Web Hosting Company Registration Nepal

28 May

What Is Web Hosting Company Registration Nepal?

Web Hosting Company Registration Nepal refers to the formal process by which a business entity providing website hosting, domain registration, cloud storage, and related digital infrastructure services is incorporated under Nepalese law and listed with the Department of Information Technology. Under the Companies Act, 2063, a web hosting company may be registered as a private limited company, a public limited company, or a foreign company branch. Additionally, the Data Center and Cloud Services (Operation and Management) Directive, 2081 (2025), issued under Section 79 of the Electronic Transactions Act, 2063, mandates that all data center and cloud service providers, including web hosting companies operating server infrastructure, must be listed with the Department of Information Technology before commencing services. For IT entrepreneurs and foreign investors seeking to enter Nepal's growing digital infrastructure market, understanding the legal architecture, capital requirements, and sector-specific compliance obligations is essential. This guide has been prepared to explain every stage of the procedure in a manner that is both legally accurate and practically actionable. CorporateNp is recognized as a trusted service provider for web hosting company registration and IT compliance in Nepal.

Legal Framework Governing Web Hosting Company Registration Nepal

Multiple statutes and regulations are applied to govern the establishment and operation of web hosting companies in Nepal. The primary legislation is the Companies Act, 2063 (2006), which establishes the incorporation requirements and corporate governance standards. The Electronic Transactions Act, 2063 (2008) provides the legal basis for digital services, electronic signatures, and data protection. The Data Center and Cloud Services (Operation and Management) Directive, 2081 (2025) mandates compulsory registration of all cloud and hosting service providers with the Department of Information Technology. The Information Technology Policy, 2072 (2015) establishes the strategic framework for IT sector development. The National Cyber Security Policy, 2078 (2021) prescribes security standards for data handling. The Telecommunications Act, 2053 (1997) governs internet service provision where hosting companies also provide connectivity. The Foreign Investment and Technology Transfer Act, 2075 (2019) permits 100% foreign ownership in IT services with no minimum capital requirement. The Income Tax Act, 2058 (2002) imposes corporate tax at 25%, though IT exports may qualify for tax rebates. Together, these laws create a comprehensive regulatory system through which Web Hosting in Nepal is administered.

Legal Framework Summary Table

Legislation	Relevance to Web Hosting Registration
Companies Act, 2063	Company incorporation and corporate governance
Electronic Transactions Act, 2063	Legal basis for digital services and data protection
Data Center and Cloud Services Directive, 2081	Mandatory DoIT listing for hosting providers
Information Technology Policy, 2072	Strategic IT sector development framework
National Cyber Security Policy, 2078	Security standards for data handling
Telecommunications Act, 2053	Internet service provision regulation
FITTA, 2075	Foreign investment with zero minimum capital for IT
Income Tax Act, 2058	Corporate tax and export rebate provisions

Types of Web Hosting Businesses Recognized in Nepal

Four primary categories of web hosting and related digital infrastructure businesses are recognized under Nepalese law. Each category is subject to distinct registration and compliance requirements.

Shared Web Hosting Provider

Offers shared server resources to multiple clients on a single server
Lowest capital and infrastructure requirements
Suitable for entry-level entrepreneurs and small agencies
Requires DoIT listing if operating data center infrastructure
May operate through reseller arrangements without direct DoIT listing

Virtual Private Server Provider

Offers partitioned server resources with dedicated allocations
Moderate infrastructure requirements
Requires proper data center facilities or colocation arrangements
DoIT listing is mandatory if operating own data center
Higher technical expertise required for server management

Dedicated Server and Colocation Provider

Offers physical server hosting and rack space rental
Significant infrastructure investment required
Mandatory DoIT listing as data center operator
Requires Tier-rated data center facilities
Fire safety, power backup, and physical security systems mandatory

