How to Set Up an AI Company in Malaysia

Malaysia drew over USD 18 billion in AI-related foreign direct investment between 2022 and 2024. During this period, Google, Microsoft, NVIDIA, and Amazon Web Services each made significant commitments. This fuelled a data centre capacity growth from 10 megawatts in 2022 to over 1,500 megawatts today.

Behind that growth is an active government policy that continues to support companies. Malaysia launched a dedicated national AI office in 2024 and introduced the Malaysia Digital tax incentive scheme, which reduces corporate tax to as low as 0% on qualifying income.

If you are looking to set up an AI company, Malaysia stands out as a compelling choice in Southeast Asia. Foreign investors enjoy 100% ownership and operational costs that remain significantly lower than in Singapore. Backed by active government support, the country offers a conducive and streamlined environment for scaling tech ventures. This guide covers the regulatory landscape, the key incentives available, and steps to establish your AI company in Malaysia.

Why Set Up Your AI Company in Malaysia

Malaysia’s AI journey started with a question the government asked in 2021: how do you transform a developing digital economy into a genuine AI nation? 

The answer was the National AI Roadmap 2021–2025, developed by the Ministry of Science, Technology and Innovation (MOSTI). It was the country’s first structured plan to embed AI across the public and private sectors. It covered infrastructure, talent, governance, and adoption across key industries.

That roadmap has since run its course. What comes next is the National AI Technology Action Plan 2026–2030, currently being developed by the newly established National AI Office (NAIO). The new plan builds directly on what the roadmap started, with a sharper focus on:

• ethical AI adoption
• measurable investment targets, and 
• a governance framework designed to hold up as AI systems grow more complex.

Malaysia has set a clear ambition: to place within the top 20 countries for AI readiness by 2030. For foreign investors, this context is especially valuable. You are not entering a market that is still figuring out its position on AI. The policy direction is set, the institutional bodies are in place, and the frameworks governing how AI companies operate are either already in force or actively being developed.

Key Requirements to Establish an AI Company in Malaysia

Before you can access MD Status, tax incentives, or any of the grants covered in this guide, you need a legal entity in Malaysia. The Private Limited Company (Sdn Bhd) is the standard and most practical choice. It is a separate legal entity, which means the company holds its own liabilities and your personal assets stay protected. 

It also qualifies you for most incentives, including ones under MD status and other government agencies. To incorporate a private limited company in Malaysia, you’ll need:

• At least one resident director (local, PR, or an Employment Pass holder)
• At least one shareholder, who can be the same person as the director
• A licensed company secretary, appointed within 30 days of incorporation
• A registered business address in Malaysia
• A minimum paid-up capital of RM 1,000 for incorporation and MD Status approval. If you are applying for the New Investment Tax Incentive, this increases to RM 50,000. For the Expansion Incentive, the threshold rises to RM 250,000.

Important Note: Without MD Status, foreign-owned companies typically need RM 500,000 to RM 1,000,000 in paid-up capital to secure Employment Passes. MD Status removes that barrier. However, you must still employ at least two full-time knowledge workers at a minimum of RM 5,000 per month and maintain an annual operating expenditure of at least RM 50,000.

How to Register and Set Up Your AI Company in Malaysia

Registering your AI company in Malaysia requires coordinating approvals across multiple government agencies to get fully operational. The Companies Commission of Malaysia (SSM), Malaysia Digital Economy Corporation (MDEC), Inland Revenue Board (LHDN), and the Immigration Department each run on their own timeline. This can add 2–3 months to your time-to-market, depending on your readiness.

Emerhub manages this process end-to-end for foreign investors, from incorporation through to securing MD Status, tax incentives, and Employment Passes.

Step 1: Identify Your Business Activity Code (MSIC)

Before filing anything, confirm your Malaysia Standard Industrial Classification (MSIC) code. This five-digit code declares your business activity to SSM, LHDN, and MDEC. 

For AI companies, MSIC codes typically fall under Division 62 (Computer programming and consultancy) or Division 63 (Information service activities). Bear in mind that the wrong code can disqualify your application and require you to restart the process. Our advisors can help you identify the right code for your specific activities before you file.

