Data Security Center (DSC) helps you manage the entire lifecycle of your sensitive data, from discovery and detection to governance and auditing. This topic describes how to purchase a paid subscription for a DSC instance.
Before you begin
Before you purchase Data Security Center, note the following:
Limitations: Some regions and data asset types have usage limitations. For more information, see Supported regions.
Free trial: DSC provides a free edition and a 7-day Enterprise trial. To evaluate its features, we recommend activating the free edition or the 7-day trial before you purchase a paid edition.
Paid edition selection
DSC provides four paid editions: Advanced Edition, Enterprise Edition, Database Auditing (MLPS-compliant Edition), and Value-added Plan. Select an edition based on your business needs. For a detailed comparison and billing information, see Edition comparison and Billing.
Edition | Advanced Edition | Enterprise Edition | Value-added Plan | Database Auditing (MLPS-compliant Edition) |
Use cases | Designed for small-scale customers, this edition provides basic security protection and supports data identification and data auditing with limited quotas. | Ideal for small and medium-sized enterprises that require comprehensive data security and compliance. | Lets you purchase individual features on demand. This plan is suitable for large businesses with specific purchasing requirements. | Designed to meet MLPS compliance requirements. It replaces traditional database auditing and supports data auditing for various data types, including databases, Object Storage Service (OSS), and big data. |
Features included in the base price |
|
| Not included |
|
Additional paid features | All features can be enabled or have their quotas extended for an additional fee. | Only the quotas for data auditing and log storage can be extended for an additional fee. | ||
Purchase Data Security Center
Go to the DSC buy page.
In the version section, select your desired DSC edition. To extend the features beyond the base specifications of the edition, configure the following options.
Advanced Edition or Enterprise Edition
Parameter
Description
Detection and Response & Audit
data auditing: Collects logs and sends alerts for attacks and anomalous operations.
Data Detection and Response: Detects and responds to security events such as database credential and AccessKey pair leaks.
Enables both Data Detection and Response and data auditing. You can then specify quotas for Detection & Response and Data Audit - OSS and Detection & Response and Data Audit - Database. The specified quotas apply to both features.
Data Identification
To extend the quota for sensitive data identification, enable this feature. You can then specify values for Data Identification - Database Table Quantity and Data Identification - Storage Identification Capacity to extend the quota.
NoteEach scan of a data asset consumes quota. For example, scanning a table three times consumes the quota for three database tables.
AI Data Security Detection
Uses AI large language models to accurately identify sensitive information in text and images. Specify the number of API calls for AI Text Detection and AI Image Detection based on your business needs.
Bonus AI detection quota rules:
DSC provides a bonus AI detection quota based on your purchased Data Identification quota:
For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.
AI detection quota consumption rules:
Offline scan scenarios:
Scanning 1 TB of text files consumes approximately 100,000 text detection calls.
Scanning 10,000 data tables consumes approximately 3,000,000 text detection calls.
Scanning 1 TB of images consumes approximately 1,000,000 image detection calls.
API call scenarios:
Text detection: Each text input that contains at least one piece of sensitive information consumes one call. The text for a single input cannot exceed 2,000 characters. Text that exceeds the limit is not scanned.
Image detection: Each scanned image consumes one call. A single image cannot exceed 10 MB. Images that exceed the limit are not scanned.
NoteA notification appears when your AI detection quota is exhausted. Follow the on-screen instructions to upgrade your plan.
Image Masking
Enables the image masking feature. You can then specify a value for Image Masking Count to extend the quota.
NoteA single image can be masked multiple times, with each operation consuming one quota unit.
Column Encryption
To extend the quota for database column encryption, enable this feature and specify a value for Columns.
Log Storage Capacity
DSC includes a default amount of log storage: 200 GB for each authorized database instance and 50 GB for every 1 TB of authorized OSS protection capacity. If the included storage is insufficient, you can enable this feature and specify a value for Log Storage Capacity to purchase more.
ImportantIf your log storage is exhausted, new logs will not be saved, which can result in data loss.
Duration
Select the subscription duration. We recommend enabling Auto-renewal to prevent service interruptions. When enabled, your DSC instance renews automatically upon expiration.
