diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..0e2ef24
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+/.github/workflows/factory_review.yaml @mtrunkat
diff --git a/.github/workflows/factory_review.yaml b/.github/workflows/factory_review.yaml
new file mode 100644
index 0000000..9081429
--- /dev/null
+++ b/.github/workflows/factory_review.yaml
@@ -0,0 +1,33 @@
+name: apify-factory review (AI review, and auto-approval)
+
+# Calls the review and auto-approval pipeline in apify/ai-developer. Approvals additionally need the
+# repository's `factory_auto_approve` custom property set to true.
+on:
+  # Taken from the default branch, never from the pull request, so a pull request cannot rewrite
+  # its own review pipeline. Pull request code is never checked out or executed.
+  pull_request_target:
+    types:
+      - review_requested
+      - review_request_removed
+      - converted_to_draft
+      - ready_for_review
+      - synchronize
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  factory-review:
+    uses: apify/ai-developer/.github/workflows/_factory_review.yaml@main
+    secrets: inherit
+    # Paths never auto-approved here, on top of the pipeline's defaults. Proposed from the
+    # repository's layout when this workflow was added; edit them like any other code.
+    with:
+      policy: |
+        {
+          "denyGlobs": [
+            "skills/**",
+            "src/services/secrets.ts"
+          ]
+        }