Billing methods and billable items of DSC - Data Security Center

Data Security Center (DSC) uses the subscription billing method. This topic describes the billable items, billing formula, and billing details of DSC.

Billing formula

DSC supports the subscription billing method. Subscription is a billing method that allows you to pay for resources before you use the resources. This billing method allows you to reserve resources at discounted rates to reduce costs. The subscription billing method is suitable for the following scenarios:

The usage period of resources can be estimated.
The resource usage does not frequently fluctuate.
Long-term use of resources is required.

The billing cycle of a subscription resource is the subscription duration that you specify when you purchase the resource. The time is in UTC+8. The billing cycle begins at the time when the subscription resource is purchased or renewed and ends at 00:00:00 on the day after the expiration date. The start time and end time are accurate to the second.

Billing details of DSC

The fees of DSC consist of basic feature fees and value-added feature fees. The following figure shows the fees.

Enterprise Edition

Value-added Plan

Billable items

DSC provides different editions that support different security capabilities and different billable items. You can select an edition based on your business requirements. For more information about the features of each edition, see Differences between the features of different editions.

You are not charged for the free edition of DSC. For more information, see DSC Free Edition. If you have used the free edition, the data of the free edition is not deleted after you purchase a paid edition.

Free resource specifications

Enterprise Edition

Billable item	Free specification
Log storage capacity	DSC Enterprise Edition is purchased. DSC provides 200 GB of log storage per month for each database instance in the purchased database instance quota. DSC provides 50 GB of log storage each month for each TB of Storage Protection Capacity that you purchased. If you enable Data Detection and Response in the Value-added Module section, 50 GB of log storage is provided each month for each TB of Data Detection and Response - OSS Protection Capacity that you purchased.
Data Detection and Response - OSS Protection Capacity	If you enable Data Detection and Response in the Value-added Module section, 1 TB of Object Storage Service (OSS) protection capacity is provided each month free of charge.
Columns	DSC provides a free quota of one field.

Value-added Plan

Billable item	Free specification
Database instance quota	After you purchase value-added features, DSC imposes no limits on the database instance quota and the storage protection capacity. The storage protection capacity includes OSS authorization quota and Simple Log Service authorization quota.
Storage protection capacity
Data detection and response - OSS protection capacity	If you enable the data detection and response feature, 1 TB of OSS protection capacity is provided each month free of charge.
Log storage capacity	If you enable the data detection and response feature, 50 GB of log storage is provided each month free of charge for each TB of purchased data detection and response - OSS protection capacity. If you activate the free edition and purchase the value-added plan edition, DSC provides 5 GB of log storage per month free of charge. If you do not activate the free edition and purchase the value-added plan edition, you cannot use the free 5 GB of log storage per month.
Columns	DSC provides a free quota of one field.

If the free resource specifications do not meet your business requirements, you can upgrade your edition or purchase additional specifications in the value-added module section.

Billing rules

Enterprise Edition

Feature	Billable item	Billing rule
Basic feature	Asset authorization Data auditing Data identification	You are charged for basic features based on the amount of data that you want to protect. After you complete asset authorization, you can use the basic features of DSC. Take note of the following items: The database instance quota is deducted based on the number of authorized database instances. The storage protection capacity is deducted based on the sizes of authorized OSS buckets. The storage protection capacity is deducted based on 50% of the sizes of authorized Simple Log Service projects. For example, if the sizes of authorized Simple Log Service projects are 10 GB, 5 GB of storage protection capacity is deducted. ApsaraDB for Redis does not consume the database instance quota. ApsaraDB for Redis supports only security baseline checks. For more information about the authorization quota, see Authorization quota management.
Value-added feature	Data detection and response	You are charged based on the sizes of the OSS buckets for which the data detection and response feature is enabled. You are charged a one-time fee for enabling the data detection and response feature based on the subscription duration that you specify when you purchase the feature. After you authorize the data detection and response feature to access OSS assets, the free OSS authorization quota is deducted first based on the sizes of objects in the authorized OSS buckets. If the free OSS authorization quota is exhausted, the data detection and response - OSS protection capacity that you purchased is deducted.
	Log storage	When you use the data auditing feature to protect authorized databases and OSS assets, the free storage capacity is preferentially used. If the free storage capacity is exhausted, the log storage capacity that you purchased is deducted.
	Column encryption	You are charged for enabling the column encryption feature and the column quota. You are charged a one-time fee for enabling the column encryption feature based on the subscription duration that you specify when you purchase the feature. The column quota is deducted based on the total number of encrypted fields in configured tables.

