Subcategory D - Software controls

Software in the context of EU dual-use Regulation is defined as a collection of one or more 鈥減rograms鈥 (i.e. sequence of instructions to carry out a process in, or convertible into, a form of executable by an electronic computer) or 鈥渕icroprograms鈥 (i.e. a sequence of elementary instructions, maintained in a special storage, the execution of which is inititiated by the introduction of its reference instruction into an instruction register) fixed in any tangbile medium of expression. In many instances, the software controls relate to software designed or modified for the development, production or use of listed items elsewhere in the EU dual-use list. But there are also dedicated (stand-alone) software controls.
Example:
6D001 includes the control of 鈥渟oftware鈥 specially designed for the 鈥渄evelopment鈥 or 鈥減roduction鈥 of equipment, amongst
others, specified in 6A008 (specific radar systems equipment, assemblies, and specially designed components).
7D005 refers to 鈥渟oftware鈥 specially designed to decrypt satellite navigation system ranging code designed for government use.
Source: Commission Recommendation (EU) 2021/1700 of 15 September 2021 on internal compliance programmes for controls of research involving dual-use items under Regulation (EU) 2021/821 of the European Parliament and of the Council setting up a Union regime for the controls of exports, brokering, technical assistance, transit and transfer of dual-use items
In order to be listed, the software must exist at some point in a tangible medium or expression. The software itself may be transferred by both tangible and intangible mediums.
The definition of software needs to be read in conjunction with the Nuclear Software Note for Category 0 and the General Note for Category 1 to 9 set out in Annex I of the EU dual-use Regulation.
In relation to information security software (specified in Category 5 鈥 part 2) it is important to note that the Nuclear Software Note in its entirety and the General Software Note partially do not apply, and thus cannot be used for releasing from control.
If you have any doubts or questions regarding the above, please consult your School鈥檚 or Departments technical export control expert or Aalto University鈥檚 compliance officer.
Support organization for export control and sanctions matters at Aalto University