Billable items, pricing, and cost management - Data Security Center - Alibaba Cloud - Data Security Center

Billing overview

Data Security Center (DSC) provides data security capabilities for your cloud data assets, such as ApsaraDB RDS and Object Storage Service (OSS). These capabilities include sensitive data discovery, data audit, and threat detection.

DSC charges consist of an edition fee and the Value-Added Service Fee. DSC supports subscription (prepaid) and pay-as-you-go (postpaid) billing modes. Subscription is the default mode. After elastic scaling is enabled, when the prepaid quota is exhausted, the system automatically switches to pay-as-you-go billing. Excess usage beyond the prepaid quota is billed daily based on actual consumption.

Edition fee: The base fee for using DSC. You select an edition, such as Premium or Enterprise, that determines the data security capabilities available to you.
Value-Added Service Fee: An additional fee that applies when the default quotas of your edition, such as the number of database instances or the storage capacity available for scanning, do not meet your business requirements. You can purchase additional capacity or enable extra features as needed.

Billable items

Instance edition fees

The following table shows the base price and default specifications for each DSC edition. For a detailed comparison of features across editions, see Feature Differences Across Editions.
In addition to the paid editions listed below, DSC also offers a Free Edition. For more information, see Free Edition.

Item

Premium Edition

Enterprise Edition

Value-added Services Only Edition

DBAudit (Classified Protection Compliance Edition)

Pricing

688 USD/month

1,666 USD/month

None

650 USD/month

Default specifications

Data Identification: 1 TB of storage for data identification, 10,000 database tables
Data Auditing: 1 TB of storage, 1 database instance
Column Encryption: 1 column
Log Storage Capacity: 250 GB

Data Identification: 3 TB of storage for data identification, 30,000 database tables
Data Auditing: 3 TB of storage, 3 database instances
Data Detection and Response: 3 TB of storage, 3 database instances
Image Masking: 10,000 images
Column Encryption: 10 columns
Log Storage Capacity: 1,500 GB

Not included. You must purchase each feature separately.

Data Auditing: 1 TB of storage, 3 database instances
Log Storage Capacity: 650 GB

Value-Added Service Fee

When the default specifications cannot meet your business requirements, you can purchase the following value-added service to increase the quota of purchased features or enable additional features. This fee is charged in addition to the edition fee.

Important

The features included in the default specifications of the Premium Edition, Enterprise Edition, and DBAudit (classified protection compliance edition) are enabled by default, so you do not need to enable them again in the or the Value-Added Module.

Premium Edition or Enterprise Edition

Detection and Response

Feature	Pricing
Data Detection and Response - OSS Protection Capacity	1 TB ≤ X ≤ 5 TB: 200 USD/TB/month
	5 TB < X ≤ 10 TB: 150 USD/TB/month
	10 TB < X ≤ 50 TB: 100 USD/TB/month
	50 TB < X ≤ 100 TB: 60 USD/TB/month
	100 TB < X ≤ 500 TB: 30 USD/TB/month
	X > 500 TB: 20 USD per TB per month
Data Detection and Response - Number of Database Instances	1 to 20 instances: 200 USD/instance/month
	21 to 50 instances: 180 USD/instance/month
	51 to 100 instances: 160 USD per instance per month
	101 to 500 instances: 140 USD per instance per month
	More than 500 instances: 120 USD/instance/month

Data audit

Feature	Pricing
Data Audit - Number of Database Instances	0–20 instances: USD 200 per instance per month
	21–50 instances: USD 180 per instance per month
	51 to 100 instances: USD 160 per instance per month
	101–500 instances: USD 140 per instance per month
	More than 500 instances: USD 120 per instance per month
Data Auditing - OSS Protection Capacity	0 TB to 10 TB: 100 USD/TB/month
	11 TB ≤ X ≤ 100 TB: USD 90/TB/month
	101 TB - 500 TB: USD 80/TB/month
	X > 500 TB: USD 50 per TB per month

Data identification

Feature	Pricing
Data Identification - Database Table Quantity	0 - 50,000 tables: 80 USD/10,000 tables/month
	60,000 - 100,000 tables: 60 USD/10,000 tables/month
	110,000 - 500,000 tables: 40 USD/10,000 tables/month
	> 500,000 tables: 20 USD/10,000 tables/month
Data Identification - Storage Identification Capacity	0 - 5 TB: 200 USD/TB/month
	6 - 10 TB: 160 USD/TB/month
	11 - 50 TB: 100 USD/TB/month
	51 - 100 TB: 60 USD/TB/month
	101 - 500 TB: 20 USD/TB/month
	> 500 TB: 10 USD/TB/month

AI-powered data security detection

Note

DSC provides a bonus AI detection quota based on your purchased Data Identification quota:

For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.

