heyGRC reviews your GitHub pull requests against your compliance frameworks and your own documents: ISO 27001, SOC 2, GDPR, DORA, NIS 2 and the EU AI Act. When a change touches something your policies cover, the review quotes the exact clause.

Many of those policies live in Google Drive™. This app links them to heyGRC.

How it works
1. Sign in at app.heygrc.com and install the heyGRC GitHub App on a repository. This creates your heyGRC organization. Public repositories are free.
2. In Google Drive™, right-click a document and choose Open with > heyGRC, then confirm with Google.
3. heyGRC reads that document, extracts its text and turns it into clauses with verified quotes.
4. Your next pull request reviews can cite those clauses.

What heyGRC does with your files
- It reads only the files you open with heyGRC or pick in Google's file picker. It cannot list, search or open any other file in your Google Drive™.
- It re-reads linked files once a day, so reviews use the current version. Unchanged files are skipped.
- It never edits, moves, deletes or re-shares your files. Your files stay private; there is no need for anyone-with-the-link sharing.
- Works with Google Docs™ and with text, Markdown and HTML files, including files in shared drives.

Privacy
heyGRC reads only the Google Drive™ files you open with heyGRC (or pick in Google's file picker). It uses Google's per-file drive.file permission, so it cannot list, search or open anything else in your Google Drive™, and it never edits, moves, deletes or reshares a file. The optional drive.install permission only adds heyGRC to the Open with menu in Google Drive™. heyGRC extracts the text, compiles the clauses it quotes in your pull-request reviews, and checks each file once a day for changes. The text goes only to heyGRC's AI model providers for inference, with zero data retention and no training; Google user data is never sold, used for ads, or used to train AI models. Tokens are encrypted and stored in the EU. Disconnect at any time in the heyGRC console or at myaccount.google.com. heyGRC's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Requirements
A heyGRC account (free to start at app.heygrc.com) with the GitHub App installed on at least one repository.

Support: https://heygrc.com/support

heyGRC is built by Better ISMS, the team behind ISMS Copilot.

Google Drive™ and Google Docs™ are trademarks of Google LLC.