Quick answer: Per-organization caps — broadcasts per day, rows per import — turn a compromised account or runaway script from a platform incident into a contained inconvenience. Limits are how shared infrastructure stays trustworthy for everyone on it.
How it works
A hijacked admin can annoy at most one day’s cap, not carpet-bomb thousands of members.
Import caps keep validation honest and reviewable.
Legitimate high-volume needs raise limits through support, with a human in the loop.
Frequently asked questions
Do quotas affect normal use?
The caps sit far above healthy usage — most organizations never meet them.
Why not unlimited for paying customers?
Because your members share delivery infrastructure with other organizations’ mistakes.