Cloud Services and Infrastructure Provider

Offers scalable cloud computing, storage, and platform services
Highest capital and technical requirements
Mandatory DoIT listing as cloud service provider
Must comply with information security and IT service management standards
Business continuity planning and disaster recovery mandatory

Business Type Comparison Table

Business Type	Infrastructure Level	DoIT Listing Required	Capital Requirement	Technical Complexity
Shared Hosting	Low	Conditional	NPR 100,000+	Low
VPS Provider	Moderate	Conditional	NPR 500,000+	Moderate
Dedicated/Colocation	High	Mandatory	NPR 5,000,000+	High
Cloud Services	Very High	Mandatory	NPR 10,000,000+	Very High

Eligibility Criteria for Web Hosting Company Registration Nepal

Specific eligibility conditions must be satisfied before a web hosting company can be registered and listed in Nepal.

Company Structure Requirements

The company must be incorporated as a private limited company, public limited company, or foreign company branch under the Companies Act
The memorandum of association must expressly include web hosting, cloud services, data center operations, or related IT infrastructure services as primary objectives
Minimum authorized capital for domestic private limited companies is NPR 100,000 with at least 10% paid-up
For foreign investors in IT services, no minimum capital requirement applies under FITTA

Technical Personnel Requirements

At least one technical director or manager with demonstrated expertise in server administration
Network security specialists are recommended for data center operations
Compliance officer appointment is mandatory for DoIT-listed providers

Infrastructure Requirements

Registered office address in Nepal is mandatory
Physical server infrastructure or colocation agreements for hosting operations
Reliable internet connectivity with redundant connections
Uninterruptible power supply systems for critical operations
Fire safety and physical security measures for data center facilities

Promoter and Director Eligibility

All promoters and directors must be of legal age and sound mind
Foreign nationals may serve as directors subject to work permit requirements
No person convicted of cybercrime or offenses involving moral turpitude may serve as director
Technical qualifications are recommended though not always mandatory for basic registration

Step-by-Step Web Hosting Company Registration Nepal Process

The procedure for Web Hosting Company Registration Nepal involves sequential stages across multiple government agencies. The process is described below in the order in which it is typically completed.

Stage 1: Company Incorporation

Step 1: Reserve Company Name

An online name reservation application is submitted through the OCR portal at ocr.gov.np
The proposed name should reflect the technology and hosting nature of the entity
Names typically include terms such as Host, Cloud, Tech, Solutions, or Digital
Name reservation is generally approved within 1 to 3 working days
The reservation remains valid for 35 days

Step 2: Draft MOA and AOA

The Memorandum of Association specifies web hosting, cloud services, domain registration, and related IT infrastructure objectives
The Articles of Association provide for:
Board composition and director appointment
Share transfer restrictions
Compliance officer appointment
Data protection and privacy provisions
Business continuity procedures

Step 3: Submit Incorporation Documents to OCR

Required documents include:
Name reservation approval
MOA and AOA signed by all promoters
Notarized citizenship certificates of promoters
Passport-sized photographs of promoters
Office rent agreement or ownership documents
Ward office recommendation letter
OCR verification and approval typically takes 3 to 7 working days

Step 4: Obtain PAN and Tax Registration

Permanent Account Number is registered at the Inland Revenue Department
Tax clearance certificate is obtained
VAT registration is completed if annual taxable turnover exceeds NPR 5 million for goods or NPR 2 million for services

Step 5: Ward Office Business Registration

The company is registered at the local Ward Office where the registered office is located
A trade license or business operation certificate is obtained
Fees vary by municipality, typically ranging from NPR 5,000 to NPR 15,000 annually

Stage 2: Department of Information Technology Listing

Step 6: Determine Listing Category

Companies operating shared hosting through reseller arrangements may not require DoIT listing
Companies operating own servers, data centers, or cloud infrastructure must obtain DoIT listing
Separate applications are required for data center and cloud service listings if both are offered

