# heyGRC (ChatGPT Plugin)

> GRC review for your PRs

- Type: plugin
- Publisher: BETTER ISMS (official)
- Categories: Development
- Website: https://chatgpt.com/plugins/plugins_6a886769f0fc8191a0d42669abca1f98
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6a886769f0fc8191a0d42669abca1f98
- Version: 0.1.1
- Listed: 2026-10-15

## About

heyGRC reviews each pull request against the frameworks your company must comply with, grounded in your company profile. It posts inline findings, a neutral check run, and one sticky summary. This plugin does not review code locally. It walks you through installing the heyGRC GitHub App so reviews run server-side. Public repositories are free.

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “heyGRC” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Disconnect or uninstall

1. **In ChatGPT** Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open heyGRC in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.

2. **In Codex** Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.

## Skills

- **heyGRC Compliance Review**: Set up and run heyGRC compliance review on a repository's pull requests. Use when the user wants GRC or security compliance review of their code changes against ISO 27001, SOC 2, GDPR, DORA, NIS 2, or the EU AI Act, including installing the heyGRC GitHub App, configuring the company profile and frameworks as code, and choosing how often reviews run.

## Example prompts

- "Set up heyGRC compliance review on this repository."
- "Install the heyGRC GitHub App and configure ISO 27001, SOC 2, and GDPR on our PRs."
- "How do I get compliance findings on this pull request without blocking the merge?"

## heyGRC alternatives

- [Superpowers](https://chatgptplugins.directory/plugins/superpowers.md): Plan, develop, and debug code
- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [Build Web Apps](https://chatgptplugins.directory/plugins/build-web-apps.md): Build frontend-focused web apps with generated assets, browser testing, payments, and...
- [GitHub](https://chatgptplugins.directory/plugins/github.md): Triage PRs, issues, CI, and publish flows
- [Figma](https://chatgptplugins.directory/plugins/figma.md): Figma design-to-code workflows
- [Shopify](https://chatgptplugins.directory/plugins/shopify.md): Build and manage your store

---
Source: https://chatgptplugins.directory/plugins/heygrc · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.