Billing principles
Data Security Center (DSC) provides data security capabilities for your cloud data assets, such as ApsaraDB RDS and Object Storage Service (OSS). These capabilities include sensitive data detection, data auditing, and threat detection.
DSC fees consist of an instance edition fee and a value-added service fee. These fees are charged based on the subscription (prepaid) model.
Instance edition fee: This is the basic fee for using the DSC service. You can purchase different editions, such as Premium or Enterprise, to obtain data security capabilities.
Value-added service fee: This is the fee for purchasing additional features when the protection scope or feature specifications of your instance edition, such as the number of protected database instances or the storage capacity for detection, do not meet your business needs.
Billable items
Instance edition fee
The base prices for DSC Premium Edition, Enterprise Edition, and DBAudit (Classified Protection Compliance Edition) include the following features. For a detailed comparison of features across different editions, see Feature comparison between different editions.
In addition to these paid editions, DSC also offers a Free Edition. For more information, see Free Edition.
Edition | Premium Edition | Enterprise Edition | Value-added Services Only Edition | DBAudit (Classified Protection Compliance Edition) |
Price | USD 688/month | USD 1,666/month | None | USD 650/month |
Default specifications included in the price |
|
| Not provided. Purchase each feature separately. |
|
Value-added service fee
If the default specifications do not meet your business needs, you can purchase the following value-added services to increase your feature quotas or enable additional features. This fee is added to the instance edition fee.
The features included in the default specifications of the Premium, Enterprise, and DBAudit (Classified Protection Compliance Edition) are enabled by default. You do not need to enable them again in the value-added modules.
For Premium or Enterprise Edition
Detection and Response
Feature | Price |
Data Detection and Response - OSS Protection Capacity | 1 TB <= X <= 5 TB: USD 200/TB/month |
5 TB < X <= 10 TB: USD 150/TB/month | |
10 TB < X <= 50 TB: USD 100/TB/month | |
50 TB < X <= 100 TB: USD 60/TB/month | |
100 TB < X <= 500 TB: USD 30/TB/month | |
X > 500 TB: USD 20/TB/month | |
Data Detection and Response - Number of Database Instances | 1 to 20 instances: USD 200/instance/month |
21 to 50 instances: USD 180/instance/month | |
51 to 100 instances: USD 160/instance/month | |
101 to 500 instances: USD 140/instance/month | |
More than 500 instances: USD 120/instance/month |
Data auditing
Feature | Price |
Data Audit - Number of Database Instances | 0 to 20 instances: USD 200/month |
21 to 50 instances: USD 180/month | |
51 to 100 instances: USD 160/month | |
101 to 500 instances: USD 140/month | |
More than 501 instances: USD 120/month | |
Data Auditing - OSS Protection Capacity | 0 TB <= X <= 10 TB: USD 100/TB/month |
11 TB <= X <= 100 TB: USD 90/TB/month | |
101 TB <= X <= 500 TB: USD 80/TB/month | |
X > 500 TB: USD 50/TB/month |
Data identification
Feature | Price |
Data Identification - Database Table Quantity | 0 to 50,000 tables: USD 80/10,000 tables/month |
60,000 to 100,000 tables: USD 60/10,000 tables/month | |
110,000 to 500,000 tables: USD 40/10,000 tables/month | |
X > 500,000 tables: USD 20/10,000 tables/month | |
Data Identification - Storage Identification Capacity | 0 TB <= X <= 5 TB: USD 200/TB/month |
6 TB <= X <= 10 TB: USD 160/TB/month | |
11 TB <= X <= 50 TB: USD 100/TB/month | |
51 TB <= X <= 100 TB: USD 60/TB/month | |
101 TB <= X <= 500 TB: USD 20/TB/month | |
X > 500 TB: USD 10/TB/month |
Enhanced image identification and image masking
Feature | Price |
Enhanced Image Identification Capacity | Number of images for enhanced identification: USD 2/10,000 images/month |
Image Masking | Number of images for masking: USD 4/10,000 images/month |
Column encryption
Feature | Price |
Column Encryption-Columns (5 to 50 columns) | 5 columns: USD 498/month |
10 columns: USD 598/month | |
15 columns: USD 699/month | |
20 columns: USD 798/month | |
25 columns: USD 898/month | |
30 columns: USD 996/month | |
35 columns: USD 1,092/month | |
40 columns: USD 1,198/month | |
45 columns: USD 1,287/month | |
50 columns: USD 1,398/month | |
Column Encryption-Columns (more than 50 columns) | 50 < X <= 100: USD 25/column/month |
100 < X <= 200: USD 20/column/month | |
200 < X <= 300: USD 15/column/month | |
300 < X <= 400: USD 12/column/month | |
400 < X <= 500: USD 11/column/month | |
500 < X <= 600: USD 10/column/month | |
600 < X <= 700: USD 9/column/month | |
700 < X <= 800: USD 8/column/month | |
800 < X <= 900: USD 7/column/month | |
900 < X <= 1000: USD 6/column/month | |
X > 1000: USD 5/column/month |
Log storage
DSC includes a default amount of log storage. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. If the default storage is insufficient, you can purchase an additional Log Storage Capacity quota.