Step 7: Prepare DoIT Application

The application is submitted to the Department of Information Technology under the Ministry of Communication and Information Technology
Required documents for data center listing include:
Certificate of incorporation of company
Security and privacy policy of the organization
Business continuity plan details
IP pool details available in the company's name
Fire safety compliance certificate
Building completion certificate
Map location of the data center
Data center tier classification details
Technical manpower details
Physical security procedures
High-level electricity design
Information security standard certificates for both primary and disaster recovery sites
Required documents for cloud service listing include:
Certificate of incorporation
Security and privacy policy
Business continuity plan
IP pool details
Technical manpower details
Data center location map where cloud service is operated
Agreement with the data center if using third-party facilities
ISP/NSP affiliation details
Information security standard certificates
Information technology service management standard certificates

Step 8: Submit Application and Undergo Inspection

The complete application is submitted to DoIT
DoIT officials conduct document verification
Physical inspection of data center facilities is conducted
Additional documents may be requested during the review process

Step 9: Obtain DoIT Listing Certificate

Upon satisfactory verification and inspection, DoIT issues the listing certificate
The certificate is typically issued within one month of complete application submission
Listed providers must update their details annually by the end of Poush (mid-January)

Stage 3: Additional Compliance

Step 10: Obtain ISP License if Providing Connectivity

If the web hosting company also provides internet connectivity services, an ISP license must be obtained from the Nepal Telecommunications Authority
Three categories of ISP licenses are available:
National ISP: NPR 50 million minimum investment, NPR 300,000 license fee, valid for 10 years
Regional ISP: NPR 20 million minimum investment, NPR 200,000 license fee, valid for 10 years
Local ISP: NPR 5 million minimum investment, NPR 100,000 license fee, valid for 5 years

Step 11: Implement Security and Compliance Systems

Information security management systems are implemented
Data protection and privacy policies are enforced
Annual security audits are arranged
Compliance officer is appointed or services are obtained from authorized institutions

Documents Required for Web Hosting Company Registration Nepal

Proper documentation is essential for the successful registration and listing of a web hosting company. The following documents are required at various stages.

Company Incorporation Documents

Certificate of incorporation from OCR
Memorandum and Articles of Association
Board resolution authorizing business operations
PAN registration certificate
Tax clearance certificate
Ward office business registration certificate

DoIT Listing Documents for Data Center Operators

Certificate of incorporation
Security and privacy policy
Business continuity plan
IP pool details
Fire safety compliance certificate
Building completion certificate
Data center location map
Tier classification details
Technical manpower details
Physical security procedures
High-level electricity design
Information security standard certificates for DC and DR environments

DoIT Listing Documents for Cloud Service Providers

Certificate of incorporation
Security and privacy policy
Business continuity plan
IP pool details
Technical manpower details
Data center location map
Data center agreement if using third-party facilities
ISP/NSP affiliation details
Information security standard certificates
IT service management standard certificates

ISP License Documents if Applicable

Completed ISP license application form
Company registration certificate
MOA and AOA
PAN/VAT registration
Tax clearance certificate
Detailed business plan
Technical proposal and network diagram
Financial statements and capital proof
CVs of key technical personnel
Network security and data protection plan

Documents Summary Table

Document Category	Specific Documents	Submitting Authority
Company	Incorporation certificate, MOA, AOA, PAN, tax clearance	OCR, IRD
DoIT Data Center	Security policy, BCP, IP pool, fire safety, tier details, IS certificates	Department of Information Technology
DoIT Cloud Service	Security policy, BCP, IP pool, DC agreement, ITSM certificates	Department of Information Technology
ISP License	Business plan, technical proposal, financial proof, security plan	Nepal Telecommunications Authority

Data Center and Cloud Services Directive 2081 Compliance

The Data Center and Cloud Services (Operation and Management) Directive, 2081 (2025) has introduced mandatory compliance requirements for web hosting companies operating data center or cloud infrastructure.

