Data Security Center (DSC) uses subscription billing. This guide walks you through selecting an edition, configuring value-added services, and completing your purchase.
Prerequisites
Before you begin, confirm that:
Your data assets are in a supported region
Your data asset types are supported by DSC
You have reviewed the edition comparison and pricing overview to choose the right edition and estimate your resource needs
To activate DSC at no cost, see Activate the free edition of Data Security Center instead of following this guide.
Purchase a DSC subscription
Go to the Data Security Center purchase page and log in to your Alibaba Cloud account.
Set Edition based on your organization's size and security requirements. Premium Edition: Image Masking and Detection and Response are not included by default. Purchase them as value-added services, or upgrade to Enterprise Edition or Ultimate Edition. DBAudit Edition: To increase audit capacity beyond the defaults, purchase value-added services. Value-added Services Only — free trial: Enabling Detection and Response grants a one-month free trial of Data Discovery and Data Audit. After the trial ends, upgrade your DSC instance or purchase sufficient resources to continue using those features.
After purchasing any paid edition, you receive a free monthly quota of 500 database instances and 500 PB of storage for data protection. This quota cannot be extended.
Configure value-added services as needed.
WarningSize your Log Storage Capacity carefully. If log volume exceeds your purchased capacity, new logs from protected assets will not be stored.
Parameter Description Detection And Response Value-added serviceEnables threat detection and response for Object Storage Service (OSS), ApsaraDB RDS, and PolarDB. Enabled by default. Detection And Response - OSS Protected Data Size Value-added serviceAmount of OSS data to protect. Valid values: 1 TB to 9,999,999,999 TB. Free monthly quota: 1 TB. Detection And Response - Number Of Database Instances Value-added serviceNumber of database instances to protect. Valid values: 1 to 999,999,999. Free monthly quota: 1 instance. Data Audit Value-added serviceEnables the Data Audit service. Data Audit - OSS Protected Data Size Value-added serviceTotal capacity of OSS buckets to audit. Valid values: 1 TB to 9,999,999,999 TB. Each TB of OSS storage includes 50 GB of audit log storage per month by default. Data Audit - Number Of Database Instances Value-added serviceNumber of database instances to audit. Valid values: 1 to 9,999,999,999. Each database instance includes 200 GB of audit log storage per month by default. Data Discovery Value-added serviceEnables the Data Discovery service. Data Discovery - Number Of Database Tables Value-added serviceNumber of database tables to scan, in units of 10,000 tables. Valid values: 1 to 9,999,999,999. If the same table is scanned three times, it counts as three tables against your quota. Data Discovery - Storage Scan Size Value-added serviceTotal capacity of OSS buckets and Simple Log Service (SLS) projects to scan, in TB. Valid values: 1 to 9,999,999,999. If a 1 TB bucket is scanned three times, 3 TB is deducted from your quota. Enhanced Image Recognition Value-added serviceEnables enhanced image recognition. Purchasing an Image Masking quota grants an equal Enhanced Image Recognition quota automatically. Purchase additional quota here if your free allocation is insufficient. Enhanced Image Recognition Quota Value-added serviceEstimated number of images to scan and recognize per month, in units of 10,000 images. Image Masking Value-added serviceEnables image masking. Number Of Images To Mask Value-added serviceEstimated number of images to mask per month, in units of 10,000 images. If the same image is masked three times, it counts as three images against your quota. Column Encryption Value-added serviceEnables column encryption. Number Of Columns To Encrypt Value-added serviceEstimated number of columns to encrypt per month. Purchase step size: 5. Log Storage Value-added serviceStores operation logs for assets with Data Audit enabled. Enabled by default. Default free allocation: 200 GB per database instance per month, and 50 GB per TB of OSS data per month. For details, see Free resource specifications. Log Storage Capacity Value-added serviceAdditional log storage, from 1 TB to 500 TB. Set Subscription Duration, then click Buy Now and complete the payment.
| Edition | Best for | Default specifications |
|---|---|---|
| Enterprise Edition | Medium-sized enterprises | Data Discovery: 3 TB storage, 30,000 database tables; Data Audit: 3 TB OSS data, 3 database instances; Detection and Response: 3 TB OSS data, 3 database instances; Enhanced Image Recognition: 10,000 images; Image Masking: 10,000 images; Column Encryption: 10 columns |
| Premium Edition | Small-sized businesses | Data Discovery: 1 TB storage, 10,000 database tables; Data Audit: 1 TB OSS data, 1 database instance; Column Encryption: 1 column |
| DBAudit (Classified Protection Compliance Edition) | Classified protection compliance | Data Audit: 1 TB OSS data, 3 database instances |
| Value-added Services Only | Purchasing individual features without a base edition | N/A |
What's next
After your purchase is confirmed, start using DSC:
Quickly classify and categorize sensitive data — run your first sensitive data scan
Billing overview for DSC — understand how charges are calculated for the resources you configured