Subprocessors
Plenary Labs is operated by Twelve Thirty-Four Consulting LLC. To run the Service we use a small number of third-party providers (“subprocessors”) that may process customer data on our behalf. This page is the authoritative list referenced in our Terms of Service and Privacy Policy.
Every subprocessor below is bound by a written agreement requiring confidentiality, appropriate security measures, and processing only on our instructions.
1AI model providers
These providers receive the material you submit to a study and generate the simulated discussion. Each is contractually barred from using content transmitted through our integrations to train or improve their models.
| Provider | Purpose | Data received | Processing location |
|---|---|---|---|
| Anthropic, PBC | Generates persona responses, moderator turns, and analyst reports | Stimulus materials, persona profiles, discussion transcripts | United States |
| OpenAI, L.P. | Generates persona responses, moderator turns, and analyst reports | Stimulus materials, persona profiles, discussion transcripts | United States |
You choose which models your personas use. Content is transmitted only to the providers whose models are assigned to your study.
2Planned additions
The following providers are announced in advance under the change process below. They are not yet in use, and no customer content has been transmitted to them. Each will move into the table above, with a change-history entry, on or after the date shown.
| Provider | Purpose | Data received | Processing location | Not before |
|---|---|---|---|---|
| Google LLC (Gemini API) | Generates persona responses, moderator turns, and analyst reports | Stimulus materials, persona profiles, discussion transcripts | United States | October 8, 2026 |
| xAI Corp. (Grok API) | Generates persona responses, moderator turns, and analyst reports | Stimulus materials, persona profiles, discussion transcripts | United States | October 8, 2026 |
Both will be used on paid, enterprise-configured accounts with model training disabled and, where available, zero data retention enabled. Neither will become selectable in the product until that configuration is verified and documented.
3Infrastructure
| Provider | Purpose | Data received | Processing location |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting, content delivery, DDoS protection, edge compute | All data in transit; application data at rest | Global edge network |
| Neon, Inc. | Managed Postgres database | Account data, study configurations, session transcripts, usage records | United States |
4Business operations
| Provider | Purpose | Data received | Processing location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, tax calculation | Name, email, billing address, payment card details (collected and stored by Stripe; we do not store card numbers) | United States |
5What we do not use
We do not use advertising networks, retargeting services, data brokers, session-recording tools, or cross-site tracking. Our analytics are cookieless and store no identifier on your device.
6Changes to this list
We may add or replace subprocessors as the Service develops. Before a new subprocessor begins processing customer content, we will update this page and give at least fifteen (15) days’ notice to anyone subscribed below.
Subscribe to change notifications: email jammil@twelvethirty-4.com with the subject line “Subprocessor notifications.”
If you object to a new subprocessor on reasonable data protection grounds, you may terminate your subscription as described in our Terms of Service.
7Change history
| Date | Change |
|---|---|
| September 23, 2026 | Initial publication. Google LLC (Gemini API) and xAI Corp. (Grok API) announced as planned additions, effective no earlier than October 8, 2026. |
8Questions
Twelve Thirty-Four Consulting LLC, jammil@twelvethirty-4.com
Customers subject to GDPR, UK GDPR, or comparable laws may request our Data Processing Addendum, which incorporates the Standard Contractual Clauses and the UK International Data Transfer Addendum.