Step 2: Reserve Your Company Name and Incorporate

Next, we lodge your proposed company name with SSM via the MyCoID portal. Once approved, we’ll then prepare and submit your incorporation documents. Standard registration takes 3–5 working days, provided all your documents are in order:

• Passport copies of all directors and shareholders
• Proof of registered business address in Malaysia
• Company constitution, or adoption of the standard constitution under the Companies Act 2016
• Proposed business activities and corresponding MSIC code
• Details of paid-up capital and shareholding structure

Step 3: Apply for MD Status

Apply for MD status through MDEC’s Malaysia Digital portal immediately after incorporation. The review takes 14 working days from the date MDEC receives a complete application, and the sooner it is in, the sooner your incentive window opens.

Important Note: MD Status and the tax incentive are two separate applications. Once your MD Status is activated, we file the tax incentive application with the National Committee on Investment straight away. 

Bear in mind that tax exemptions apply from the date that the application is received, not the date your MD Status was awarded. Any revenue earned before that filing date is taxed at the standard 24% rate.

Step 4: Open a Corporate Bank Account and Register for Tax

Register with LHDN to obtain your Tax Identification Number, then open your corporate bank account. Banks will require details on your business model, revenue structure, and how your company handles personal data. Emerhub can help you prepare the following documents: 

• Certificate of Incorporation from SSM
• Board resolution authorising the account opening and listing authorized signatories
• Passport copies of all directors and shareholders
• Proof of business address
• Business plan or description of your intended operations and revenue model

Most banks still require at least one director to be physically present in Malaysia to complete the account opening. Emerhub can facilitate the banking introduction and handle communication with the bank on your behalf.

Step 5: Start Onboarding Your Team

Before your first hire joins, your company needs to be registered with Malaysia’s statutory bodies. This applies to both local and foreign employees and must be done before anyone starts work. For local hires, registration is mandatory with:

• EPF (Employees Provident Fund) within 7 days of hiring your first employee
• SOCSO (Social Security Organisation) and EIS (Employment Insurance System) within 30 days of your first hire
• LHDN to set up Monthly Tax Deductions (PCB) for each employee’s income tax

For foreign knowledge workers, Employment Passes are processed through MDEC’s eXpats Service Centre once your MD Status e-Certificate is issued. Before we submit those applications, your paid-up capital must be fully deposited. The Immigration Department checks this as part of their review, and insufficient capital at this stage stalls everything regardless of how far along the rest of your setup is.

Compliance Tip: Note that, following 1 June 2026, revised salary thresholds apply to all new and renewing Employment Pass applications. Category I rises to RM 20,000 per month, while Category II rises from RM 10,000 to RM 19,999. 

Step 6: Secure Sector-Specific Approvals

At this stage, many AI companies can begin operating. If you are building general-purpose AI tools, you can go to market once your incorporation, MD Status, and banking are in place. This includes products like workflow automation, enterprise analytics, natural language processing applications, and internal productivity software.

However, if your AI product makes consequential decisions within a regulated industry, you will need approval from the relevant regulator before commercial deployment. For example:

• Bank Negara Malaysia (BNM): AI in financial services, such as credit scoring models, fraud detection systems, robo-advisory platforms, and automated underwriting tools.
• Ministry of Health (MoH): Healthcare systems products such as diagnostic imaging tools, clinical decision-support systems, and patient risk prediction models.
• Ministry of Education (MoE): Adaptive learning platforms or automated student assessment tools used in accredited institutions.

These reviews run independently of your SSM registration and MD Status approval. We highly recommend engaging the relevant regulator as early as possible in the setup process, ideally before the product is ready. Waiting until launch to initiate that conversation is one of the most common and avoidable delays foreign founders face in Malaysia. It can push your time-to-market by months.

Malaysia Digital (MD) Status and Tax Incentives for AI Companies

The Malaysia Digital (MD) Status is the most important government programme for foreign AI companies operating in Malaysia. MDEC awards it to companies undertaking approved digital activities, and AI development and deployment is explicitly listed as a qualifying activity.

The uptake speaks for itself. In the first half of 2024, 451 tech companies were awarded MD Status, surpassing the entire 2023 total of 256 in just six months. Of those, 39% were foreign-owned, directly contributing to Malaysia’s FDI inflows. Today, over 4,000 companies hold MD Status.