Mandatory Listing Requirement

All data center and cloud service providers must be listed with DoIT before offering services
Existing operators were required to apply for listing within 6 months of the directive's issuance on January 28, 2025
New providers must obtain listing before commencing operations
Separate applications are required for data center and cloud service operations

Tier Classification System

Data centers are classified into four tiers based on infrastructure and service availability:

Tier	Uptime	Max Downtime/Year	Power Backup	Redundancy	Suitable For
I	99.671%	≤ 28.8 hours	12 hours	None	Startups, small businesses
II	99.749%	≤ 22 hours	12-24 hours	Partial	Small to medium businesses
III	99.982%	≤ 1.6 hours	24-48 hours	N+1	Banks, government, large enterprises
IV	99.995%	≤ 26.3 minutes	≥ 48 hours	2(N+1)	Critical infrastructure

Government Data Storage Requirement

Data centers storing government data must achieve Tier III or higher classification
Government agencies are mandated to use listed data center and cloud service providers
Security agencies must use services operated by the Integrated Data Management Center

Operational Compliance Obligations

Equal access opportunities must be provided to all customers
Necessary security standards must be adopted for data storage
Service continuity must be ensured
Unauthorized access must be reported immediately to regulatory authorities
Compliance officer must be appointed or services obtained from authorized institutions
Annual security audits must be conducted
Customer data must be protected through bilateral agreements
Infrastructure transfer assistance must be provided upon termination

Delisting Procedures

Providers may be delisted for non-compliance, data misuse, company dissolution, or voluntary withdrawal
15 days are granted to submit written explanation before delisting
Delisting is executed within 7 days if explanation is inadequate
Details are published in national newspapers and on DoIT website
Customers must transfer services from delisted providers

Foreign Investment in Nepal's Web Hosting Sector

Foreign participation in Nepal's web hosting and IT infrastructure sector is expressly encouraged under current investment policy.

Zero Minimum Capital Requirement

Under FITTA, the information technology sector has no minimum foreign investment threshold
This is a significant advantage compared to other sectors requiring NPR 20 million minimum
Foreign investors may establish wholly-owned subsidiaries

Automatic FDI Route

Foreign investments up to NPR 500 million are approved without case-by-case screening
Approval is typically granted within 7 days for complete applications
Company registration is completed at OCR
Foreign capital must be recorded with Nepal Rastra Bank within 6 months

Repatriation of Profits

Profits, dividends, and capital gains are fully repatriable after tax compliance
The repatriation process has been streamlined following December 2025 NRB reforms
Approval is now delegated to licensed commercial banks with 15-working-day timeline

Technology Transfer Benefits

Technology transfer agreements for proprietary hosting platforms are permitted
Royalty payments for technology are regulated under FITTA
Foreign technical experts may be employed subject to work permit requirements

Tax Implications for Web Hosting Companies

The tax framework for web hosting companies in Nepal includes standard corporate provisions and IT-specific incentives.

Corporate Income Tax

Standard corporate income tax rate is 25%
Applies to net taxable income from hosting services, domain sales, and related activities

VAT Obligations

VAT at 13% applies to taxable supplies if turnover exceeds NPR 5 million for goods or NPR 2 million for services
Voluntary VAT registration is recommended for B2B hosting companies
Export of hosting services to foreign clients may be zero-rated

Export Incentives

IT exports may qualify for tax rebates under the Income Tax Act
75% tax rebate is available for information technology exports under certain conditions
Proper documentation of foreign earnings is required

Withholding Taxes

Payments to foreign service providers for software licenses or technical services attract 15% withholding tax
Double taxation avoidance agreements may provide relief

Tax Summary Table

Tax Type	Rate	Applicability
Corporate Income Tax	25%	On net taxable income
VAT	13%	If turnover threshold exceeded
Export Rebate	Up to 75%	For qualifying IT exports
WHT on Foreign Payments	15%	On royalties and technical fees
Dividend WHT	5%	On profit distribution

Post-Registration Compliance for Web Hosting Companies

Ongoing compliance is mandatory to maintain legal status, DoIT listing, and operational licenses.

