Skip to content
All articles
Security

Submission limits on public forms and portals

The CRM public pages (capture forms, conversational form, live chat, scheduling, partner and supplier portals) enforce a per-minute submission limit per source to protect your account from spam, abuse, and unwanted cost.

Every public CRM page (the ones any visitor reaches through a link, without logging in) enforces a per-minute submission limit. The limit is applied per source (the combination of the link/token and the sender IP address), so a single abusive visitor never affects the others or the rest of your operation.

When the limit is exceeded, the submission gets an HTTP 429 response ("too many requests") with a Retry-After header telling you how many seconds to wait before retrying. Legitimate submissions at human pace never hit the limit.

Where it applies

  • Website capture forms (webform) and conversational form: about 10 submissions per minute per source.
  • Public scheduling and partner-portal deal registration: about 10 per minute.
  • Partner-portal comments, supplier-portal updates, communication preferences, and quote responses: about 20 per minute.
  • Live chat (visitor messages): about 30 per minute, since it is more conversational.
💡 The limit only guards against excess; it never drops a legitimate submission due to an internal failure. Provider webhooks (payments, telephony, etc.) are authenticated differently and are not subject to this limit.

If a customer or partner reports a 429 error during normal use, it usually signals a runaway script or automatic resubmission. Ask them to wait the time shown in Retry-After and resend once.

Open this article inside the system

Read it and want to see it working?

The account is free and the whole manual is available inside the system, with an assistant that answers from this very content.

Create free account
Submission limits on public forms and portals · Sellio