Feature | Price |
Log Storage Capacity | 1 TB to 500 TB: USD 80/TB/month |
For Value-added Services Only Edition
Detection and Response
Feature | Price |
Data Detection and Response | Enable Detection and Response (includes 1 TB of OSS protection and 1 database instance): USD 666/month |
Data Detection and Response - OSS Protection Capacity | 1 TB <= X <= 5 TB: USD 200/TB/month |
5 TB < X <= 10 TB: USD 150/TB/month | |
10 TB < X <= 50 TB: USD 100/TB/month | |
50 TB < X <= 100 TB: USD 60/TB/month | |
100 TB < X <= 500 TB: USD 30/TB/month | |
X > 500 TB: USD 20/TB/month | |
Data Detection and Response - Number of Database Instances | 1 to 20 instances: USD 200/instance/month |
21 to 50 instances: USD 180/instance/month | |
51 to 100 instances: USD 160/instance/month | |
101 to 500 instances: USD 140/instance/month | |
More than 500 instances: USD 120/instance/month |
Data auditing
Feature | Price |
Data Auditing | Enable data auditing: USD 200/month |
Data Audit - Number of Database Instances | 0 to 20 instances: USD 200/month |
21 to 50 instances: USD 180/month | |
51 to 100 instances: USD 160/month | |
101 to 500 instances: USD 140/month | |
More than 501 instances: USD 120/month | |
Data Auditing - OSS Protection Capacity | 0 TB <= X <= 10 TB: USD 100/TB/month |
11 TB <= X <= 100 TB: USD 90/TB/month | |
101 TB <= X <= 500 TB: USD 80/TB/month | |
X > 500 TB: USD 50/TB/month |
Data identification
Feature | Price |
Data Identification - Database Table Quantity | 0 to 50,000 tables: USD 80/10,000 tables/month |
60,000 to 100,000 images: USD 60/10,000 images/month | |
110,000 to 500,000 tables: USD 40/10,000 tables/month | |
X > 500,000 tables: USD 20/10,000 tables/month | |
Data Identification - Storage Identification Capacity | 0 TB <= X <= 5 TB: USD 200/TB/month |
6 TB <= X <= 10 TB: USD 160/TB/month | |
11 TB <= X <= 50 TB: USD 100/TB/month | |
51 TB <= X <= 100 TB: USD 60/TB/month | |
101 TB <= X <= 500 TB: USD 20/TB/month | |
X > 500 TB: USD 10/TB/month |
Enhanced image identification and image masking
Feature | Price |
Enhanced Image Identification Capacity | Number of images for enhanced identification: USD 2/10,000 images/month |
Image Masking | Number of images for masking: USD 4/10,000 images/month |
Log storage
DSC includes a default amount of log storage. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. If the default storage is insufficient, you can purchase an additional Log Storage Capacity quota.
