There are no export controls per se on the one-time pad - however, there could easily be controls on elements of the implementation of the one-time pad. For example, if the one-time pad is sent using encryption that is subject to export controls, the implementation would be subject to export controls because of that.