Norma is an AI code governance platform for engineering teams that ship AI-generated code. It answers three questions before code lands: does it follow policy, are secrets exposed, and is the architecture sound.
Rules are served into MCP-capable editors such as Cursor, Claude Code, Windsurf, VS Code, Replit and Lovable while code is being written. The same rule library then runs as a deterministic audit across a connected GitHub or Bitbucket repository, so the same file returns the same verdict on every run, whichever agent produced the code.
Reporting covers a Production-Ready Score, an AI Authorship Ratio that classifies a codebase as Native, Hybrid or Delegated by how much was written by AI, and a Quality Certified badge for the README that expires if the code stops meeting the standard. Rule content comes from SOLID design principles and per-stack conventions.
Stack detection is automatic. Quality Clouds is ISO 27001:2022 certified and SOC 2 Type II attested.
