Currently, Sensitive Data Discovery and Protection (SDDP) supports the pay-as-you-go billing method. This topic describes how SDDP is billed in the pay-as-you-go mode.

Billable items

The billable items for SDDP are as follows:

  • Sensitive data detection for structured and unstructured data
  • Data de-identification

Billing cycle

SDDP is billed based on your daily usage. Within three hours after a billing cycle (that is, one day) ends, a pay-as-you-go bill is generated, which lists the usage and fee details of that day. You can view the bill information on the Billing Management page.

  • For sensitive data detection, you are only charged for tables and objects for which the scanning is completed within the current billing cycle. For example, if the scanning of tables and objects starts on one day but ends on the next day, the charge is included in the bill of the second day.
  • For data de-identification, only de-identification tasks that are completed within the current billing cycle are charged.


Item Data source Price (USD) Unit
Sensitive data detection Structured data, which is billed based on the total number of tables: MaxCompute, Relational Database Service (RDS), user-created databases hosted on Elastic Compute Service (ECS), Distributed Relational Database Service (DRDS), and Apsara PolarDB 0.6 Table
Unstructured data, which is billed based on the total size of objects: Object Storage Service (OSS) 0.6 GB
Data de-identification RDS, MaxCompute, and OSS 0.5 100,000 cells
Anomaly detection RDS, MaxCompute, and OSS This feature is free of charge now because it is in the public preview stage. N/A
  • After SDDP is authorized to access your data for the first time, SDDP scans all data in authorized MaxCompute projects, RDS databases, or OSS buckets. The fee for the full scan is calculated.
  • Structured data is re-scanned if the schema of the data changes. The tables whose schema is changed in the related projects and databases are re-scanned and the corresponding fee is calculated.
  • Unstructured data is re-scanned if the data changes, for example, when OSS objects are modified. The changed data is re-scanned and the corresponding fee is calculated.
  • When you add or modify a custom detection rule, a full scan is triggered.
  • For OSS, the minimum data size to be charged for each bucket is 0.1 GB. That is, when the total scanned data in a single bucket is less than 100 MB, the data is billed as 0.1 GB.
  • One terabyte is billed as 1,024 GB.


A user has 180 tables stored in an RDS database. After SDDP is authorized to access the RDS database for the first time, SDDP scans all the 180 tables in the database for sensitive data. The fee for this full scan is calculated as follows: 180 × 0.6 = USD 108. On the next day, the user changes the schema of six tables in the RDS database. Then, SDDP re-scans these six tables. The fee for the re-scan is calculated as follows: 6 × 0.6 = USD 3.6. By the end of the second day, the total fee charged is calculated as follows: 108 + 3.6 = USD 111.6.

Overdue payments

Alibaba Cloud has updated the policy for shutting down instances upon overdue payments for all cloud services. In most cases, after the payment for an instance is overdue for 15 days, the instance is shut down.
Note Alibaba Cloud will notify or remind you of the risk of instance shutdown due to overdue payments. We recommend that you pay your unpaid bill in time to avoid impacts on your business.

Related topics

Sensitive data scan and detection