Billing principles
Data Security Center (DSC) provides data security protection for cloud data assets—such as RDS and OSS—including sensitive data detection, data auditing, and threat detection.
DSC charges consist of the instance version fee and either the value-added service fee. Both use a subscription (pay upfront, then use) model.
Instance version fee: The base cost for using DSC. You can purchase different versions—such as Premium Edition or Enterprise Edition—to obtain data security protection capabilities.
Value-added service fee: Additional fees incurred when the protection scope or feature specifications included in your instance version—such as the number of protected database instances or storage capacity requiring detection—do not meet your business needs.
Billing items
Instance version fee
The base prices for DSC Premium Edition, Enterprise Edition, and Database Audit (Classified Protection Compliance Edition) include the following features. For detailed differences between versions, see Feature differences between editions.
In addition to these paid editions, DSC also offers a Free Edition. For details, see Free Edition.
Edition type | Premium Edition | Enterprise Edition | Value-added services only | Database Audit (Classified Protection Compliance Edition) |
Pricing | USD 688/month | USD 1,666/month | None | USD 650/month |
Default specifications included in price |
|
| Not provided. Purchase each feature separately. |
|
Value-added service fee
When default specifications do not meet your business needs, you can purchase the following value-added services to increase quotas for purchased features or enable additional capabilities. These fees are added on top of the instance version fee.
Features included in the default specifications of Premium Edition, Enterprise Edition, and Database Audit (Classified Protection Compliance Edition) are enabled by default. Do not re-enable them in the value-added module.
Premium Edition or Enterprise Edition
Detection and Response
Feature | Pricing |
Data Detection and Response - OSS Protection Capacity | 1 TB ≤ X ≤ 5 TB: USD 200/TB/month |
5 TB < X ≤ 10 TB: USD 150/TB/month | |
10 TB < X ≤ 50 TB: USD 100/TB/month | |
50 TB < X ≤ 100 TB: USD 60/TB/month | |
100 TB < X ≤ 500 TB: USD 30/TB/month | |
X > 500 TB: USD 20/TB/month | |
Data Detection and Response - Number of Database Instances | 1–20 instances: USD 200/instance/month |
21–50 instances: USD 180/instance/month | |
51–100 instances: USD 160/instance/month | |
101–500 instances: USD 140/instance/month | |
More than 500 instances: USD 120/instance/month |
Data audit
Feature | Pricing |
Data Audit - Number of Database Instances | 0–20 instances: USD 200/month |
21–50 instances: USD 180/month | |
51–100 instances: USD 160/month | |
101–500 instances: USD 140/month | |
More than 501 instances: USD 120/month | |
Data Auditing - OSS Protection Capacity | 0 TB ≤ X ≤ 10 TB: USD 100/TB/month |
11 TB ≤ X ≤ 100 TB: USD 90/TB/month | |
101 TB ≤ X ≤ 500 TB: USD 80/TB/month | |
X > 500 TB: USD 50/TB/month |
Data identification
Feature | Pricing |
Data Identification - Database Table Quantity | 0 to 50,000 cards: USD 80 per 10,000 cards per month |
For 60,000 to 100,000 images: USD 60 per 10,000 images per month | |
110,000 cards ≤ X ≤ 500,000 cards: USD 40 per 10,000 cards per month | |
More than 500,000 images: USD 20 per 10,000 images per month | |
Data Identification - Storage Identification Capacity | 0 TB ≤ X ≤ 5 TB: USD 200/TB/month |
6 TB ≤ X ≤ 10 TB: USD 160/TB/month | |
11 TB ≤ X ≤ 50 TB: USD 100/TB/month | |
51 TB ≤ X ≤ 100 TB: USD 60/TB/month | |
101 TB ≤ X ≤ 500 TB: USD 20/TB/month | |