Database Auditing (MLPS-compliant Edition)
Parameter
Description
Data Auditing
To extend the data auditing quota, enable this feature. You can then specify values for Data Auditing - OSS Protection Capacity and Data Auditing - Number of Database Instances to extend the audit quota.
Log Storage Capacity
DSC includes a default amount of log storage: 200 GB for each authorized database instance and 50 GB for every 1 TB of authorized OSS protection capacity. If the included storage is insufficient, you can enable this feature and specify a value for Log Storage Capacity to purchase more.
ImportantIf your log storage is exhausted, new logs will not be saved, which can result in data loss.
Duration
Select the subscription duration. We recommend enabling Auto-renewal to prevent service interruptions. When enabled, your DSC instance renews automatically upon expiration.
Value-added Plan
Parameter
Description
Detection and Response & Audit
data auditing: Collects logs and sends alerts for attacks and anomalous operations.
Data Detection and Response: Detects and responds to security events such as database credential and AccessKey pair leaks.
Enables both Data Detection and Response and data auditing at a discounted bundle price. You can then specify quotas for Detection & Response and Data Audit - OSS and Detection & Response and Data Audit - Database. The specified quotas apply to both features.
Data Detection and Response
Enables the Data Detection and Response feature. You can then specify protection quotas for Data Detection and Response - OSS Protection Capacity and Data Detection and Response - Number of Database Instances.
Data Auditing
Enables the data auditing feature. You can then specify audit quotas for Data Auditing - OSS Protection Capacity and Data Auditing - Number of Database Instances.
Data Identification
Enables the data identification feature to identify and classify sensitive data. You can then specify quotas for Data Identification - Database Table Quantity and Data Identification - Storage Identification Capacity.
NoteEach scan of a data asset consumes quota. For example, scanning a table three times consumes the quota for three database tables.
AI Data Security Detection
Uses AI large language models to accurately identify sensitive information in text and images. Specify the number of API calls for AI Text Detection and AI Image Detection based on your business needs.
Bonus AI detection quota rules:
DSC provides a bonus AI detection quota based on your purchased Data Identification quota:
For every 10,000 tables purchased for Data Identification - Database Table Quantity, you receive a bonus of 60,000 AI Text Detection calls.
For every 1 TB of storage purchased for Data Identification - Storage Identification Capacity, you receive a bonus of 4,000 AI Text Detection calls and 4,000 AI Image Detection calls.
AI detection quota consumption rules:
Offline scan scenarios:
Scanning 1 TB of text files consumes approximately 100,000 text detection calls.
Scanning 10,000 data tables consumes approximately 3,000,000 text detection calls.
Scanning 1 TB of images consumes approximately 1,000,000 image detection calls.
API call scenarios:
Text detection: Each text input that contains at least one piece of sensitive information consumes one call. The text for a single input cannot exceed 2,000 characters. Text that exceeds the limit is not scanned.
Image detection: Each scanned image consumes one call. A single image cannot exceed 10 MB. Images that exceed the limit are not scanned.
NoteA notification appears when your AI detection quota is exhausted. Follow the on-screen instructions to upgrade your plan.
Image Masking
Enables the image masking feature. You can then specify a quota for Image Masking Count.
NoteA single image can be masked multiple times, with each operation consuming one quota unit.
Column Encryption
Enables the column encryption feature to encrypt sensitive columns in your databases. You can then specify a quota for Columns (unit: columns).
ImportantThis feature requires the Data Identification feature. You must purchase a sufficient Data Identification quota.
Log Storage Capacity
DSC includes a default amount of log storage: 200 GB for each authorized database instance and 50 GB for every 1 TB of authorized OSS protection capacity. If the included storage is insufficient, you can enable this feature and specify a value for Log Storage Capacity to purchase more.
ImportantIf your log storage is exhausted, new logs will not be saved, which can result in data loss.
Duration
Select the subscription duration. We recommend enabling Auto-renewal to prevent service interruptions. When enabled, your DSC instance renews automatically upon expiration.
Click Buy Now and complete the payment.