Billing overview
Data Security Center (DSC) provides data security capabilities for your cloud data assets, such as ApsaraDB RDS and Object Storage Service (OSS). These capabilities include sensitive data discovery, data audit, and threat detection.
DSC charges consist of an edition fee, the Feature Extension Fee, and the , both billed on a subscription (prepaid) basis.
Edition fee: The base fee for using DSC. You select an edition, such as Premium or Enterprise, that determines the data security capabilities available to you.
Feature Extension Fee: An additional fee that applies when the default quotas of your edition, such as the number of database instances or the storage capacity available for scanning, do not meet your business requirements. You can purchase additional capacity or enable extra features as needed.
Billable items
Instance edition fees
The following table shows the base price and default specifications for each DSC edition. For a detailed comparison of features across editions, see Feature Differences Across Editions.
In addition to the paid editions listed below, DSC also offers a Free Edition and a 7-day trial version. For more information, see Free Edition and 7-day trial version.
Item | Premium Edition | Enterprise Edition | Value-added Services Only Edition | DBAudit (Classified Protection Compliance Edition) |
Pricing | 3,200 CNY/month | 7,800 CNY/month | None | 3,000 CNY/month |
Default specifications |
|
| Not included. You must purchase each feature separately. |
|
Feature Extension Fee
When the default specifications cannot meet your business requirements, you can purchase the following feature extension to increase the quota of purchased features or enable additional features. This fee is charged in addition to the edition fee.
The features included in the default specifications of the Premium Edition, Enterprise Edition, and DBAudit (classified protection compliance edition) are enabled by default, so you do not need to enable them again in the Feature Extension Module or the .
Premium Edition or Enterprise Edition
Detection & Response and Audit
Feature | Pricing |
Detection and Response & Audit | Enable Detection & Response and Audit for 1,500 CNY per month. |
Detection & Response and Data Audit - OSS | 1 TB ≤ X ≤ 5 TB: CNY 1,050 per TB per month |
5 TB < X <= 10 TB: 910 CNY/TB/month | |
Over 10 TB up to 50 TB: 665 CNY/TB/month | |
Greater than 50 TB and up to 100 TB: 525 CNY/TB/month | |
Over 100 TB to 500 TB: 350 CNY/TB/month | |
Over 500 TB: 210 CNY/TB/month | |
Detection & Response and Data Audit - Database | 1 to 20 instances: 1,400 CNY per instance per month |
21 to 50 instances: 1,260 CNY/instance/month | |
51 to 100 instances: 1,120 CNY per instance per month | |
101 to 500 instances: CNY 980 per instance per month | |
For over 500 instances: 840 CNY per instance per month |
Data identification
Feature | Pricing |
Data Identification - Database Table Quantity | 0 - 50,000 tables:400 CNY/10,000 tables/month |
60,000 - 100,000 tables:300 CNY/10,000 tables/month | |
110,000 - 500,000 tables:200 CNY/10,000 tables/month | |
> 500,000 tables:100 CNY/10,000 tables/month | |
Data Identification - Storage Identification Capacity | 0 - 5 TB:1000 CNY/TB/month |
6 - 10 TB:800 CNY/TB/month | |
11 - 50 TB:500 CNY/TB/month | |
51 - 100 TB:300 CNY/TB/month | |
101 - 500 TB:100 CNY/TB/month | |
> 500 TB:50 CNY/TB/month |
AI-powered data security detection
DSC provides a bonus AI detection quota based on your purchased Data Identification quota:
For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.
When your AI detection quota is exhausted, a window appears to indicate that the quota is insufficient. You can upgrade your instance as prompted on the page.
Feature | Pricing |
AI Text Detection | Number of calls: 15 CNY/10,000 calls/month |
AI Image Detection | Number of calls: 30 CNY/10,000 calls/month |
Image desensitization
Feature | Pricing |
Image Masking | Number of image desensitization operations: CNY 20/10,000 images/month |
Column encryption
Feature | Pricing |
Column Encryption-Columns (5 to 50 columns) | 5 columns: CNY 2,688/month |
10 columns: 3688 CNY/month | |
15 columns: CNY 4680/month | |
20 columns:CNY 5688/month | |
25 columns:CNY 6,688/month | |
30 columns: 7680 CNY/month | |
35 columns: CNY 8680/month | |
40 columns: 9688 CNY/month | |
45 columns: 10665 CNY/month | |
50 columns: 11688 CNY/month | |
Column Encryption-Columns (more than 50 columns) | 50<X<=100:156.88 CNY per column per month |
100 < X ≤ 200: CNY 88.44 per column per month | |
200<X<=300: CNY 65.6 per column per month | |
300<X<=400: 54.22 CNY/column/month | |
400<X<=500: 47.37 CNY/column/month | |
500<X<=600: CNY 42.81 per column per month | |
600<X<=700: 39.55 CNY/column/month | |
700<X<=800: 37.11 CNY per column per month | |
800<X<=900: 35.2 CNY/column/month | |
900 < X <= 1000: CNY 33.68 per column per month | |
X > 1000: CNY 25 per column per month |
Log storage
DSC includes a default amount of log storage with each authorized resource. Each authorized database instance includes 200 GB of log storage, and each 1 TB of authorized OSS protection includes 50 GB of log storage. You can purchase additional Log Storage Capacity.
