Billing overview
Data Security Center (DSC) provides data security capabilities for your cloud data assets, such as ApsaraDB RDS and Object Storage Service (OSS). These capabilities include sensitive data discovery, data audit, and threat detection.
DSC charges consist of an edition fee, the , and the Value-Added Service Fee, both billed on a subscription (prepaid) basis.
Edition fee: The base fee for using DSC. You select an edition, such as Premium or Enterprise, that determines the data security capabilities available to you.
Value-Added Service Fee: An additional fee that applies when the default quotas of your edition, such as the number of database instances or the storage capacity available for scanning, do not meet your business requirements. You can purchase additional capacity or enable extra features as needed.
Billable items
Instance edition fees
The following table shows the base price and default specifications for each DSC edition. For a detailed comparison of features across editions, see Feature Differences Across Editions.
In addition to the paid editions listed below, DSC also offers a Free Edition. For more information, see Free Edition.
Item | Premium Edition | Enterprise Edition | Value-added Services Only Edition | DBAudit (Classified Protection Compliance Edition) |
Pricing | 688 USD/month | 1,666 USD/month | None | 650 USD/month |
Default specifications |
|
| Not included. You must purchase each feature separately. |
|
Value-Added Service Fee
When the default specifications cannot meet your business requirements, you can purchase the following value-added service to increase the quota of purchased features or enable additional features. This fee is charged in addition to the edition fee.
The features included in the default specifications of the Premium Edition, Enterprise Edition, and DBAudit (classified protection compliance edition) are enabled by default, so you do not need to enable them again in the or the Value-Added Module.
Premium Edition or Enterprise Edition
Detection and Response
Feature | Pricing |
Data Detection and Response - OSS Protection Capacity | 1 TB ≤ X ≤ 5 TB: 200 USD/TB/month |
5 TB < X ≤ 10 TB: 150 USD/TB/month | |
10 TB < X ≤ 50 TB: 100 USD/TB/month | |
50 TB < X ≤ 100 TB: 60 USD/TB/month | |
100 TB < X ≤ 500 TB: 30 USD/TB/month | |
X > 500 TB: 20 USD per TB per month | |
Data Detection and Response - Number of Database Instances | 1 to 20 instances: 200 USD/instance/month |
21 to 50 instances: 180 USD/instance/month | |
51 to 100 instances: 160 USD per instance per month | |
101 to 500 instances: 140 USD per instance per month | |
More than 500 instances: 120 USD/instance/month |
Data audit
Feature | Pricing |
Data Audit - Number of Database Instances | 0–20 instances: USD 200 per instance per month |
21–50 instances: USD 180 per instance per month | |
51 to 100 instances: USD 160 per instance per month | |
101–500 instances: USD 140 per instance per month | |
More than 500 instances: USD 120 per instance per month | |
Data Auditing - OSS Protection Capacity | 0 TB to 10 TB: 100 USD/TB/month |
11 TB ≤ X ≤ 100 TB: USD 90/TB/month | |
101 TB - 500 TB: USD 80/TB/month | |
X > 500 TB: USD 50 per TB per month |
Data identification
Feature | Pricing |
Data Identification - Database Table Quantity | 0 - 50,000 tables: 80 USD/10,000 tables/month |
60,000 - 100,000 tables: 60 USD/10,000 tables/month | |
110,000 - 500,000 tables: 40 USD/10,000 tables/month | |
> 500,000 tables: 20 USD/10,000 tables/month | |
Data Identification - Storage Identification Capacity | 0 - 5 TB: 200 USD/TB/month |
6 - 10 TB: 160 USD/TB/month | |
11 - 50 TB: 100 USD/TB/month | |
51 - 100 TB: 60 USD/TB/month | |
101 - 500 TB: 20 USD/TB/month | |
> 500 TB: 10 USD/TB/month |
AI-powered data security detection
DSC provides a bonus AI detection quota based on your purchased Data Identification quota:
For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.
When your AI detection quota is exhausted, a window appears to indicate that the quota is insufficient. You can upgrade your instance as prompted on the page.
