Documents show selection criteria for non-EU cloud service providers will
include data protection standards and the degree to which third countries can
control corporate data, services and decision-making. Other non-price evaluation
criteria will require related R&D to originate in the EU and for providers to
meet EU supply-chain security requirements.