Will I need to enter into a Data Processing Agreement (“DPA”)?

No. Both TrueLayer and its clients are Data Controllers for the purpose of the directive, as such neither party needs to govern the relationship over the other (one acting as controller, one acting as processor). TrueLayer and their clients are also not “joint controllers”.