X > 500 TB: USD 10/TB/month |
Image desensitization
Feature | Pricing |
Image Masking | Number of images: USD 4 per 10,000 images/month |
Column encryption
Feature | Pricing |
Column Encryption-Columns (5–50 columns) | 5 columns: USD 498/month |
10 columns: USD 598/month | |
15 columns: USD 699/month | |
20 columns: USD 798/month | |
25 columns: USD 898/month | |
30 columns: USD 996/month | |
35 columns: USD 1,092/month | |
40 columns: USD 1,198/month | |
45 columns: USD 1,287/month | |
50 columns: USD 1,398/month | |
Column Encryption-Columns (more than 50 columns) | 50 < X ≤ 100: USD 25/instance/month |
100 < X <= 200: USD 20 per instance per month | |
200 < X ≤ 300: USD 15 per instance per month | |
300 < X ≤ 400: 12 USD/instance/month | |
For X instances where 400 < X ≤ 500: 11 USD per instance per month | |
500<X<=600: USD 10/unit/month | |
600 < X ≤ 700: USD 9 per unit per month | |
700 < X ≤ 800: USD 8 per unit per month | |
800<X<=900: 7 USD per instance per month | |
900 < X <= 1,000: USD 6 per instance per month | |
If X > 1000: or USD 5 per unit per month. |
Log storage
DSC includes a default log storage allowance: 200 GB per authorized database instance and 50 GB per 1 TB of authorized OSS protection. When this default storage is insufficient, purchase additional Log Storage Capacity quota.
Feature | Pricing |
Log Storage Capacity | 1 TB–500 TB: USD 80/TB/month |
Value-added services only
Detection and Response
Feature | Pricing |
Data Detection and Response | Enable Detection and Response (includes 1 TB OSS protection and 1 database instance): USD 666/month |
Data Detection and Response - OSS Protection Capacity | 1 TB ≤ X ≤ 5 TB: USD 200/TB/month |
5 TB < X ≤ 10 TB: USD 150/TB/month | |
10 TB < X ≤ 50 TB: USD 100/TB/month | |
50 TB < X ≤ 100 TB: USD 60/TB/month | |
100 TB < X ≤ 500 TB: USD 30/TB/month | |
X > 500 TB: USD 20/TB/month | |
Data Detection and Response - Number of Database Instances | 1–20 instances: USD 200/instance/month |
21–50 instances: USD 180/instance/month | |
51–100 instances: USD 160/instance/month | |
101–500 instances: USD 140/instance/month | |
More than 500 instances: USD 120/instance/month |
Data audit
Feature | Pricing |
Data Auditing | Enable data audit: USD 200/month |
Data Audit - Number of Database Instances | 0–20 instances: USD 200/month |
21–50 instances: USD 180/month | |
51–100 instances: USD 160/month | |
101–500 instances: USD 140/month | |
More than 501 instances: USD 120/month | |
Data Auditing - OSS Protection Capacity | 0 TB ≤ X ≤ 10 TB: USD 100/TB/month |
11 TB ≤ X ≤ 100 TB: USD 90/TB/month | |
101 TB ≤ X ≤ 500 TB: USD 80/TB/month | |
X > 500 TB: USD 50/TB/month |
Data identification
Feature | Pricing |
Data Identification - Database Table Quantity | For X between 0 and 50,000: USD 80/10,000 images/month |
60,000 ≤ X ≤ 100,000 cards: USD 60 per 10,000 cards per month | |
For 110,000 to 500,000 cards: USD 40 per 10,000 cards per month | |
More than 500,000 images: USD 20 per 10,000 images per month | |
Data Identification - Storage Identification Capacity | 0 TB ≤ X ≤ 5 TB: USD 200/TB/month |
6 TB ≤ X ≤ 10 TB: USD 160/TB/month | |
11 TB ≤ X ≤ 50 TB: USD 100/TB/month | |
51 TB ≤ X ≤ 100 TB: USD 60/TB/month | |
101 TB ≤ X ≤ 500 TB: USD 20/TB/month | |
X > 500 TB: USD 10/TB/month |
Image desensitization
Feature | Pricing |
Image Masking | Number of images: USD 4 per 10,000 images/month |
Log storage
DSC includes a default log storage allowance: 200 GB per authorized database instance and 50 GB per 1 TB of authorized OSS protection. When this default storage is insufficient, purchase additional Log Storage Capacity quota.
