Skip to content

Mobile-ID Digital TrustISO/IEC 27001:2022 · SIS351224I008Published certification scope

View evidence

DEVELOPER

Rate Limits & Quotas

Protect shared services with explicit quotas and recoverable client behavior rather than unbounded retries.

01 / CONCEPT

Integration contract

01

Limit dimension

Limits may apply by client, tenant, API, time window or service tier.

02

Response

Clients recognize rate-limit responses and any published retry guidance.

03

Backoff

Use jittered exponential backoff for recoverable load conditions; never retry authorization/validation errors blindly.

04

Capacity

Production volume assumptions are reviewed before go-live and after material growth.

02 / WORKFLOW

From sandbox to evidence

01Estimate traffic and burst
02Confirm applicable quota
03Implement client backoff
04Load-test within sandbox policy
05Monitor rejection/latency
06Request capacity review before sustained increase

03 / SECURITY & PRODUCTION

Production is an evidence decision

Clients must treat quotas as a contract boundary, implement safe backoff and validate expected production volume instead of using unbounded retry.