When the quota for AI Text Detection or AI Image Detection is exhausted:

Elastic scaling enabled: The system automatically continues AI detection in pay-as-you-go mode. Detection tasks run uninterrupted and classification accuracy is not affected. Excess usage is billed daily. For details, see the Postpaid billing items section.
Elastic scaling not enabled: DSC displays an insufficient quota prompt and automatically switches to standard data identification mode, which may affect classification accuracy. We recommend that you follow the on-screen instructions to upgrade your instance to enable elastic scaling.

Feature	Pricing
AI Text Detection	Number of calls: USD 3/10,000 calls/month
AI Image Detection	Number of calls: USD 6/10,000 calls/month

Image desensitization

Feature	Pricing
Image Masking	Number of image desensitization operations: USD 4/10,000 images/month

Column encryption

Feature	Pricing
Column Encryption-Columns (5 to 50 columns)	5 columns: USD 498/month
	10 columns: 598 USD/month
	15 columns: USD 699/month
	20 columns:USD 798/month
	25 columns:USD 898/month
	30 columns: 996 USD/month
	35 columns: USD 1092/month
	40 columns: 1198 USD/month
	45 columns: 1287 USD/month
	50 columns: 1398 USD/month
Column Encryption-Columns (more than 50 columns)	50<X<=100:25 USD per column per month
	100 < X ≤ 200: USD 20 per column per month
	200<X<=300: USD 15 per column per month
	300<X<=400: 12 USD/column/month
	400<X<=500: 11 USD/column/month
	500<X<=600: USD 10 per column per month
	600<X<=700: 9 USD/column/month
	700<X<=800: 8 USD per column per month
	800<X<=900: 7 USD/column/month
	900 < X <= 1000: USD 6 per column per month
	X > 1000: USD 5 per column per month

Log storage

Note

DSC includes a default amount of log storage with each authorized resource. Each authorized database instance includes 200 GB of log storage, and each 1 TB of authorized OSS protection includes 50 GB of log storage. You can purchase additional Log Storage Capacity.

Feature	Pricing
Log Storage Capacity	1 TB~500 TB:80 USD/TB/month

Value-added Services Only Edition

Detection and Response

Feature	Pricing
Data Detection and Response	Enable Detection and Response (includes 1 TB of OSS protection and 1 database instance): USD 666/month
Data Detection and Response - OSS Protection Capacity	1 TB<=X<=5 TB: USD 200/TB/month
	5 TB < X <= 10 TB: 150 USD/TB/month
	10 TB<X<=50 TB: 100 USD/TB/month
	50 TB<X<=100 TB: USD 60/TB/month
	100 TB<X<=500 TB: 30 USD/TB/month
	X>500 TB: USD 20/TB/month
Data Detection and Response - Number of Database Instances	1 to 20 instances: USD 200 per instance per month
	21–50 instances: 180 USD/instance/month
	51–100 instances: 160 USD/instance/month
	101–500 instances: 140 USD/instance/month
	More than 500 instances: USD 120 per instance per month

Data audit

Feature	Pricing
Data Auditing	Subscription: 200 USD/month
Data Audit - Number of Database Instances	0 to 20 instances: USD 200 per instance per month
	21 to 50 instances: USD 180 per instance per month
	51 to 100 instances: 160 USD per instance per month
	101–500 instances: USD 140 per instance per month
	More than 500 instances: USD 120 per instance per month
Data Auditing - OSS Protection Capacity	0 TB <= X <= 10 TB: 100 USD/TB/month
	11 TB <= X <= 100 TB:USD 90/TB/month
	101 TB <= X <= 500 TB: 80 USD/TB/month
	X > 500 TB: 50 USD/TB/month

