heygrc
heyGRC legal

heyGRC Terms of Service

Effective date: 2026-10-01

heyGRC (the heyGRC website, the heyGRC console, the heyGRC GitHub App and its optional Google Drive connection) is provided by ISMS Copilot, a Better ISMS initiative operated by Better ISMS EURL, France.

Which terms apply

Your use of heyGRC is governed by the ISMS Copilot Terms of Service, which name heyGRC among the Services, together with the Privacy Policy and the Data Processing Agreement. By installing the heyGRC GitHub App, signing in to the heyGRC console, or connecting Google Drive, you accept those terms. This page highlights the terms that are specific to heyGRC; the full Terms of Service are the binding text.

heyGRC in short

  • heyGRC reviews pull requests for compliance against the frameworks you choose and posts its findings back to the pull request. Its findings are informational. They are not legal, compliance, audit or certification advice, and you remain responsible for your compliance decisions.
  • Fees, plans and billing follow the Terms of Service and the prices published on the pricing page.

Optional Google Drive connection

Optional Google Drive connection (heyGRC). An owner or admin of a heyGRC organization may, at their option, connect Google Drive so that heyGRC can read documents that this person picks in Google's file picker or opens with heyGRC from Google Drive, and use them to ground heyGRC reviews. heyGRC only reads those files; it never edits, moves, deletes or changes the sharing of any file. The person connecting confirms that they are authorized to give heyGRC access to the files they choose, including under their organization's Google Workspace policies. Use of Google user data is described in the Privacy Policy (Google User Data) and the DPA §2.4. The connection can be removed at any time in the heyGRC console or at myaccount.google.com; disconnecting deletes the stored Google token, as described in the DPA. Google Drive is provided by Google under Google's own terms, and ISMS Copilot is not responsible for the availability of Google's services.

Contact

Questions about these terms: privacy@ismscopilot.com. Support: see About.