For a company that has standardized on Azure, the main questions are usually identity, data location and integration. The application should sign users in through the company’s existing identity setup, keep data in a location and region the company approves and connect to systems already in Azure through approved methods rather than workarounds.
It also helps when the vendor can explain clearly where data is stored, which AI models are used and where they run, and how access is controlled. Getting the security and IT teams involved early, with that information ready, usually saves months later in the approval process.