Value-added Plan

If you select Value-Added Plan, you can use only the purchased features. When you use the purchased features, the resource specifications that you purchased are deducted.

Billable item	Billing rule
Data detection and response	You are charged based on the sizes of the OSS buckets for which the data detection and response feature is enabled. You are charged a one-time fee for enabling the data detection and response feature based on the subscription duration that you specify when you purchase the feature. After you authorize the data detection and response feature to access OSS assets, the free OSS authorization quota is deducted first based on the sizes of objects in the authorized OSS buckets. If the free OSS authorization quota is exhausted, the data detection and response - OSS protection capacity that you purchased is deducted.
Log management	When you use the data auditing feature to protect authorized databases and OSS assets, the free storage capacity is preferentially used. If the free storage capacity is exhausted, the log storage capacity that you purchased is deducted.
Column encryption	You are charged for enabling the column encryption feature and the column quota. You are charged a one-time fee for enabling the column encryption feature based on the subscription duration that you specify when you purchase the feature. The column quota is deducted based on the total number of encrypted fields in configured tables.

Billing formula

(Fees for purchased basic features + Value-added features ) × Subscription duration

Pricing of billable items

Billable items of basic features

Billable item	Specification	Enterprise
Database instance quota Note You can manage ApsaraDB RDS instances, PolarDB databases, and MaxCompute projects.	1 to 20 instances	USD 400 per instance-month
	21 to 50 instances	USD 300 per instance-month
	51 to 100 instances	USD 250 per instance-month
	More than 100 instances	USD 200 per instance-month
Storage protection capacity (in 1,000 GB increments) Note You can manage OSS and Simple Log Service.	1,000 GB to 10,000 GB	USD 0.2 per GB-month
	11,000 GB to 100,000 GB	USD 0.15 per GB-month
	100,001 GB to 500,000 GB	USD 0.12 per GB-month
	More than 500,000 GB	USD 0.1 per GB-month

Billable items of value-added features

Billable item	Specification	Price
Data detection and response	Enable the data detection and response feature	USD 666 per month
Data detection and response - OSS protection capacity (X)	0 TB < X ≤ 5 TB	USD 200 per TB-month
	5 TB < X ≤ 10 TB	USD 150 per TB-month
	10 TB < X ≤ 50 TB	USD 100 per TB-month
	50TB < X ≤ 100 TB	USD 60 per TB-month
	100 TB < X ≤ 500 TB	USD 30 per TB-month
	500 TB < X ≤ 9999999999 TB	USD 200 per TB-month
Column encryption - number of columns (in 5-column increments)	1	USD 0 per month
	5	USD 498 per month
	10	USD 598 per month
	15	USD 699 per month
	20	USD 798 per month
	25	USD 898 per month
	30	USD 996 per month
	35	USD 1,092 per month
	40	USD 1,198 per month
	45	USD 1,287 per month
	50	USD 1,398 per month
	50< N ≤ 100	USD 25 per month
	100 < N ≤ 200	USD 20 per month
	200 < N ≤ 300	USD 15 per month
	300 < N ≤ 400	USD 12 per month
	400 < N ≤ 500	USD 11 per month
	500 < N ≤ 600	USD 10 per month
	600 < N ≤ 700	USD 9 per month
	700 < N ≤ 800	USD 8 per month
	800 < N ≤ 900	USD 7 per month
	900 < N ≤ 1000	USD 6 per month
	1000 < N ≤ 9999999999999	USD 5 per month
Log storage	1 TB to 500 TB	USD 80 per TB-month

Billable items for related cloud services

After you connect a data asset to DSC, the fees for reading data in the data asset and storing audit logs of the data asset are deducted from the balance of the account to which the data asset belongs. The bills are included in the bills of the relevant cloud service. For more information, see Additional fees for database assets connected to DSC.

Purchase DSC

To use DSC, you must activate DSC and purchase sufficient resource specifications. For more information, see Purchase DSC.

View the bills

On the Bill Details page in the Expenses and Costs console, you can view the bills and consumption details of DSC on the Billing Details and Usage Records tabs. For more information, see Billing details.

Upgrade

If the purchased DSC edition and the resource specifications cannot meet your business requirements, you can upgrade DSC and change the specifications. For more information, see Specification change of subscription DSC.

Note

DSC does not support downgrades.

Expiration and renewal

You must renew your DSC subscription before it expires to prevent the service suspension of DSC features, such as sensitive data identification, security audit, and data masking. If you do not renew your subscription, you may experience data leaks, serious economic loss, and damage to brand reputation. For more information, see Renew a subscription instance.

Refunds

You can apply for a full refund for DSC within five days after you place an order. For more information, see Refund policy.