heyGRC included with your plan
Standard, Pro and Business plans include 100 private heyGRC pull request compliance reviews a month. How to activate, what counts, and what happens at the limit.
Contenido en inglés
heyGRC is the compliance review that runs on your pull requests: it reads the diff and tells your engineers when a change touches something your ISO 27001, SOC 2, GDPR or DORA programme cares about. It is a separate product with its own console at app.heygrc.com, and paid ISMS Copilot plans include a monthly allowance of private reviews at no extra cost.
What is included
Standard, Pro and Business plans include 100 private pull request reviews per month, usable on one heyGRC organization at a time. Plus and Free do not include reviews.
- Full product. Included reviews are the same reviews a paying heyGRC customer gets: every framework, full depth, EU inference, review language, GitHub and Origin.
- Public repositories are always free on heyGRC, for everyone, and never count against the included 100.
- The allowance resets at the start of each calendar month (UTC).
| Feature | Free | Plus | Standard | Pro | Business |
|---|---|---|---|---|---|
| heyGRC PR compliance review | Not included | Not included | 100 reviews a month | 100 reviews a month | 100 reviews a month |
Who qualifies
- Your ISMS Copilot subscription is active on Standard, Pro or Business.
- Trials do not qualify. The 7-day Plus trial is not a qualifying subscription.
- On a team plan, the account that pays for the team qualifies. Individual seats do not each get their own allowance.
- Existing heyGRC paying customers are unaffected. A heyGRC Starter, Pro or Business subscription keeps its own allowance and its own billing; it is not replaced or downgraded by this.
How to activate it
Activation happens in the heyGRC console, not in ISMS Copilot. Nothing is attached automatically, so nothing changes on your GitHub organizations until you ask for it.
- Open app.heygrc.com.
- Sign in with the same account you use for ISMS Copilot. ISMS Copilot and heyGRC share one login. If you sign in with a different email address, heyGRC has no way to see your subscription and the offer will not appear.
- If you have not installed heyGRC on your organization yet, install the heyGRC GitHub App on it and finish the claim step.
- Go to the Plan page.
- Select the organization you want the included reviews on, then choose activate.
The Plan page then shows an included with ISMS Copilot badge and a usage bar for the current month.
One organization at a time. You can move the inclusion to a different organization from the same Plan page, but the reviews you have already used this month stay used. Moving it does not hand out a second 100.
What counts as a review
One review is one completed compliance review of one pull request on a private repository.
- Reviews on public repositories are free and are never counted.
- Re-running a review on the same pull request after a new push is a new review.
- Reviews are counted per month, for the account that sponsors the inclusion, across every organization that account has used it on.
What happens at the limit
When the 100 included reviews for the month are used up, heyGRC posts a neutral check on further private pull requests instead of a review, and reviews resume at the start of the next month. Nothing breaks and nothing is charged.
There is no on-demand overage on the included allowance. If 100 a month is not enough, pick a heyGRC plan in the console: Starter $19, Pro $99 or Business $249 per month. A heyGRC plan applies instead of the inclusion, with its own review allowance and its own on-demand options. The inclusion stays attached but dormant, and comes back if the heyGRC plan ends.
If your ISMS Copilot subscription lapses
The inclusion pauses. Private reviews fall back to heyGRC free-plan rules, public repositories stay free, and the organization keeps its installation, settings and history. When the subscription is active again, the inclusion resumes with the same balance for the current month. There is nothing to reactivate.
FAQ
Does this cost extra?
No. It is part of the Standard, Pro and Business price.
Do I need a separate heyGRC account?
No. Sign in to app.heygrc.com with the same account you use for ISMS Copilot.
Can I split the 100 reviews across two organizations?
No. The inclusion sits on one organization at a time. You can move it, but the month's usage follows your account, not the organization.
I already pay for heyGRC. What changes?
Nothing. Your heyGRC plan keeps its allowance and its billing.
Does my Plus trial or Plus plan qualify?
No. Trials never qualify, and Plus does not include reviews.
Can I buy extra reviews on top of the included 100?
Not on the inclusion. Move to a heyGRC plan instead; on-demand options belong to the paid heyGRC plans.
Where do I see how many I have used?
The Plan page in the heyGRC console shows a usage bar for the current month.