For us, two places. When the feature is ready to be merged in, it is reviewed by the scrum team. When they say a set of code is ready for production, it gets tagged - and that tag gets the formal peer review.