a regional government. Members can apply for Google Ad Grants, which gives nonprofits advertising credit. The Ad Grants website policy asks for a domain you own, HTTPS on every page, a clear mission, and original content. It also wants an address with a registration number or an annual report, and no AdSense ads.
The websites I build carry home, about, mission, programme, and contact pages as real text, without leaning on PDFs. Approval is still Google's call. I do not promise it.
The .or.id domain, Google Maps, and speed
PANDI, Indonesia's domain registry, says a .or.id domain can be registered with a notarial deed. A statement letter from the group itself, plus an officer's ID card, also works. So a community without a deed qualifies too. A domain of your own looks more trustworthy than a free subdomain or a link in a social media bio.
Google Business Profile is meant only for places people can visit, with signage and staff during opening hours. A group whose secretariat works like that can set up a profile and post its events there. A community with no secretariat should leave it alone. The website is also built to pass Core Web Vitals. Using the same approach, this site scored 94 on Lighthouse mobile on 12 October 2026.
Tracking, only if the organisation advertises
A group running Ad Grants or paid ads can measure three useful actions. They are member sign-ups that were sent, taps on the WhatsApp button, and clicks through to the donation page. The tags belong to your own ad account, and they stay off until the visitor gives consent. No ads, no trackers.
Security, and free malware cleanup for 3 months
A hacked website can start serving online gambling pages or fake donation links under your group's name. Members feel the damage to trust at once. The websites I build are secured to the same standard as this site, which earned an A+ on securityheaders.com and Mozilla HTTP Observatory on 12 October 2026. Anyone is free to repeat those tests. How the protection works stays off public pages, so it never doubles as a map for intruders.
If malware gets in during the first 3 months after launch, I remove it without charge. That period is printed on the proof of payment, and other packages run from 1 to 6 months. I delete the malicious code, put the files back from a backup, and close the hole in the website I handed over. It takes the form of a cleanup service, not compensation.
When the guarantee runs out, any cleanup is a fresh job, and a severe case can cost tens of millions of rupiah. Some things sit outside the guarantee: passwords shared between board members, infected devices, and changes made by other people. Outages at your server or domain provider are excluded too. So are components left to age after the guarantee lapses without renewal. The terms page sets out the details. I can give this guarantee because cleaning malware out of websites is part of my everyday work.
Cost: paid once, light on the organisation's funds
You pay for building the website once, over several stages, with a written breakdown that the treasurer can bring to a board meeting. After launch, the recurring cost is the domain, plus a server if you pick one. A website for a profile and events rarely needs a monthly server.
Support after handover is your choice. If you take it, it covers fixes, component updates, and limited help. Events, the board list, and reports are updated by the board through the panel. You may later want an English version for international partners, or a page for each regional branch so that local chapters can post their own events. I build those additions at a special rate.
Ready to use in the organisation's name; source code if needed
What the organisation receives is a ready-to-use website. That means the files live on its domain, with the domain and accounts in its name, plus a management panel and handover documents. The board can shift the website to another hosting provider whenever it likes. If someone else takes over the management, my access is removed and the site carries on as before.
The source code is the set of project files used to rebuild the website from the ground up. It is not in the default package, and for a nonprofit that is a good thing, since it keeps the price down. Content is still edited through the panel, and my support applies to the version I delivered. Source code becomes useful when volunteers who code join your ranks, or when you plan your own membership system. It carries a separate and much higher price. Sometimes it cannot be handed over at all, because the website includes licensed components.
How the board chooses: AI yourself, an unclear agency, a free template, or an engineer?
| Consideration | Building it yourself with AI | An agency with no clear accountability | A free hosting template | Built by an engineer (this service) |
|---|---|---|---|---|
| Legal status | "Official organisation" with no number | Not discussed | Nothing | SK or SKT number, link to the AHU search |
| Donations | A donate button with no permit | Sometimes added without asking | A stock donation block | Added after the PUB permit, with its number |
| Member data | A form that asks for an ID card | Depends | The built-in form | Only what is needed, with clear consent |
| Change of board | Accounts on someone's personal email | Domain in the agency's name | A personal account | Organisation accounts, an archive per term |
| Security | Nobody keeps watch | Untested | Updated alongside thousands of other sites | Tested with public tools, 3 months of free cleanup |
| Yearly cost | AI tool and builder subscriptions | A monthly retainer | Free until you need a feature | The domain, plus a server if chosen |
AI can put a website like this together in an hour. It also tends to add claims of being "official", the names of public figures, or a donate button. It checks no permits along the way. I have picked apart errors like these in the case of an online store built entirely by AI. An agency with no clear accountability often registers the domain under its own name. Once the contract ends, you lose your own address. A free template can hold a single page, but nobody designed it for board archives, transparency, or membership.
Who is behind this nonprofit website design service?
