Chapter 8 of 15

Give Every Customer a Budget Boundary

Company-level budgets are too blunt for a multi-tenant product. I want cost limits and entitlements to exist at the same level as the customer, organisation, plan, and feature that create the usage.

  • Per-organisation budgets
  • Plan entitlements
  • Soft limits and hard limits
  • Admin overrides
  • Budget reset periods

The situation

One customer can consume disproportionately more AI than another while paying the same subscription. Without tenant-level controls, the high-usage customer is effectively spending the shared platform budget on behalf of everyone else.

The naive solution

Set one global provider limit and manually contact customers when usage looks high.

The hidden constraint

A global limit protects the provider account but produces terrible product behaviour: one tenant can exhaust capacity and affect unrelated customers. Manual intervention also arrives after the economics have already gone wrong.

The decision

Enforce budgets and entitlements inside the product at organisation level. Plans should define what the customer can consume or which expensive capabilities they can access, while admins retain explicit overrides.

The implementation

I would support a combination of included usage, feature entitlements, per-period spend or credit limits, and per-run caps. Soft thresholds can warn at 70-90% of allowance; hard thresholds can block, degrade, or require additional purchase. Budget checks should happen before starting expensive work, not after the provider returns the bill.

The tradeoff

Usage limits can frustrate customers if the product explains them poorly. The UX should show what is included, what has been used, what happens at the limit, and how to continue.

The evidence I would look for

The system is healthy when one customer's burst cannot create unbounded platform liability and when support can explain exactly why a customer hit a limit.

The reusable lesson

Multi-tenant AI needs multi-tenant cost control. A shared provider account is not a shared economic entitlement.

The consultant's questions

  • Can one customer materially affect the AI budget available to others?
  • Are limits checked before expensive workflows begin?
  • What does the user experience look like near and at a limit?
  • Can authorised staff grant a temporary exception without changing the whole plan?