While the Arrangement has expanded to include controls on ‘intrusion software’, the structure of the Arrangement is such that control means physical exports of devices, chips, and hardware modules. As a result, many information flows related to cloud services fall in grey areas
