Where must information stay?
Identify the sources that must remain within your own environment, and which systems can communicate. Discuss SaaS, on-premise and air-gapped options against those constraints.
Who can see and act?
Describe the roles that investigate information, approve decisions and maintain workflows. Bring access and retention requirements into the architecture discussion early.
How will you validate the fit?
Choose a representative source set and one operational workflow. Agree on the acceptance criteria, implementation responsibilities and evidence you need before expanding.