I, Dicky Ibrohim, a website engineer and technical lead, run this nonprofit website design service myself. My background is on the about page. I build websites and applications, repair the ones that break, and clean up the ones infected with malware. Over the years those jobs have added up to thousands of cases. AI speeds up the repetitive parts, and then I test the result myself, down to sending the member form until it reaches the secretariat's inbox.
I am not a legal adviser to organisations, and I am not an accountant. The legal status, the board line-up, the financial reports, and the PUB permit all come from you. Material I supply is licensed to you. You vouch for the photos and text you provide.
Process: from the board meeting to launch
- Tell me about your organisation through the form on the homepage: what kind of organisation it is, its legal status, and what the website should achieve.
- A written offer comes back to you in one or two business days. It lists the pages, the schedule, the cost of each stage, server needs, the malware guarantee period, and what support covers.
- A short interview with the secretary or the communications lead about programmes, activities, membership, and the reports that should be public.
- Text and design: I draft both, and the board reviews them, with extra care on the legal status page and the board list.
- Testing on a phone and a laptop: the member form, the consent box, and the WhatsApp button are tried until each message arrives.
- Launch, followed by the handover of access, ownership documents, and a guide for whoever serves on the next board.
What the organisation needs to prepare
- The official name, the legal status, the ratification decree or SKT number, and the secretariat's address.
- The vision, mission, work programme, and the board line-up for the current term.
- Written consent from each patron or adviser whose name will appear.
- A list of activities with photos, and an annual report or financial summary if one exists.
- The PUB permit number if you want to accept donations, plus the organisation's email and WhatsApp number.
Eight questions before choosing who builds your organisation's website
- In whose name are the domain and accounts? (The organisation's, not a single board member's.)
- Does the legal status appear with its number? (Yes, with a link to the official search where one exists.)
- Can a donate button go up right away? (Only after the PUB permit is issued.)
- What does the member form ask for? (Name, contact, city, and graduating class or profession.)
- What happens when a new board takes over? (The old line-up goes into the archive, and the accounts stay with the organisation.)
- What if malware gets into the website? (I clean it up for free within 3 months of launch, as stated on the proof of payment.)
- Which costs recur? (The domain, and a server only if you choose one.)
- Can a membership system with logins come later? (Yes, at a special rate.)
First step: tell me about your organisation
Members, donors, and partners trust an organisation when its legal status is clear and its board is made of real people. They also look for activities on record and reports anyone can read. This nonprofit website design service puts all of it on one website, held in your group's own name.
Tell me about your organisation through the form on the homepage, or write to hello@dickyibrohim.com. My reply will suggest a set of pages, break the cost down by stage, and estimate when the site can go live.
Frequently asked questions
How much does a nonprofit website cost?
The build is paid once, in stages, with a written breakdown you can bring to a board meeting. The only recurring cost is the domain, plus a server if you choose one. The amount depends on the number of pages and the membership features; I send it after you fill in the form on the homepage.
What is the difference between an ormas, an association, and a foundation?
Associations (perkumpulan) and foundations (yayasan) are the incorporated forms of an ormas, a civil society organisation under Indonesian law. An association is built on members, while a foundation has none. An ormas without legal entity status registers with a registration certificate (SKT).
Does a community need legal entity status to have a website?
No. A community can have a website and a .or.id domain with a statement letter from the organisation. What matters is describing its status honestly and not opening public donations without a permit.
Does every ormas need an SKT?
An incorporated ormas does not need an SKT. An unincorporated ormas that has not registered may still carry out its activities as long as it breaks no law, but it does not receive services from the government.
Can a community accept donations through its website?
Collecting money from the general public requires a PUB permit (a permit to collect money or goods), and only an incorporated organisation can apply for one. A community without legal entity status is better off sticking to member dues.
How should an organisation show its financial reports?
On the transparency page, as a short text summary of dues and donations per period, plus the full report as a download. An ormas that raises donations from the public is required to announce its financial report regularly.
Is an online member registration form safe?
It is safe when it collects only what is needed: name, contact, city, and graduating class or profession, with consent that states the purpose and how long the data is kept. It does not ask for a photo of an ID card or for health data.
Can the website be used for Google Ad Grants?
The website is built to follow the Ad Grants website policy, for example a domain the organisation owns, HTTPS, a clear mission, and programme and contact pages. Eligibility and approval are still Google's decision.
Does the organisation receive the source code?
The organisation receives a ready-to-use website on its own domain, with a panel and a guide for the board, and it can move to any hosting. The source code is a separate option that costs more and is not always available; the offer states its status.
What if the organisation's website gets malware?
Within 3 months of launch, as noted on the proof of payment, the cleanup is free; other packages give 1 to 6 months. It takes the form of a cleanup service, not compensation, and the details are on the terms page.
