heyGRC compliance review

heyGRC reviews every pull request for governance, risk, and compliance, grounded in your company profile and the frameworks you must comply with (ISO 27001, SOC 2, GDPR, the EU AI Act, DORA, NIS 2, and more). Think of it as a code reviewer, but for compliance obligations instead of bugs.

On each review it posts three things:

• Inline findings on the exact lines that touch an obligation, each with a control reference and a short reason, as resolvable review threads.
• A neutral check run. heyGRC never fails a check or blocks a merge; it informs, it does not gate.
• One sticky summary comment per PR, updated in place instead of piling up new comments.

Public repositories are always free. Private repos are free up to 25 reviews per month; claiming your install starts a 14-day unlimited-private trial, after which on-demand private reviews are billed $0.49 each.

Important: heyGRC runs as a GitHub App, not from this machine