Billing methods and billable items of DSC - Data Security Center

Data Security Center (DSC) uses the subscription billing method. This topic describes the billable items, billing formula, and billing details of DSC.

Billing formula

DSC supports the subscription billing method. Subscription is a billing method that allows you to pay for resources before you use the resources. This billing method allows you to reserve resources at discounted rates and reduce costs. The subscription billing method is suitable for the following scenarios:

The usage period of resources can be estimated.
Resource usage remains relatively flat.
Long-term use of resources is required.

The billing cycle of a subscription resource is the subscription duration that you specify when you purchase the resource. The time is in UTC+8. The billing cycle begins at the time when the subscription resource is purchased or renewed and ends at 00:00:00 on the day after the expiration date. The start time and end time are accurate to the second.

Billing details of DSC

The fees of DSC consist of basic feature fees and value-added feature fees. The following figure shows the details.

Enterprise Edition

Value-added Plan

Billable items

DSC offers different editions that support different security capabilities and different billable items. You can select an edition based on your business requirements. For more information about the features of each edition, see Differences between the features of different editions.

Free resource specifications

Enterprise Edition

Billable item	Free specification
Log storage capacity	DSC Enterprise Edition is purchased. DSC provides 200 GB of log storage per month for each database instance included in your purchased database instance quota. DSC provides 50 GB of log storage each month for each TB of Object Storage Service (OSS) authorization quota that you purchased. If you enable Data Detection and Response in the Value-added Module section, 50 GB of log storage is provided each month for each TB of Data Detection and Response - OSS Protection Capacity that you purchased.
Data Detection and Response - OSS Protection Capacity	If you enable Data Detection and Response in the Value-added Module section, 1 TB of OSS protection capacity is provided each month free of charge.
Column encryption	DSC provides a free quota of one field.

Value-added Plan

Billable item	Free specification
Database instance quota	DSC imposes no limits on the database instance quota and the OSS protection capacity after you purchase value-added features.
OSS protection capacity
Data detection and response - OSS protection capacity	If you enable the data detection and response feature, 1 TB of OSS protection capacity is provided each month free of charge.
Log storage capacity	If you enable the data detection and response feature, 50 GB of log storage is provided each month free of charge for each TB of purchased data detection and response - OSS protection capacity.

If the free resource specifications do not meet your business requirements, you must purchase additional specifications in the value-added module section.

Billing rules

Enterprise Edition

Feature	Billable item	Billing rule
Basic feature	Asset authorization Data auditing Data identification	You are charged for basic features based on the amount of data that you want to protect. After you complete asset authorization, you can use the basic features of DSC. The database instance quota is deducted based on the number of authorized database instances. The OSS authorization quota is deducted based on the sizes of authorized OSS buckets. ApsaraDB for Redis does not consume the database instance quota. ApsaraDB for Redis supports only security baseline checks. For more information about the authorization quota, see Authorization quota management.
Value-added feature	Data detection and response	You are charged based on the sizes of the OSS buckets for which the data detection and response feature is enabled. You are charged a one-time fee for enabling the data detection and response feature based on the subscription duration that you specify when you purchase the feature. After you authorize the data detection and response feature to access OSS assets, the free OSS quota is deducted first based on the sizes of objects in the authorized OSS buckets. If the free OSS quota is exhausted, the data detection and response - OSS protection capacity that you purchased is deducted.
	Log storage	When you use the data auditing feature to protect authorized databases and OSS assets, the free storage capacity is used first. If the free storage capacity is exhausted, the extended log storage capacity that you purchased is deducted.
	Column encryption	You are charged for enabling the column encryption feature and the column quota. You are charged a one-time fee for enabling the column encryption feature based on the subscription duration that you specify when you purchase the feature. The column quota is deducted based on the total number of encrypted fields in configured tables.

Value-added Plan

If you select Value-Added Plan, you can use only the purchased features. When you use the features, the resource specifications that you purchased are deducted.

Billable item	Billing rule
Data detection and response	You are charged based on the sizes of the OSS buckets for which the data detection and response feature is enabled. You are charged a one-time fee for enabling the data detection and response feature based on the subscription duration that you specify when you purchase the feature. After you authorize the data detection and response feature to access OSS assets, the free OSS quota is deducted first based on the sizes of objects in the authorized OSS buckets. If the free OSS quota is exhausted, the data detection and response - OSS protection capacity that you purchased is deducted.
Log management	When you use the data auditing feature to protect authorized databases and OSS assets, the free storage capacity is used first. If the free storage capacity is exhausted, the extended log storage capacity that you purchased is deducted.
Column encryption	You are charged for enabling the column encryption feature and the column quota. You are charged a one-time fee for enabling the column encryption feature based on the subscription duration that you specify when you purchase the feature. The column quota is deducted based on the total number of encrypted fields in configured tables.

Billing formula

(Fees for urchased basic features + Value-added features ) × Subscription duration

Pricing of billable items

Billable items of basic features

Billable item	Specification	Enterprise Edition
Database instance quota	1 to 20 instances	USD 400 per instance-month
	21 to 50 instances	USD 300 per instance-month
	51 to 100 instances	USD 250 per instance-month
	More than 100 instances	USD 200 per instance-month
OSS protection capacity (in 1,000 GB increments)	1,000 GB to 10,000 GB	USD 0.2 per GB-month
	11,000 GB to 100,000 GB	USD 0.15 per GB-month
	100,001 GB to 500,000 GB	USD 0.12 per GB-month
	More than 500,000 GB	USD 0.1 per GB-month

Billable items of value-added features

Billable item	Specification	Price
Data detection and response	Enable the data detection and response feature	USD 666 per month
Data detection and response - OSS protection capacity (X)	0 TB < X ≤ 5 TB	USD 200 per TB-month
	5 TB < X ≤ 10 TB	USD 150 per TB-month
	10 TB < X ≤ 50 TB	USD 100 per TB-month
	50TB < X ≤ 100 TB	USD 60 per TB-month
	100 TB < X ≤ 500 TB	USD 30 per TB-month
	500 TB < X ≤ 9999999999 TB	USD 200 per TB-month
Log storage	1 TB to 500 TB	USD 80 per TB-month

Billable items for related cloud services

After you connect a data asset to DSC, the fees for reading data in the data asset and storing audit logs of the data asset are deducted from the balance of the account to which the data asset belongs, and the bills are included in the bills of the relevant cloud service. For more information, see Additional fees for database assets connected to DSC.

Purchase DSC

To use DSC, you must activate DSC and purchase sufficient resource specifications. For more information, see Purchase DSC.

View the bills

On the Bill Details page in the Expenses and Costs console, you can view the bills and consumption details of DSC on the Billing Details and Usage Records tabs. For more information, see Billing details.

Upgrade

If the purchased DSC edition and resource specifications cannot meet your requirements, you can upgrade DSC and change the specifications. For more information, see Specification change of subscription DSC.

Note

DSC does not support downgrades.

Expiration and renewal

Before your DSC subscription expires, you must renew the subscription at the earliest opportunity to prevent the service suspension of DSC features such as sensitive data identification, security audit, and data masking. If you do not renew the subscription, you may experience data leaks, serious economic losses, and damage to brand reputation. For more information, see Renew a subscription instance.

Refunds

You can request a full refund for DSC within five days after you place an order. For more information, see Refund policy.