cloud-based services exclusion