Feature | Pricing |
Log Storage Capacity | 1 TB~500 TB:400 CNY/TB/month |
Value-added Services Only Edition
Detection & Response and Audit
Feature | Pricing |
Detection and Response & Audit | Enabling Detection and Response & Audit: 1,500 CNY/month |
Detection & Response and Data Audit - OSS | 1 TB <= X <= 5 TB: 1,050 CNY/TB/month |
5 TB < X <= 10 TB: 910 CNY/TB/month | |
10 TB < X <= 50 TB: 665 CNY/TB/month | |
50 TB < X <= 100 TB: 525 CNY/TB/month | |
100 TB < X <= 500 TB: 350 CNY/TB/month | |
X > 500 TB: 210 CNY/TB/month | |
Detection & Response and Data Audit - Database | 1 to 20 instances: 1,400 CNY/instance/month |
21 to 50 instances: 1,260 CNY/instance/month | |
51 to 100 instances: 1,120 CNY/instance/month | |
101 to 500 instances: 980 CNY/instance/month | |
More than 500 instances: 840 CNY/instance/month |
Detection and Response
Feature | Pricing |
Data Detection and Response | Enable Detection and Response (includes 1 TB of OSS protection and 1 database instance): CNY 3,888/month |
Data Detection and Response - OSS Protection Capacity | 1 TB<=X<=5 TB: CNY 1,000/TB/month |
5 TB < X <= 10 TB: 800 CNY/TB/month | |
10 TB<X<=50 TB: 500 CNY/TB/month | |
50 TB<X<=100 TB: CNY 300/TB/month | |
100 TB<X<=500 TB: 100 CNY/TB/month | |
X>500 TB: CNY 50/TB/month | |
Data Detection and Response - Number of Database Instances | 1 to 20 instances: CNY 1000 per instance per month |
21–50 instances: 900 CNY/instance/month | |
51–100 instances: 800 CNY/instance/month | |
101–500 instances: 700 CNY/instance/month | |
More than 500 instances: CNY 600 per instance per month |
Data audit
Feature | Pricing |
Data Auditing | Subscription: 1000 CNY/month |
Data Audit - Number of Database Instances | 0 to 20 instances: CNY 1,000 per instance per month |
21 to 50 instances: CNY 900 per instance per month | |
51 to 100 instances: 800 CNY per instance per month | |
101–500 instances: CNY 700 per instance/month | |
More than 500 instances: CNY 600 per instance per month | |
Data Auditing - OSS Protection Capacity | 0 TB <= X <= 10 TB: 500 CNY/TB/month |
11 TB <= X <= 100 TB:CNY 450/TB/month | |
101 TB <= X <= 500 TB: 400 CNY/TB/month | |
X > 500 TB: 250 CNY/TB/month |
Data identification
Feature | Pricing |
Data Identification - Database Table Quantity | 0 to 50,000 tables: CNY 400 per 10,000 tables per month |
50,001 to 100,000 tables: 300 CNY per 10,000 tables per month | |
100,001 to 500,000 tables: 200 CNY per 10,000 tables per month | |
More than 500,000 tables: CNY 100 per 10,000 tables per month | |
Data Identification - Storage Identification Capacity | 0 TB <= X <= 5 TB: CNY 1000/TB/month |
6 TB <= X <= 10 TB: 800 CNY/TB/month | |
11 TB <= X <= 50 TB: CNY 500/TB/month | |
51 TB <= X <= 100 TB: CNY 300/TB/month | |
101 TB <= X <= 500 TB: CNY 100/TB/month | |
X > 500 TB: CNY 50 per TB per month |
AI-powered data security detection
DSC provides a bonus AI detection quota based on your purchased Data Identification quota:
For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.
When your AI detection quota is exhausted, a window appears to indicate that the quota is insufficient. You can upgrade your instance as prompted on the page.
