[JoachimSchipper]

At work, we use Atlassian's Crucible. It's ok, although it tends to get confused on moderately "interesting" git repositories. That said, you can go quite far just printing out the code and writing comments with a pen.

We do high-security work, so code reviews are a standard part of the development process.