Limits
Requests
Section titled “Requests”| Limit | Value |
|---|---|
| JSON request body | 1 MB. A larger body gets 413 payload_too_large. |
| Certificate upload | A .p12 file of at most 1 MiB, and a password of at most 1024 bytes, also in the onboarding from the certificate. |
| Onboarding from the certificate | Completed within 6 days; after that it expires (409 issuer_onboarding_expired). Deleted 30 days after it is completed, expires or is rejected (then 404). |
| Page size of lists | 1 to 100 items, 20 by default. |
Idempotency-Key |
1 to 255 visible ASCII characters, remembered for 24 hours. |
X-Correlation-Id |
1 to 128 letters, digits and - _ . : / + =. |
| Sync mode wait | 15 seconds by default, 30 at most. |
Documents
Section titled “Documents”| Limit | Value |
|---|---|
| Lines of an invoice, credit note or purchase settlement | 1 to 1000 |
| Taxes of a line | One VAT, plus one ad valorem ICE on invoices and credit notes |
Extra details of a line (additionalDetails) |
3 |
| Payments of a document | 1 to 50 |
| Reasons of a debit note | 1 to 100 |
| Supporting documents of a withholding receipt | 1 to 50, with 1 to 20 withholdings each |
| Recipients of a waybill | 1 to 100, with 1 to 1000 goods each |
Additional fields (additionalInfo) |
15 per document, counting the legends Flashpi adds; 300 characters per value |
| Text fields (descriptions, names, addresses) | 300 characters, single line, no emoji |
| Amounts | Up to 12 digits and 2 decimals |
| Quantities and unit prices | Up to 12 digits and 6 decimals |
| Sequential | 1 to 999,999,999 per series |
| Unsigned XML | 304 KiB, so the signed document stays under the SRI’s 320 KB (422 document_too_large) |
Sandbox and email
Section titled “Sandbox and email”| Limit | Value |
|---|---|
| Documents with the shared demo issuer | 50 a day per account (429 demo_issuer_quota_exceeded) |
| Recipients of a test document’s email | Only the verified addresses of the account’s team members (409 test_recipient_not_allowed, see Test document recipients) |
| Resends of a test document’s email | 3 a day (429 email_resend_limit_reached) |
| Buyer emails per account, test documents | 20 a day (429 account_email_limit_reached) |
| Resends of a live document’s email | 10 a day |
| Buyer emails per account, live documents | 200 a day |
| Buyer emails of the whole platform, every account and environment together | One shared daily limit, its figure not published (429 platform_email_limit_reached) |
| Bounces and complaints before the account’s emails pause, per environment | 3 permanent bounces and 3 % of the emails sent, or 2 spam complaints and 0.05 %, in 7 days (Paused emails) |
Days follow the calendar in Ecuador (UTC-5), so these counts start again at midnight in Ecuador (05:00 UTC). Every 429 carries Retry-After and resetsAt, and all but platform_email_limit_reached also carry the limit. The live per-account email limits are defaults that Flashpi can raise for an account. See Sandbox and RIDE and email.
API keys
Section titled “API keys”| Limit | Value |
|---|---|
| IP allowlist of a key | 20 IPv4 or IPv6 addresses or CIDR ranges |
Webhooks
Section titled “Webhooks”| Limit | Value |
|---|---|
| Time to answer a delivery | 10 seconds |
| Retries of a failed delivery | For 72 hours, 13 attempts at most |
| Handshake attempts | 4 (at once, then after 1, 5 and 30 minutes) |
| Event types per endpoint | 1 to 100, or * |
| Endpoint URL | 2048 characters, public HTTPS |
| Overlap of the previous secret after a rotation | 24 hours by default, 0 to 168 |
SRI processing
Section titled “SRI processing”| Limit | Value |
|---|---|
| Submission window: how long Flashpi keeps trying to submit a document while the SRI is unreachable | 72 hours from its creation (then failed, sri_unavailable) |
| Authorization window: how long Flashpi waits for the SRI’s decision | 72 hours (then failed, sri_authorization_timeout) |
Console
Section titled “Console”| Limit | Value |
|---|---|
| Request logs | Kept 30 days |
| Console session | 12 hours, ending after 2 hours without activity |