Feature | Pricing |
AI Text Detection | Number of calls: USD 3/10,000 calls/month |
AI Image Detection | Number of calls: USD 6/10,000 calls/month |
Image desensitization
Feature | Pricing |
Image Masking | Number of image desensitization operations: USD 4/10,000 images/month |
Column encryption
Feature | Pricing |
Column Encryption-Columns (5 to 50 columns) | 5 columns: USD 498/month |
10 columns: 598 USD/month | |
15 columns: USD 699/month | |
20 columns:USD 798/month | |
25 columns:USD 898/month | |
30 columns: 996 USD/month | |
35 columns: USD 1092/month | |
40 columns: 1198 USD/month | |
45 columns: 1287 USD/month | |
50 columns: 1398 USD/month | |
Column Encryption-Columns (more than 50 columns) | 50<X<=100:25 USD per column per month |
100 < X ≤ 200: USD 20 per column per month | |
200<X<=300: USD 15 per column per month | |
300<X<=400: 12 USD/column/month | |
400<X<=500: 11 USD/column/month | |
500<X<=600: USD 10 per column per month | |
600<X<=700: 9 USD/column/month | |
700<X<=800: 8 USD per column per month | |
800<X<=900: 7 USD/column/month | |
900 < X <= 1000: USD 6 per column per month | |
X > 1000: USD 5 per column per month |
Log storage
DSC includes a default amount of log storage with each authorized resource. Each authorized database instance includes 200 GB of log storage, and each 1 TB of authorized OSS protection includes 50 GB of log storage. You can purchase additional Log Storage Capacity.
Feature | Pricing |
Log Storage Capacity | 1 TB~500 TB:80 USD/TB/month |
Value-added Services Only Edition
Detection and Response
Feature | Pricing |
Data Detection and Response | Enable Detection and Response (includes 1 TB of OSS protection and 1 database instance): USD 666/month |
Data Detection and Response - OSS Protection Capacity | 1 TB<=X<=5 TB: USD 200/TB/month |
5 TB < X <= 10 TB: 150 USD/TB/month | |
10 TB<X<=50 TB: 100 USD/TB/month | |
50 TB<X<=100 TB: USD 60/TB/month | |
100 TB<X<=500 TB: 30 USD/TB/month | |
X>500 TB: USD 20/TB/month | |
Data Detection and Response - Number of Database Instances | 1 to 20 instances: USD 200 per instance per month |
21–50 instances: 180 USD/instance/month | |
51–100 instances: 160 USD/instance/month | |
101–500 instances: 140 USD/instance/month | |
More than 500 instances: USD 120 per instance per month |
Data audit
Feature | Pricing |
Data Auditing | Subscription: 200 USD/month |
Data Audit - Number of Database Instances | 0 to 20 instances: USD 200 per instance per month |
21 to 50 instances: USD 180 per instance per month | |
51 to 100 instances: 160 USD per instance per month | |
101–500 instances: USD 140 per instance per month | |
More than 500 instances: USD 120 per instance per month | |
Data Auditing - OSS Protection Capacity | 0 TB <= X <= 10 TB: 100 USD/TB/month |
11 TB <= X <= 100 TB:USD 90/TB/month | |
101 TB <= X <= 500 TB: 80 USD/TB/month | |
X > 500 TB: 50 USD/TB/month |
Data identification
Feature | Pricing |
Data Identification - Database Table Quantity | 0 to 50,000 tables: USD 80 per 10,000 tables per month |
50,001 to 100,000 tables: 60 USD per 10,000 tables per month | |
100,001 to 500,000 tables: 40 USD per 10,000 tables per month | |
More than 500,000 tables: USD 20 per 10,000 tables per month | |
Data Identification - Storage Identification Capacity | 0 TB <= X <= 5 TB: USD 200/TB/month |
6 TB <= X <= 10 TB: 160 USD/TB/month | |
11 TB <= X <= 50 TB: USD 100/TB/month | |
51 TB <= X <= 100 TB: USD 60/TB/month | |
101 TB <= X <= 500 TB: USD 20/TB/month | |
X > 500 TB: USD 10 per TB per month |
AI-powered data security detection
DSC provides a bonus AI detection quota based on your purchased Data Identification quota:
For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.
When your AI detection quota is exhausted, a window appears to indicate that the quota is insufficient. You can upgrade your instance as prompted on the page.
