Limits
Body size, field counts, rate limits, monthly usage, webhooks and retention.
Fixed limits that apply to every workspace and form. Only monthly usage and the number of webhook endpoints depend on your plan.
Submissions
| Limit | Value | Over the limit |
|---|---|---|
| Request body | 256 KB | 413 payload_too_large |
| Stored fields, serialized as JSON | 64 KB | 413 payload_too_large |
| Fields per submission | 100 | 413 payload_too_large |
| Field name length | 128 characters | 413 payload_too_large |
| Field value size | 16 KB | 413 payload_too_large |
| JSON depth | 3 levels, counting the top-level object | 422 too_deep |
_subject | 200 characters | Cut to length |
| Idempotency key | 255 characters, kept 24 hours | 400 invalid_body |
| Files | Not built yet | 422 files_not_supported |
Form definitions
| Limit | Value |
|---|---|
| Fields per form | 100 |
| Options per field | 500 |
| Options per form | 2,000 |
| Field id | 64 characters, lowercase snake_case |
| Label | 200 characters |
| Help text | 1,000 characters |
| Text field | Up to 10,000 characters, 1,000 by default |
| Long text field | Up to 16,000 characters, 10,000 by default |
| Pattern | 200 characters |
| Allowed domains per form | 20 |
Rate limits
| Applies to | Limit |
|---|---|
| Posts to one form from one IP, Standard | 5 a minute and 3 in 10 seconds |
| Posts to one form from one IP, other presets | Relaxed 20 a minute, Strict 2 every 10 minutes, or Custom |
| Posts to any form from one IP | 30 a minute, and never more than 600 a minute |
| Posts to one form in total | 300 a minute, or a Custom cap of 1 to 10,000 |
GET /f/<formId>/schema | 60 a minute per IP and form |
| The Ikiform check frame | 60 a minute per IP and form |
| REST API | 100 requests per 60 seconds per key |
Details and the refill behaviour are on Rate limits.
Monthly usage
Each workspace has a monthly submission limit set by its plan; see Pricing. Months are calendar months in UTC. Only received submissions count; spam and rejected posts don't.
- The workspace's notification recipients get an email at 80% and at 100% of the limit.
- At 2 times the limit, new submissions are rejected with
429 quota_exceededuntil the next month or an upgrade, and workspace owners get an email.
Between 100% and the ceiling
| Item | Today | Once billing is on |
|---|---|---|
| New submissions | Received as usual | Held: visitors see a normal success page, but held submissions stay hidden |
| Webhooks and emails | Sent | Not sent until the workspace upgrades |
| Kept for | Until you delete them | 30 days |
Billing is not switched on yet. Until it is, no workspace is refused for not having a plan.
Webhooks
| Limit | Value |
|---|---|
| Endpoints per workspace | 3, no limit on Enterprise |
| Payload size | 256 KB, then fields is left out and truncated is true |
| Response timeout | 15 seconds |
| Attempts | 9 over about 3 d 6 h |
| Auto-disable | After 5 days of failed deliveries, or on 410 Gone |
| Old secret after rotation | 24 hours |
| Response body saved in the log | 4 KB |
Notification emails
| Limit | Value |
|---|---|
| Emails per form per hour | 50, then one digest for the rest of the hour |
| Emails per form per hour, workspaces younger than 7 days | 10 |
| Recipients per email | 10 |
| Fields shown per email | 20, values cut at 500 characters |
Retention
| Data | Kept for |
|---|---|
| Received submissions | Until you delete them |
| Spam submissions | 30 days |
| Held submissions | 30 days |
| Webhook deliveries | 90 days |
| Webhook attempts | 30 days |
| Idempotency keys | 24 hours |
Need higher limits? Email hello@ikiform.com about Enterprise.