Data Security Center:Feature comparison of different editions

Sensitive data identification and classification and grading

Classification and Grading lets you define sensitivity levels for your data assets. Data Identification scans databases and unstructured files to detect sensitive data automatically. The Enterprise Edition provides the highest detection capacity; the Free and Value-added Service-only editions share the same base quota.

Configuration risks

Configuration Risks checks your Alibaba Cloud environment against security best practices and compliance baselines. The Free Edition covers the Alibaba Cloud Data Security Best Practices baseline only; the PIPL-based Security Baseline Check requires a paid edition.

OSS image masking

OSS Image Masking detects and masks sensitive content in images stored in OSS — for example, ID numbers in scanned documents. This feature is included in the Enterprise Edition; Premium and Value-added Service-only editions can purchase it as an add-on.

Column encryption

Column Encryption encrypts specific database columns to protect sensitive fields such as ID numbers or phone numbers. All editions that support this feature include at least one encrypted column by default; purchase a larger quota to encrypt more columns.

Data Detection and Response

Data Detection and Response monitors your environment for AK leaks and database credential exposure. The Enterprise Edition includes both detection and event management; the Free Edition supports detection only.

Native Data Auditing and Log Analysis

Native Data Auditing records data access operations across databases and OSS. Log Analysis stores audit logs for investigation and compliance reporting. All editions include Native Data Auditing; log storage allocation and data quotas vary by edition.

System settings