Feature | Pricing |
AI Text Detection | Number of calls: 15 CNY/10,000 calls/month |
AI Image Detection | Number of calls: 30 CNY/10,000 calls/month |
Image desensitization
Feature | Pricing |
Image Masking | Desensitized images: CNY 20 per 10,000 images per month |
Log storage
DSC includes a default amount of log storage with each authorized resource. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. You can purchase additional Log Storage Capacity.
Feature | Pricing |
Log Storage Capacity | 1 TB–500 TB: CNY 400/TB/month |
DBAudit (Classified Protection Compliance Edition)
Data audit
Feature | Pricing |
Data Audit - Number of Database Instances | 0 to 20 instances: CNY 1000 per instance per month |
21 to 50 instances: CNY 900/instance/month | |
51 to 100 instances: CNY 800/instance/month | |
101–500 instances: CNY 700/instance/month | |
More than 500 instances: CNY 600/instance/month | |
Data Auditing - OSS Protection Capacity | 0 TB <= X <= 10 TB: CNY 500/TB/month |
11 TB <= X <= 100 TB: CNY 450/TB/month | |
101 TB <= X <= 500 TB: 400 CNY/TB/month | |
X > 500 TB: CNY 250/TB/month |
Log storage
DSC includes a default amount of log storage space. Each authorized database instance includes 200 GB, and each 1 TB of authorized OSS protection includes 50 GB. If the default storage is insufficient, you can purchase additional Log Storage Capacity.
Feature | Pricing |
Log Storage Capacity | 1 TB~500 TB: 400 CNY/TB/month |
Billing method
DSC uses the subscription billing method. For more information about billing methods, see Billing methods.
Billing formula:
Total fee = (edition unit price +feature extension unit price) × subscription duration (months)Billing cycle: Calculated based on UTC+8. The billing cycle starts at the exact time you purchase or renew a DSC instance and ends at 00:00:00 UTC+8 on the day after the expiration date.
Billing for related products
Adding data assets to DSC may incur fees for reading data and storing audit logs. These fees are charged by the corresponding cloud services to the account that owns the assets.
For example, when you enable native log collection for OSS assets, DSC creates a dedicated project in Simple Log Service (SLS). The default data retention period for the Logstore in this project is 7 days.
If the data in the Logstore does not exceed 900 GB and the retention period does not exceed 7 days, no storage fees are incurred.
If the retention period exceeds 7 days or the data exceeds 900 GB, storage fees are charged by SLS to the account that owns the assets.
For more information, see Billing for related products.
Bills and cost management
View usage and bills
You can view DSC resource usage and billing details in the Alibaba Cloud console.
View usage: Log on to the Data Security Center console. On the Overview page, view the specifications and expiration time of your instances.
View bills: Log on to the Expenses and Costs console's Bill Details page. Select Data Security Center as the product to view and download your bills. For specific steps, see View and Analyze Bills.
Invoices and tax rates: You can request an invoice after a payment is made. The product pricing and bills on the Alibaba Cloud China website (www.aliyun.com) are tax-inclusive. You do not need to pay additional taxes when an invoice is issued. For more information about tax rates, invoicing entities, and specific operations, see Invoicing entities and tax rates.
Change instance specifications
Upgrade: If your current DSC edition or specifications do not meet your business requirements, go to the Overview page of the Data Security Center console and click Upgrade to adjust instance specifications. You must pay the price difference between the new and existing configurations. For more information, see Upgrade an instance.
Downgrade: DSC does not support downgrades. If you have special downgrade requirements, contact your account manager for assistance.
Renew an instance
To ensure continuous security protection, renew your DSC instance before it expires.
Expiration reminder: The system sends reminders by text message, email, and other channels 7 days before your instance expires.
Impact of expiration: After an instance expires, it enters the Expired state. The system retains all configurations and data for 15 days after expiration. If you renew within this period, the service resumes. If you do not renew within 15 days, the DSC instance and all its configurations and data are permanently deleted and cannot be recovered.
How to renew: On the Overview page of the Data Security Center console, click Renew Subscription.
For more information about renewal rules and procedures, see Renew an instance.
Unsubscribe from an instance
Newly purchased DSC instances, including the DBAudit (Classified Protection Compliance Edition), are eligible for a 5-day unconditional refund. You can unsubscribe on the unsubscription page. Instances used for more than 5 days are not eligible for unconditional refunds.
For renewal orders, you can request a 5-day unconditional refund before the new service cycle begins. After the new service cycle starts, refunds are not supported.
For more information, see Refund policy.
Overdue payments
When your account balance is insufficient, your account enters an overdue state. Since DSC uses subscription billing, existing instances continue to function normally within the subscription period. However, you cannot upgrade instances, renew subscriptions, or purchase other resources until the overdue payment is settled.