Feature | Pricing |
Log Storage Capacity | 1 TB–500 TB: USD 80/TB/month |
Database Audit (Classified Protection Compliance Edition)
Data audit
Feature | Pricing |
Data Audit - Number of Database Instances | 0–20 instances: USD 200/month |
21–50 instances: USD 180/month | |
51–100 instances: USD 160/month | |
101–500 instances: USD 140/month | |
More than 501 instances: USD 120/month | |
Data Auditing - OSS Protection Capacity | 0 TB ≤ X ≤ 10 TB: USD 100/TB/month |
11 TB ≤ X ≤ 100 TB: USD 90/TB/month | |
101 TB ≤ X ≤ 500 TB: USD 80/TB/month | |
X > 500 TB: USD 50/TB/month |
Log storage
DSC includes a default log storage allowance: 200 GB per authorized database instance and 50 GB per 1 TB of authorized OSS protection. When this default storage is insufficient, purchase additional Log Storage Capacity quota.
Feature | Pricing |
Log Storage Capacity | 1 TB–500 TB: USD 80/TB/month |
Billing model
DSC uses a subscription billing model. For more information about cloud product billing models, see Billing models.
Billing formula:
Total cost = (Instance version fee + Value-added service fee) × Subscription duration (months)Billing cycle: Calculated based on UTC+8 time. The billing cycle starts at the exact second you purchase or renew your DSC instance and ends at 00:00:00 on the day after the expiration date.
Associated product billing
After connecting your data assets to DSC, any costs for reading data from those assets or storing audit logs are billed to the asset owner’s account by the respective cloud service.
For example, after enabling native log collection for an OSS asset, the system creates a dedicated project in the Simple Log Service (SLS) console. By default, data in this project’s Logstore is retained for 7 days.
If the Logstore stores no more than 900 GB and retains data for no longer than 7 days, no charges apply.
If data retention exceeds 7 days or storage exceeds 900 GB, storage fees apply. These fees are billed to the asset owner’s account by SLS.
For more information, see Associated product billing.
Billing and cost management
View usage and bills
You can check DSC resource usage and billing details in the Alibaba Cloud Management Console.
View usage: Log on to the Data Security Center console. On the Overview page, view your instance’s specifications and expiration date.
View bills: Log on to the Expenses and Costs console and go to the Bill Details page. Select “Data Security Center” as the product to view and download your consumption bill. For step-by-step instructions, see Bill details.
Change specifications
Upgrade: If your current DSC edition or feature specifications no longer meet your business needs, go to the Data Security Center console Overview page and click Upgrade to adjust your instance configuration. Pay the price difference between the old and new configurations. For more information, see Instance upgrade.
Downgrade: DSC does not support downgrades. If you have special downgrade requirements, contact your account manager.
Renew instances
To keep security features active, renew your DSC instance before it expires.
Expiration reminder: Seven days before expiration, the system sends renewal reminders by text message and email.
Expiration impact: After expiration, the instance enters an “expired” state. The system retains all configurations and data for 15 days. If you renew within this period, service resumes normally. If you do not renew within 15 days, the DSC instance and all its data and configurations are permanently deleted and cannot be recovered.
How to renew: In the Data Security Center console Overview page, click Renew Subscription.
For more renewal rules and procedures, see Instance renewal.
Cancel subscription
Newly purchased Data Security Center instances—including Database Audit (Classified Protection Compliance Edition)—support no-questions-asked refunds within 5 days. You can cancel your subscription yourself on the cancellation page. Instances older than 5 days are not eligible for no-questions-asked refunds.
For renewal orders, you can request a no-questions-asked refund within 5 days before the new service period starts. Refunds are not available once the new service period begins.
For more information, see Refund policy.
Overdue payments
If your account balance is insufficient, an overdue payment occurs. Because DSC subscription instances are prepaid, existing instances continue working normally during the subscription period and are unaffected by overdue payments. However, while your account is overdue, you cannot upgrade instance configurations, renew subscriptions, or purchase other resources.