# Limits and Quotas

## Limits

Exoscale automatically provisions a default Key Management Service (KMS) key for all organizations. This key is fully managed by Exoscale and automatically replicated across all zones.

The following hard limitations apply to default keys:
- They cannot be deleted.
- Custom keys cannot use the reserved name of a default key.

- Automatic key rotation for default keys cannot be disabled.

> [!CAUTION] The number of manual key rotations permitted for any single KMS key is strictly limited to 10. This is a system limit and cannot be modified.


## Quotas

| Usage | Quota |
| --- | --- |
| Maximum number of keys per organization per zone | 1,000 |


> [!NOTE]
> Key replicas within a replicated key set do not count toward your quota; only the primary key is counted.