On September 22, 2026, Sweden's Inspectorate of Strategic Products (ISP) published a notice that the European Commission is collecting exporter input for forthcoming guidelines on intangible technology transfers (ITT) under Article 2(2)(d) of Regulation (EU) 2021/821, the Dual-Use Regulation. The Commission's targeted survey on export control practices for intangible transfers of dual-use items is open until October 2, 2026 and covers cloud services, remote electronic access to technology located in the Union, and publication of export-controlled technology.
The guidelines are not yet published. The Commission, working with all Member States, aims to issue them by the end of 2026. For Swedish dual-use exporters licensed by ISP, and for any firm that hosts controlled software or technical data on a cloud platform reachable from outside the Union customs territory, the survey is the last documented window to put current practices on the record.
What does Article 2(2)(d) already treat as an export, and what is new?
Nothing in the Dual-Use Regulation's definition of export changed on September 22, 2026. What is new is a Commission guidelines workstream on how that definition applies to cloud, remote access and publication, and ISP's instruction that Swedish exporters feed it before October 2, 2026.
Article 2(2)(d) already treats as an export the transmission of software or technology by electronic media (fax, telephone, email or any other electronic means) to a destination outside the Union customs territory. It also covers making that software or technology available in electronic form to natural or legal persons, or to partnerships, outside that territory, and oral transmission of technology described over a voice medium. ISP quotes the provision in full: cloud availability and publication sit inside a definition that is already in force. ISP is Sweden's dual-use licensing and enforcement authority; ITT and cloud questions route there, not to Kommerskollegium or Tullverket.
Who must respond, and by when?
Exporters and other parties affected by the Dual-Use Regulation's ITT rules should complete the survey by October 2, 2026. That includes Swedish dual-use exporters on ISP's books, R&D-intensive firms that share controlled technical data with affiliates or contractors outside the Union, and cloud or IT teams that host Annex I software or technology on platforms reachable from a non-Union location.
The survey is EU-wide. ISP's September 22, 2026 notice is the Swedish national channel: the Commission wants exporter evidence now, in parallel with the Member State consultation already underway. Firms in other Member States use the same EU Survey form and the same October 2, 2026 close. Missing the deadline does not change Article 2(2)(d); it means the guidelines will be drafted without that exporter's description of how cloud sharing, remote access and publication actually work.
What will the ITT guidelines change for cloud access and publication?
ISP states that the guidelines will address three scenarios: technology transfers via cloud services; making technology located in the EU available to a person outside the EU; and publication of export-controlled technology. Those are the cases already argued inside export-control teams: a Union-hosted workspace that a person physically outside the Union can open; a repository or support portal serving controlled source or technical files; a paper or product documentation that discloses Annex I technical data.
The guidelines will not rewrite Article 2(2)(d). They will tell licensing authorities and exporters how the Commission expects that article to apply to those scenarios. The stated publication target is the end of 2026. Once the text is out, ISP will be the Swedish authority applying it to licence applications and internal-compliance programmes. Firms that describe their actual cloud architecture, access controls and publication workflows in the survey give the Commission operational facts it does not currently have on the record.
| Date | Actor | What happens |
|---|---|---|
| September 22, 2026 | ISP (Sweden) | National notice of the Commission ITT and cloud-services survey |
| October 2, 2026 | Exporters and other affected parties | Last day to complete the EU Survey |
| End of 2026 (Commission target) | European Commission | Publication of ITT guidelines on cloud, remote access and publication |
What should export-control teams do before 2 October 2026?
This week, map whether any dual-use software or technology you hold is stored in, or reachable through, a cloud service from outside the Union customs territory, including by an employee, affiliate, contractor or customer who is physically outside that territory. Identify publication channels (repositories, support portals, papers, product documentation) that could make Annex I technical data available in electronic form. Complete the Commission survey with those facts by October 2, 2026, and brief R&D, IT and legal that ISP is treating cloud availability and publication as ITT issues under Article 2(2)(d), with guidelines targeted for the end of 2026.
Continuous, per-jurisdiction real-time monitoring surfaces ISP dual-use notices and Commission ITT surveys the moment they publish, before a ten-day response window closes.
Subscribe to the free newsletter
Next steps: confirm whether your cloud and publication practices fall within Article 2(2)(d), submit the survey by October 2, 2026, and watch the Commission's end-2026 ITT guidelines so licensing procedures can be updated the day they appear. Obsidian will track the guidelines and any ISP follow-up as they land.