Data identification

Feature	Pricing
Data Identification - Database Table Quantity	0 to 50,000 tables: USD 80 per 10,000 tables per month
	50,001 to 100,000 tables: 60 USD per 10,000 tables per month
	100,001 to 500,000 tables: 40 USD per 10,000 tables per month
	More than 500,000 tables: USD 20 per 10,000 tables per month
Data Identification - Storage Identification Capacity	0 TB <= X <= 5 TB: USD 200/TB/month
	6 TB <= X <= 10 TB: 160 USD/TB/month
	11 TB <= X <= 50 TB: USD 100/TB/month
	51 TB <= X <= 100 TB: USD 60/TB/month
	101 TB <= X <= 500 TB: USD 20/TB/month
	X > 500 TB: USD 10 per TB per month

AI-powered data security detection

Note

DSC provides a bonus AI detection quota based on your purchased Data Identification quota:

For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.

When the quota for AI Text Detection or AI Image Detection is exhausted:

Elastic scaling enabled: The system automatically continues AI detection in pay-as-you-go mode. Detection tasks run uninterrupted and classification accuracy is not affected. Excess usage is billed daily. For details, see the Postpaid billing items section.
Elastic scaling not enabled: DSC displays an insufficient quota prompt and automatically switches to standard data identification mode, which may affect classification accuracy. We recommend that you follow the on-screen instructions to upgrade your instance to enable elastic scaling.

Feature	Pricing
AI Text Detection	Number of calls: USD 3/10,000 calls/month
AI Image Detection	Number of calls: USD 6/10,000 calls/month

Image desensitization

Feature	Pricing
Image Masking	Desensitized images: USD 4 per 10,000 images per month

Log storage

Note

DSC includes a default amount of log storage with each authorized resource. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. You can purchase additional Log Storage Capacity.

Feature	Pricing
Log Storage Capacity	1 TB–500 TB: USD 80/TB/month

DBAudit (Classified Protection Compliance Edition)

Data audit

Feature	Pricing
Data Audit - Number of Database Instances	0 to 20 instances: USD 200 per instance per month
	21 to 50 instances: USD 180 per instance per month
	51 to 100 instances: USD 160 per instance per month
	101–500 instances: USD 140 per instance per month
	More than 500 instances: USD 120 per instance per month
Data Auditing - OSS Protection Capacity	0 TB <= X <= 10 TB: USD 100/TB/month
	11 TB <= X <= 100 TB: USD 90/TB/month
	101 TB <= X <= 500 TB: 80 USD/TB/month
	X > 500 TB: USD 50/TB/month

Log storage

Note

DSC includes a default amount of log storage space. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. If the default storage is insufficient, you can purchase additional Log Storage Capacity.

Feature	Pricing
Log Storage Capacity	1 TB~500 TB: 80 USD/TB/month

Billing method

DSC supports the following billing methods. For more information, see Billing methods.

Subscription (prepaid)

Billing formula: Total fee = (edition unit price +value-added service unit price) × subscription duration (months)
Billing cycle: Calculated based on UTC+8. The billing cycle starts at the exact time you purchase or renew a DSC instance and ends at 00:00:00 UTC+8 on the day after the expiration date.

Pay-as-you-go (postpaid)

After elastic scaling is enabled, when the prepaid quota is exhausted, the system automatically switches to pay-as-you-go billing. Excess usage beyond the prepaid quota is billed daily based on actual consumption. For applicable features and postpaid pricing, see the Postpaid billing items section.

Postpaid billing items

After elastic scaling is enabled, when the prepaid quota for the following features is exhausted, the system automatically continues to provide the service at pay-as-you-go prices. Excess usage is billed daily based on actual consumption. Currently, only Data Identification - Database Table Quantity, Data Identification - Storage Identification Capacity, AI Text Detection, and AI Image Detection support pay-as-you-go billing. All other features support only subscription billing.