Feature | Pricing |
AI Text Detection | Number of calls: USD 3/10,000 calls/month |
AI Image Detection | Number of calls: USD 6/10,000 calls/month |
Image desensitization
Feature | Pricing |
Image Masking | Desensitized images: USD 4 per 10,000 images per month |
Log storage
DSC includes a default amount of log storage with each authorized resource. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. You can purchase additional Log Storage Capacity.
Feature | Pricing |
Log Storage Capacity | 1 TB–500 TB: USD 80/TB/month |
DBAudit (Classified Protection Compliance Edition)
Data audit
Feature | Pricing |
Data Audit - Number of Database Instances | 0 to 20 instances: USD 200 per instance per month |
21 to 50 instances: USD 180 per instance per month | |
51 to 100 instances: USD 160 per instance per month | |
101–500 instances: USD 140 per instance per month | |
More than 500 instances: USD 120 per instance per month | |
Data Auditing - OSS Protection Capacity | 0 TB <= X <= 10 TB: USD 100/TB/month |
11 TB <= X <= 100 TB: USD 90/TB/month | |
101 TB <= X <= 500 TB: 80 USD/TB/month | |
X > 500 TB: USD 50/TB/month |
Log storage
DSC includes a default amount of log storage space. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. If the default storage is insufficient, you can purchase additional Log Storage Capacity.
Feature | Pricing |
Log Storage Capacity | 1 TB~500 TB: 80 USD/TB/month |
Billing method
DSC uses the subscription billing method. For more information about billing methods, see Billing methods.
Billing formula:
Total fee = (edition unit price +value-added service unit price) × subscription duration (months)Billing cycle: Calculated based on UTC+8. The billing cycle starts at the exact time you purchase or renew a DSC instance and ends at 00:00:00 UTC+8 on the day after the expiration date.
Billing for related products
Adding data assets to DSC may incur fees for reading data and storing audit logs. These fees are charged by the corresponding cloud services to the account that owns the assets.
For example, when you enable native log collection for OSS assets, DSC creates a dedicated project in Simple Log Service (SLS). The default data retention period for the Logstore in this project is 7 days.
If the data in the Logstore does not exceed 900 GB and the retention period does not exceed 7 days, no storage fees are incurred.
If the retention period exceeds 7 days or the data exceeds 900 GB, storage fees are charged by SLS to the account that owns the assets.
For more information, see Billing for related products.
Bills and cost management
View usage and bills
You can view DSC resource usage and billing details in the Alibaba Cloud console.
View usage: Log on to the Data Security Center console. On the Overview page, view the specifications and expiration time of your instances.
View bills: Log on to the Expenses and Costs console's Bill Details page. Select Data Security Center as the product to view and download your bills. For specific steps, see Bill Details.
Change instance specifications
Upgrade: If your current DSC edition or specifications do not meet your business requirements, go to the Overview page of the Data Security Center console and click Upgrade to adjust instance specifications. You must pay the price difference between the new and existing configurations. For more information, see Upgrade an instance.
Downgrade: DSC does not support downgrades. If you have special downgrade requirements, contact your account manager for assistance.
Renew an instance
To ensure continuous security protection, renew your DSC instance before it expires.
Expiration reminder: The system sends reminders by text message, email, and other channels 7 days before your instance expires.
Impact of expiration: After an instance expires, it enters the Expired state. The system retains all configurations and data for 15 days after expiration. If you renew within this period, the service resumes. If you do not renew within 15 days, the DSC instance and all its configurations and data are permanently deleted and cannot be recovered.
How to renew: On the Overview page of the Data Security Center console, click Renew Subscription.
For more information about renewal rules and procedures, see Renew an instance.
Unsubscribe from an instance
Newly purchased DSC instances, including the DBAudit (Classified Protection Compliance Edition), are eligible for a 5-day unconditional refund. You can unsubscribe on the unsubscription page. Instances used for more than 5 days are not eligible for unconditional refunds.
For renewal orders, you can request a 5-day unconditional refund before the new service cycle begins. After the new service cycle starts, refunds are not supported.
For more information, see Refund policy.
Overdue payments
When your account balance is insufficient, your account enters an overdue state. Since DSC uses subscription billing, existing instances continue to function normally within the subscription period. However, you cannot upgrade instances, renew subscriptions, or purchase other resources until the overdue payment is settled.