heyGRC included with your plan
Standard, Pro and Business include 100 private heyGRC PR reviews a month, one per pull request. Unlimited includes 2,000. How to activate, what counts, and what happens at the limit.
Inhalt auf Englisch
heyGRC is the compliance review that runs on your pull requests: it reads the diff and tells your engineers when a change touches something your ISO 27001, SOC 2, GDPR or DORA programme cares about. It is a separate product with its own console at app.heygrc.com, and paid ISMS Copilot plans include a monthly allowance of private PR reviews at no extra cost.
Unlimited is the $1,000/month self-serve top chat plan. Buy it in the app. The 2,000 private-review inclusion applies once you are subscribed to Unlimited.
What is included
Standard, Pro and Business plans include 100 private PR reviews per month. Unlimited includes 2,000 private PR reviews per UTC month. A PR review counts one pull request once a month: re-pushes to the same pull request do not count again. The inclusion is usable on one heyGRC organization at a time. Plus and Free do not include reviews.
- Full product. Included reviews are the same reviews a paying heyGRC customer gets: every framework, full depth, EU inference, review language, GitHub and Origin.
- Public repositories do not count against the included private allowance. They stay on the platform 500 reviews per organization per month fair-use cap. Public reviews are not unlimited.
- The private allowance resets at the start of each calendar month (UTC).
- Prepaid API credits are a different product and are not included with any chat plan.
| Feature | Free | Plus | Standard | Pro | Business | Unlimited |
|---|---|---|---|---|---|---|
| heyGRC PR compliance review | Not included | Not included | 100 private PR reviews a month | 100 private PR reviews a month | 100 private PR reviews a month | 2,000 private PR reviews a month |
Who qualifies
- Your ISMS Copilot subscription is active on Standard, Pro, Business, or Unlimited.
- Trials do not qualify. The 7-day Plus trial is not a qualifying subscription.
- On a team plan, the account that pays for the team qualifies. Teammates do not each get their own review allowance.
- Existing heyGRC paying customers are unaffected. A heyGRC Starter, Pro or Business subscription keeps its own allowance and its own billing; it is not replaced or downgraded by this.
How to activate it
Activation happens in the heyGRC console, not in ISMS Copilot. Nothing is attached automatically, so nothing changes on your GitHub organizations until you ask for it.
- Open app.heygrc.com from Settings in ISMS Copilot, or go there directly. Sign in with the same account you use for ISMS Copilot. Same email, same login. There is nothing to link.
- Install the heyGRC GitHub App on the organization you want reviewed. The Reviews page and an empty Plan page both have that button.
- After GitHub is connected, open Plan and choose Activate.
If your code is on Cursor Origin, open Connections in heyGRC and connect Origin there. It attaches to the same organization, so GitHub and Origin share the included private reviews.
The Plan page then shows an included with ISMS Copilot badge and a usage bar for the current month.
One organization at a time. You can move the inclusion to a different organization from the same Plan page, but the reviews you have already used this month stay used. Moving it does not hand out a second allowance.
What counts as a review
One PR review is one pull request on a private repository, counted once per month.
- Reviews on public repositories are not counted against the private allowance. They still sit on the platform 500/org/month fair-use cap.
- Re-pushes to the same pull request in the same month do not count again. A pull request reviewed again in a later month counts once in that month.
- Reviews are counted per month, for the account that sponsors the inclusion, across every organization that account has used it on.
What happens at the limit
When the included private PR reviews for the month are used up, reviews pause: heyGRC posts a neutral check on new private pull requests with a link to pick a heyGRC plan, and reviews resume at the start of the next month. There is no buffer on the inclusion. Nothing is charged.
There is no on-demand overage on the included allowance. If 100 a month is not enough, pick a heyGRC plan in the console: Starter $39, Pro $149 or Business $399 per month. Existing subscriptions keep their price. A heyGRC plan applies instead of the inclusion, with its own review allowance and its own on-demand options. The inclusion stays attached but dormant, and comes back if the heyGRC plan ends.
Unlimited includes 2,000 private PR reviews per UTC month. Buy Unlimited in the app. This page is not a checkout.
If your ISMS Copilot subscription lapses
The inclusion pauses. Private reviews fall back to heyGRC free-plan rules, public repositories stay on the platform fair-use cap, and the organization keeps its installation, settings and history. When the subscription is active again, the inclusion resumes with the same balance for the current month. There is nothing to reactivate.
FAQ
Does this cost extra?
No. It is part of the Standard, Pro, Business, and Unlimited price.
Do I need a separate heyGRC account?
No. Sign in to app.heygrc.com with the same account you use for ISMS Copilot.
Can I split the included reviews across two organizations?
No. The inclusion sits on one organization at a time. You can move it, but the month's usage follows your account, not the organization.
I already pay for heyGRC. What changes?
Nothing. Your heyGRC plan keeps its allowance and its billing.
Does my Plus trial or Plus plan qualify?
No. Trials never qualify, and Plus does not include reviews.
Can I buy extra reviews on top of the included allowance?
Not on the inclusion. Move to a heyGRC plan instead; on-demand options belong to the paid heyGRC plans.
Are public reviews unlimited?
No. Public repositories do not count against the included private allowance. They stay on the platform 500 reviews per organization per month fair-use cap.
Are API credits included?
No. Prepaid API credits are a different product.
Where do I see how many I have used?
The Plan page in the heyGRC console shows a usage bar for the current month.