You approve every PR
Grace never merges anything on its own. Every change, fix or feature, arrives as a pull request for you to review. You see the full diff, the impact check, and the rationale before you say yes.
You stay in control. Always.
Handing over your code is something we have to earn. Grace is built so you stay the decision-maker at every step, with measurable proof and guardrails you control.
Reversible by design
Because every change goes through its own pull request, any of them can be reverted. No irreversible moves, no silent migrations. If a fix doesn't work for you, it doesn't ship.
Proof, not promises
Grace measures the state of your app before and after each intervention, on real paths. The health score, the test results, and the resolved risks are all in numbers. You judge on facts.
Configurable controls
The repos involved, the access you grant, and how strict Grace is in your editor are all adjustable. The Grace app and the copies of your code are hosted in France.
Nothing enters your code without an explicit “yes.”
Every Grace intervention looks like a regular code review, except the work is already done, tested, and documented. You approve, you ask for an adjustment, or you decline. It's your main branch.
- Full, readable diff, just like on GitHub
- Impact check on what the change touches
- Written rationale (the why) kept in memory
- Revertable like any pull request
PR #204 · Secure /api/refund ready
app/api/refund.ts
- app.post('/api/refund', async (req, res) => {
+ app.post('/api/refund', requireSession, async (req, res) => {
const { orderId } = req.body
+ if (order.userId !== req.user.id) return res.status(403).end()
await refund(orderId)
})
✓ 48 tests · ✓ lint · ✓ build · 0 regressions
AdjustApprove
Memory that belongs to you
Decisions, assumptions, and incidents are logged in a living record tied to your repo. It's your context: exportable at any time, on any plan, and it doesn't evaporate when someone leaves the team. On Pro it's kept for as long as you're subscribed. On the free plan Grace keeps your last 30 days, and warns you 7 days before anything is erased.
Where your data lives
The Grace app and the copies of your code are hosted in France. Some of the AI model providers it relies on are in the United States, and the privacy policy names each one. This is about proof, not compliance slogans.
Roadmap.
- Today: Encryption in transit, encrypted access tokens, no secrets in any repo, every change reviewed. GDPR in place, code hosted in France.
- Next 12 months: Controls documented and followed, not yet audited.
- After that: SOC 2 Type I, Type II, ISO 27001.
Need something specific for your compliance?
Talk to usTrust gets proven on your code.
Start with the free health check: you'll see exactly what Grace sees, without letting it change a thing.