A legally binding contract between a data controller and a data processor, required for GDPR compliance.
Why it matters: Necessary for any B2B SaaS company storing European user data.
In practice: Signing a DPA with AWS outlining how they protect your server data.