The Malaysia Digital Tax Incentive scheme launched in May 2024, with applications open until 31 December 2027. Incentives are outcome-based, meaning they reward what you actually build and invest in.

Incentive	Features
New Investment– Reduced Tax Rate (RTR)	0% on qualifying IP income, 5–10% on non-IP income for up to 10 years
New Investment– Investment Tax Allowance (ITA)	60–100% of qualifying capital expenditure, deductible against up to 100% of statutory income for up to 5 years
Expansion Incentive– Reduced Tax Rate (RTR)	15% tax rate for five consecutive years
Expansion Incentive– ITA	30–60% of qualifying capital expenditure for up to 5 years

For a full breakdown of the MD Status, incentives and application process, read our guide on the Malaysia Digital Status. Emerhub advisors can also validate your eligibility and handle the application process for you.

Key Regulations AI Companies in Malaysia Must Adhere to

Malaysia’s AI regulatory framework combines a legally binding data protection law with a voluntary but increasingly influential governance standard. Both affect how you build and operate your AI systems.

1. Personal Data Protection (Amendment) Act 2024

This is the law your company must comply with from day one. Malaysia passed significant amendments to its Personal Data Protection Act in 2024, which came into force across three phases in January, April, and June 2025.

For your AI company, the PDPA governs how you handle the data your systems learn from and operate on. It mandates you to:

• Appoint a Data Protection Officer (DPO). If your company processes large volumes of personal data or conducts high-risk data processing, a DPO is mandatory. This especially applies to most AI companies doing enterprise work. Your DPO must be formally registered with JPDP.
• Take responsibility as a data processor. If your AI system processes personal data on behalf of a client (say, running a churn-prediction model on their customer records), you carry direct legal liability under the Security Principle. Previously, only data controllers were held to this standard.
• Handle biometric data with extra care. Facial recognition outputs, fingerprint data, and behavioural identifiers are now classified as sensitive personal data. You must obtain explicit consent before you collect or process them.
• Report breaches promptly. If a breach is likely to cause significant harm to data subjects, you must notify both JPDP and the affected individuals without unnecessary delay.

Compliance Tip: Penalties for non-compliance have increased significantly, from a previous ceiling of RM 300,000 to up to RM 1 million and three years’ imprisonment. Build your data architecture to PDPA standards before you launch. Retroactive compliance costs far more than getting it right from the start.

2. National Guidelines on AI Governance and Ethics (AIGE)

MOSTI published the AIGE in September 2024. The guidelines are voluntary today, structured around seven principles: fairness, reliability and safety, human control, privacy and security, inclusiveness, transparency, and accountability. They apply to three groups:

• end users
• policymakers
• technology providers (which include you as an AI developer or deployer).

The Minister of MOSTI has been clear that portions of the AIGE will eventually become law, and the AI Technology Action Plan 2026–2030 is expected to accelerate that process. In practical terms, AIGE alignment is already becoming a commercial expectation. 

Enterprise clients, government agencies, and financial institutions increasingly demand documented governance before they deploy a third-party AI system. Designing for AIGE compliance from the start puts you ahead of where the regulation is heading.

3. Sector-Specific Regulations

If your AI product operates within a regulated industry, the relevant sector regulator takes precedence. For instance:

• In financial services, Bank Negara Malaysia (BNM) governs AI applications used in credit scoring, fraud detection, and automated financial advice. 
• In healthcare, the Ministry of Health (MoH) oversees AI used in clinical decision-making or diagnostics.

In both cases, commercial deployment typically requires approval before you go to market. Identify your sector regulator early. Their review timeline can significantly affect your product launch schedule.

Expert Support for AI Company Setup in Malaysia

Setting up a foreign-owned AI company in Malaysia essentially involves more coordination than a standard incorporation. Beyond company incorporation, you are also managing approvals across SSM, MDEC, LHDN, and the Immigration Department. If you operate in regulated industries, sector regulators are added to that mix.

Emerhub Malaysia supports foreign investors across each of these stages. In the early stages, our services cover company incorporation, MD Status and MDAG-AI grant applications, and Employment Pass management. Once you are operational, we continue to support your business with payroll processing, tax filing, and ongoing statutory compliance.

If you’re planning to set up an AI company in Malaysia, Emerhub can help you navigate all key considerations. Fill out the form below to schedule a free consultation with our local advisors.