Annual Company Compliance

Annual returns must be filed with OCR within 6 months of fiscal year-end
Audited financial statements must be prepared by registered auditor
Income tax returns are due within 3 months of income year-end
Advance tax installments are payable by mid-January, mid-April, and mid-July

DoIT Annual Update

Listed providers must update registration details annually by end of Poush (mid-January)
Updated security audit reports must be submitted
Changes in technical manpower, infrastructure, or service offerings must be reported

Security and Audit Obligations

Annual security audits must be conducted by certified auditors
Information security standard certificates must be maintained current
Vulnerability assessments and penetration testing are recommended
Incident response procedures must be documented and tested

ISP License Compliance if Applicable

Annual royalty at approximately 4% of gross revenue is payable to NTA
Rural Telecommunications Development Fund contribution at 2% of annual income
Annual reports on financial performance, subscriber data, and service quality
License renewal every 5 or 10 years depending on category

Compliance Calendar Table

Compliance Item	Frequency	Deadline	Authority
Annual return filing	Annual	Within 6 months of fiscal year-end	OCR
Income tax return	Annual	Within 3 months of income year-end	IRD
Advance tax installments	Quarterly	Mid-Jan, Mid-Apr, Mid-Jul	IRD
DoIT annual update	Annual	End of Poush (mid-January)	DoIT
Security audit	Annual	As per audit schedule	DoIT/Internal
ISP royalty payment	Annual	As prescribed by NTA	NTA
RTDF contribution	Annual	As prescribed by NTA	NTA
VAT return	Monthly/Quarterly	Within 25 days of period end	IRD

Cost Breakdown for Web Hosting Company Registration Nepal

The total cost of establishing a web hosting company in Nepal varies based on the scale of operations, infrastructure requirements, and service model.

Company Registration Costs

OCR registration fee: NPR 15,000
Ward office registration: NPR 5,000 to NPR 15,000 annually
PAN registration: free of charge
VAT registration: free of charge
Professional fees for legal documentation: NPR 10,000 to NPR 50,000

DoIT Listing Costs

Application and processing fees: variable
Security audit and certification: NPR 100,000 to NPR 500,000
Infrastructure compliance upgrades: variable

Infrastructure Setup Costs

Server hardware and networking equipment: NPR 500,000 to NPR 5,000,000
Data center facility or colocation: NPR 200,000 to NPR 2,000,000 annually
Uninterruptible power supply systems: NPR 100,000 to NPR 500,000
Fire safety and physical security: NPR 200,000 to NPR 1,000,000
Software licenses and control panels: NPR 50,000 to NPR 300,000 annually

ISP License Costs if Applicable

Application fee: variable by NTA
License fee: NPR 100,000 to NPR 300,000
Performance bank guarantee: variable
Annual royalty: approximately 4% of gross revenue

Cost Summary Table

Cost Item	Estimated Range (NPR)	Notes
Company Registration	15,000-75,000	Including professional fees
DoIT Listing	100,000-600,000	Including security audits
Server Infrastructure	500,000-5,000,000	Depends on scale and tier
Data Center/Colocation	200,000-2,000,000/year	Annual facility costs
Power and Security	300,000-1,500,000	UPS, fire safety, physical security
ISP License	100,000-300,000	If providing connectivity
Annual Royalty	4% of revenue	If ISP license held

Frequently Asked Questions

What is Web Hosting Company Registration Nepal?

It is the formal process of incorporating a web hosting business entity under the Companies Act and obtaining mandatory listing from the Department of Information Technology under the Data Center and Cloud Services Directive, 2081.

Is DoIT listing mandatory for all web hosting companies?

DoIT listing is mandatory for companies operating their own data centers, servers, or cloud infrastructure. Reseller hosting arrangements using third-party infrastructure may not require separate DoIT listing, though the underlying provider must be listed.

