SECAI Core · phase 7 of 15
Quantity quota
The maximum number of files, documents, or data items that a user or application can upload or process within a specified time frame
The Explain card
- Plain English
- A quantity quota caps how many files, documents or data items a user or application can upload or process within a set period. It limits volume, not speed.
- Example
- An enterprise document-summarisation assistant allows each user 200 PDF uploads per day. A contractor's script that tries to push 5,000 scanned contracts through in an hour stops at 200, and the event is logged for review.
- Why it matters
- Bulk uploads are how attackers exfiltrate data through a model, flood a retrieval index with poisoned content, or run up enormous compute bills. A quota turns "unlimited" into "noticed".
- Hook
- Rate limits count the knocks; quantity quotas count the parcels.
Where it sits in the deck
Phase 7: AI-Specific Runtime Controls: Guardrails, Limits, and Enforcement
Responsible AI principles must be enforced mechanically — learn the runtime controls that constrain model inputs, outputs, and resource consumption.