Data identification (postpaid)

Feature	Pricing
Data Identification - Database Table Quantity	0–50,000 tables: 0.012 USD/table
	50,001–100,000 tables: 0.009 USD/table
	100,001–500,000 tables: 0.006 USD/table
	More than 500,000 tables: 0.003 USD/table
Data Identification - Storage Identification Capacity	0–5,120 GB: 0.3 USD/GB
	5,121–10,240 GB: 0.24 USD/GB
	10,241–51,200 GB: 0.15 USD/GB
	51,201–102,400 GB: 0.09 USD/GB
	102,401–512,000 GB: 0.03 USD/GB
	More than 512,000 GB: 0.015 USD/GB

AI data security detection (postpaid)

Feature	Pay-as-you-go pricing
AI Text Detection	Number of calls: 0.00045 USD/call
AI Image Detection	Number of calls: 0.0009 USD/call

Elastic scaling

After elastic scaling is enabled, when the prepaid quota of your DSC instance is exhausted, the system automatically continues to provide services in pay-as-you-go mode. Identification, detection, and other tasks are not interrupted. Excess usage beyond the prepaid quota is billed daily at pay-as-you-go prices, and bills are pushed the next day.

How to enable

New users: Elastic scaling is enabled by default after you purchase a DSC instance. No additional configuration is required.
Existing users: Log on to the Data Security Center console. On the Overview page, click Upgrade to upgrade your instance. Elastic scaling is automatically enabled after the upgrade.

When elastic scaling is enabled, the system automatically continues services when the prepaid quota reaches the limit. No manual scaling is required. Classification, grading, data auditing, and other tasks run without interruption.
When elastic scaling is not enabled, related services are suspended after the prepaid quota is exhausted. Services resume only after you manually Upgrade to add more quota.
Pay-as-you-go bills are pushed the next day. You can view detailed usage and charges on the Expenses and Costs console's Bill Details page.

Billing for related products

Adding data assets to DSC may incur fees for reading data and storing audit logs. These fees are charged by the corresponding cloud services to the account that owns the assets.

For example, when you enable native log collection for OSS assets, DSC creates a dedicated project in Simple Log Service (SLS). The default data retention period for the Logstore in this project is 7 days.

If the data in the Logstore does not exceed 900 GB and the retention period does not exceed 7 days, no storage fees are incurred.
If the retention period exceeds 7 days or the data exceeds 900 GB, storage fees are charged by SLS to the account that owns the assets.

For more information, see Billing for related products.

Bills and cost management

View usage and bills

You can view DSC resource usage and billing details in the Alibaba Cloud console.

View usage: Log on to the Data Security Center console. On the Overview page, view the specifications and expiration time of your instances.
View bills: Log on to the Expenses and Costs console's Bill Details page. Select Data Security Center as the product to view and download your bills. For specific steps, see Bill Details.

Change instance specifications

Upgrade: If your current DSC edition or specifications do not meet your business requirements, go to the Overview page of the Data Security Center console and click Upgrade to adjust instance specifications. You must pay the price difference between the new and existing configurations. For more information, see Upgrade an instance.
Downgrade: DSC does not support downgrades. If you have special downgrade requirements, contact your account manager for assistance.

Renew an instance

To ensure continuous security protection, renew your DSC instance before it expires.

Expiration reminder: The system sends reminders by text message, email, and other channels 7 days before your instance expires.
Impact of expiration: After an instance expires, it enters the Expired state. The system retains all configurations and data for 15 days after expiration. If you renew within this period, the service resumes. If you do not renew within 15 days, the DSC instance and all its configurations and data are permanently deleted and cannot be recovered.
How to renew: On the Overview page of the Data Security Center console, click Renew Subscription.

For more information about renewal rules and procedures, see Renew an instance.

Unsubscribe from an instance

Newly purchased DSC instances, including the DBAudit (Classified Protection Compliance Edition), are eligible for a 5-day unconditional refund. You can unsubscribe on the unsubscription page. Instances used for more than 5 days are not eligible for unconditional refunds.
For renewal orders, you can request a 5-day unconditional refund before the new service cycle begins. After the new service cycle starts, refunds are not supported.

For more information, see Refund policy.

Overdue payments

When your account balance is insufficient, your account enters an overdue state. Since DSC uses subscription billing, existing instances continue to function normally within the subscription period. However, you cannot upgrade instances, renew subscriptions, or purchase other resources until the overdue payment is settled.