What is a data processing agreement (DPA)?

A contract that defines how a vendor processes personal data on a customer's behalf, often required under GDPR.