# Limitations & Notes

This page summarizes the limitations and notes for using Takumi API.

## Ownership Verification for Target Applications

Features that communicate dynamically with a live environment (including blackbox assessment) can only target applications you own. If you specify an unverified application URL as the assessment target, the workflow will be rejected.

Before running a workflow, complete the ownership verification process as described in [Organization Verification and Ownership Verification](/docs/t/concepts/assessment-authentication.md).

## File Upload Limits

Files uploaded through Takumi API are **automatically deleted after a 30-day retention period**.

There is a **storage capacity limit** for uploaded files. You can free up space by deleting files you no longer need using the `/o/{org_id}/input-files/delete` endpoint.

For details, see [File Upload](/docs/t/api/features/file-upload.md).

## Workflow Results & Artifact Retention

Workflow results and artifacts are **retained for a minimum of 30 days**. After this period, they may be deleted. If you need to keep results long-term, we recommend downloading them promptly.