Feature | Price |
Log Storage Capacity | 1 TB to 500 TB: USD 80/TB/month |
DBAudit (Classified Protection Compliance Edition)
Data auditing
Feature | Price |
Data Audit - Number of Database Instances | 0 to 20 instances: USD 200/month |
21 to 50 instances: USD 180/month | |
51 to 100 instances: USD 160/month | |
101 to 500 instances: USD 140/month | |
More than 501 instances: USD 120/month | |
Data Auditing - OSS Protection Capacity | 0 TB <= X <= 10 TB: USD 100/TB/month |
11 TB <= X <= 100 TB: USD 90/TB/month | |
101 TB <= X <= 500 TB: USD 80/TB/month | |
X > 500 TB: USD 50/TB/month |
Log storage
DSC includes a default amount of log storage. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. If the default storage is insufficient, you can purchase an additional Log Storage Capacity quota.
Feature | Price |
Log Storage Capacity | 1 TB to 500 TB: USD 80/TB/month |
Billing model
DSC supports the subscription billing model. For more information about billing models for cloud products, see Billing models.
Billing formula:
Total fee = (Unit price of the instance edition + Unit price of the value-added service) × Subscription duration (in months)Billing cycle: Billing is based on the UTC+8 time zone. A billing cycle begins at the exact time (accurate to the second) that you purchase or renew a DSC instance and ends at 00:00:00 on the day after the instance expires.
Billing for related products
After you add data assets to DSC, fees are incurred for reading data from some data assets and storing audit logs. The corresponding cloud products bill these fees to the account that owns the assets.
For example, after you enable native log collection for an OSS asset, a dedicated Project is created in the Simple Log Service (SLS) console. By default, the Logstore in this Project retains data for 7 days.
If the data storage in the Logstore does not exceed 900 GB and the retention period does not exceed 7 days, no fees are incurred.
If the retention period exceeds 7 days or the data storage exceeds 900 GB, storage fees are incurred. These fees are charged by SLS to the account that owns the assets.
For more information, see Billing for related products.
Bill and cost management
View usage and bills
You can view the resource usage and bills for DSC in the Alibaba Cloud Management Console.
View usage: Log on to the Data Security Center console. On the Overview page, you can view the specifications and expiration date of your purchased instances.
View bills: Log on to the Expenses and Costs console's Billing Details page. Set the product to "Data Security Center" to view and download your bills. For more information, see Billing details.
Change specification configurations
Upgrade: If your current DSC edition or feature specifications do not meet your business needs, go to the Data Security Center console's Overview page and click Upgrade to change the instance configuration. You must pay the price difference between the old and new configurations. For more information, see Upgrade an instance.
Downgrade: DSC does not support downgrades. If you have special downgrade requirements, contact your account manager for assistance.
Renew an instance
Renew your DSC instance before it expires to ensure its security features remain available.
Expiration reminder: Seven days before your instance expires, the system sends you renewal reminders by text message and email.
Impact of expiration: After an instance expires, its status changes to Expired. The system retains all configurations and data for 15 days. If you renew the instance within this period, the service resumes. If you do not renew the instance within 15 days, the DSC instance, along with all its configurations and data, is permanently deleted and cannot be recovered.
How to renew: On the Data Security Center console's Overview page, click Renew Subscription.
For more information about renewal rules and procedures, see Renew an instance.
Unsubscribe from an instance
You can receive an unconditional refund for a newly purchased Data Security Center instance, including the DBAudit (Classified Protection Compliance Edition), if you unsubscribe on the unsubscribe page within 5 days of purchase. Unconditional refunds are not available for instances that were purchased more than 5 days ago.
For renewal orders, you can request an unconditional refund up to 5 days before the new service period begins. Refunds are not available after the new service period has started.
For more information, see Refund policy.
Overdue payments
An overdue payment occurs when your account has an insufficient balance. Because DSC subscription instances are prepaid, your existing instances are not affected by overdue payments and can be used normally throughout the subscription period. However, if your account has an overdue payment, you cannot upgrade instance configurations, renew instances, or purchase other resources.