Answer Brief
Mend has launched a Taiwan cloud region for its application security SaaS on AWS's Asia Pacific (Taipei) region, iThome reports. Distributor Systex says scan and analysis information can stay in Taiwan, with lower latency. The source offers no measured performance data or specifics on data scope.
Signal Timeline
A quick visual path for analysts before reading the full brief.
- 1
Systex began distributing Mend in Taiwan, per the source.
- 2
WhiteSource was renamed Mend.
- 3
AWS activated its Asia Pacific (Taipei) region, ap-east-2.
- 4
At Mend.io Solutions Day, Systex announced it became Mend's general distributor in Taiwan and that Mend's cloud region would land in Taiwan.
Executive Summary: Mend has launched a Taiwan cloud region for its application security SaaS on AWS's Asia Pacific (Taipei) region, iThome reports. Distributor Systex says scan and analysis information can stay in Taiwan, with lower latency. The source offers no measured performance data or specifics on data scope.
Why It Matters
The core signal in this iThome report is data localization for application security tooling. Mend, an application security vendor, has opened a Taiwan cloud region for its SaaS platform. According to the report, the region runs on AWS infrastructure in the Asia Pacific (Taipei) region, identified as ap-east-2. Mend's Taiwan distributor, Systex Corporation (named in the source by its Chinese name, Systex's local entity), says information generated by source code scanning and analysis can now stay inside Taiwan.
This matters because source code scanning sits close to sensitive engineering assets. The report does not say what data types are stored, so readers should avoid assuming specifics. It does say the relevant information from scans and analysis can be kept in Taiwan, and the distributor frames this as reducing compliance concerns about cross-border data transfer. That is a distributor claim, not an independent compliance finding, and the article does not cite a specific law or regulator.
Technical Signal
The operational claim is about latency and workflow fit. The source says a local option shortens connection paths, lowers system latency, and improves responsiveness for code scanning, vulnerability detection, and daily operations. These are vendor and distributor statements without measured figures. Teams that want to know whether the change improves developer experience will need to test it in their own pipelines.
The report also gives some background on the product scope. Mend was formerly WhiteSource, renamed in 2022, and is described as an Israel-origin vendor focused on software supply chain and application security. The Taiwan distributor has offered it since 2016. The early use case was software composition analysis, managing security weaknesses and licensing risk in third-party and open-source components. The source says capabilities have since extended to static application security testing, vulnerability remediation, and AI-assisted secure development.
Operational Impact
On adoption, the source names publicly available Taiwan use cases: Far Eastern International Bank, Chunghwa Telecom, and Chunghwa Telecom Laboratories. It describes these as spanning finance, telecom, and large enterprises. Beyond that, the article does not provide customer counts, so no conclusion about market penetration is supported.
For operators, the report offers a practical migration detail. Existing Mend users who want to switch cloud regions can contact the distributor for planning and execution of the transfer. The source does not describe the migration steps, downtime, data handling, or costs. Teams considering a move should ask for those specifics directly and not assume parity with their current region.
What To Watch
The service environment is also made more visible. Mend operates a public status site, and the Taiwan environment is listed separately as SAAS TW MEND. The listed components include Web Console, Scans Processing, SAST, and API. The source says Mend's technology and operations team runs the platform and follows the vendor's information security management practices. Readers should treat this as a statement about operating responsibility, not as evidence of certification or audit results.
The teams most affected are application security, DevSecOps, platform engineering, compliance, and procurement groups, particularly in sectors the source says care about data sovereignty: finance, government, and healthcare. The source ties this to growing Taiwan interest in sovereign IT and notes Google Cloud announced Google Security Operations availability in its Taiwan cloud region in early August. That comparison suggests a pattern of security vendors localizing services in Taiwan, though the source gives only these two examples.
The risk boundaries are clear. A local region does not by itself prove stronger security, and the source makes no such claim. It addresses data location and performance. Questions about access controls, backups, support access from other locations, telemetry, and which data categories actually remain in Taiwan are not answered in the source. Readers should treat data residency as one control among several and verify details contractually and technically.
What to watch next: whether other security and software supply chain vendors announce Taiwan regions, whether Mend publishes technical documentation on residency scope, and whether customers report measurable scan performance changes. Also watch whether the status page for the Taiwan environment records incidents, since the source highlights it as a transparency mechanism. Until more detail appears, this is best read as a vendor and distributor localization announcement with moderate operational relevance for Taiwan-based AppSec programs.
Event Type: product
Importance: medium
Affected Companies
- Mend
- Systex
- AWS
- Google Cloud
- Far Eastern International Bank
- Chunghwa Telecom
- Chunghwa Telecom Laboratories
Affected Sectors
- Application security
- Cloud infrastructure
- Software supply chain
- Finance
- Telecommunications
Key Numbers
- Mend distributed in Taiwan since: 2016
- Mend renamed from WhiteSource: 2022
- Mend Taiwan region hosted on AWS Asia Pacific (Taipei) region: ap-east-2
- AWS Taipei region activated: early June 2025
Timeline
- Systex began distributing Mend in Taiwan, per the source.
- WhiteSource was renamed Mend.
- AWS activated its Asia Pacific (Taipei) region, ap-east-2.
- At Mend.io Solutions Day, Systex announced it became Mend's general distributor in Taiwan and that Mend's cloud region would land in Taiwan.
Frequently Asked Questions
What did Mend announce in Taiwan?
Mend, an application security vendor, has launched a Taiwan cloud region for its SaaS service. According to iThome, it runs on AWS infrastructure in the Asia Pacific (Taipei) region, ap-east-2, and covers software composition analysis, source code security testing, and vulnerability remediation.
Why does a Taiwan cloud region matter for application security?
The report says information produced by source code scanning and analysis can be kept inside Taiwan, which the distributor says reduces cross-border data transfer compliance concerns. It does not detail exactly which data categories stay local, so buyers should confirm scope with the vendor.
Can current Mend customers move to the Taiwan region?
The source says existing Mend users who want to change cloud regions can contact the Taiwan distributor, Systex, for help planning and carrying out the migration. It gives no details on steps, downtime, or cost, so those questions need to be raised directly.
How can customers monitor the Taiwan service?
The source says Mend's public status site lists the Taiwan environment separately as SAAS TW MEND. Listed components are Web Console, Scans Processing, SAST, and API, letting Taiwan customers check platform status and past service incidents.