What is the minimum capital required for a web hosting company in Nepal?

For domestic private limited companies, the minimum authorized capital is NPR 100,000. For foreign investors in the IT sector, no minimum capital requirement applies under FITTA, which is a significant advantage.

Can foreigners own a web hosting company in Nepal?

Yes, foreign investors may establish wholly-owned web hosting companies in Nepal with 100% ownership. The IT sector has no minimum capital requirement and falls under the automatic FDI route up to NPR 500 million.

What are the tier classifications for data centers in Nepal?

Data centers are classified into four tiers: Tier I (99.671% uptime), Tier II (99.749%), Tier III (99.982%), and Tier IV (99.995%). Government data must be stored in Tier III or higher facilities.

How long does web hosting company registration take?

Company incorporation takes 5 to 7 working days. DoIT listing takes approximately 1 month after complete application and inspection. ISP licensing takes 3 to 6 months if connectivity services are offered.

What documents are required for DoIT listing?

Required documents include company registration certificate, security and privacy policy, business continuity plan, IP pool details, fire safety certificate, building completion certificate, data center location map, tier details, technical manpower details, and information security standard certificates.

Is an ISP license required for web hosting?

An ISP license is required only if the company provides internet connectivity services. Pure web hosting without connectivity does not require NTA licensing, though DoIT listing is mandatory for data center operations.

What tax benefits are available for web hosting companies?

Standard corporate tax is 25%. VAT at 13% applies if turnover thresholds are met. IT exports may qualify for up to 75% tax rebate under the Income Tax Act.

What happens if a web hosting company operates without DoIT listing?

Operating without mandatory DoIT listing violates the Data Center and Cloud Services Directive. Penalties may include delisting orders, fines, and mandatory transfer of customer data to listed providers.

Can a home address be used as the registered office?

Yes, for fully online IT businesses, a home address may be used as the registered office address. This is accepted by OCR for company registration purposes.

What is the validity period of DoIT listing?

DoIT listing requires annual updates by the end of Poush (mid-January). The listing remains valid provided annual updates are submitted and compliance is maintained.

Are security audits mandatory for web hosting companies?

Yes, annual security audits are mandatory for DoIT-listed providers. Information security standard certificates must be maintained current for both primary and disaster recovery sites.

How CorporateNp Assists with Web Hosting Company Registration Nepal

Navigating the Web Hosting Company Registration Nepal process requires coordination across company incorporation, DoIT listing, infrastructure compliance, and potential ISP licensing. CorporateNp provides comprehensive registration and compliance services to IT entrepreneurs and foreign investors seeking to establish web hosting and cloud infrastructure businesses in Nepal.

Services Provided

Company incorporation with IT-specific memorandum and articles of association
DoIT listing application preparation and submission for data center and cloud service providers
Security policy drafting and business continuity plan development
Coordination with DoIT for inspection and certification
ISP license application support through NTA if connectivity services are offered
Tax registration and export incentive advisory
Ongoing compliance management including annual updates, security audit coordination, and regulatory reporting

Expertise and Credentials

Deep expertise in the Companies Act, Electronic Transactions Act, Data Center and Cloud Services Directive, and FITTA
Established relationships with the Department of Information Technology, Nepal Telecommunications Authority, and Office of Company Registrar
Proven track record of successful IT company registrations and DoIT listings

Call to Action

IT entrepreneurs and investors are encouraged to contact CorporateNp for a consultation before initiating the web hosting company registration process.

Disclaimer

The information provided in this guide is intended for general informational and educational purposes only. It does not constitute legal, tax, or business advice. Laws and regulations in Nepal are subject to frequent amendment, and individual circumstances may vary. Readers are strongly advised to seek independent professional advice from qualified legal counsel or tax advisors before making decisions related to web hosting company registration or investment. CorporateNp disclaims any liability for actions taken based on the contents of this guide.

References

For further reading and official guidance, the following authoritative sources are recommended.