Under the GDPR, what do we have to include in our data-processing agreements (DPAs)?

Again, make sure to consult your counsel before entering into any regulated agreements. The GDPR includes a number of requirements related to DPAs. For more information, review GDPR Article 28.

While Aptible has not published a template DPA, there are plenty available online. See, for example, Proton Technologies’ template DPA, or one from the International Association of Privacy Professionals (IAPP).