Your issue tracker and version control platform hold most of the requirements traceability matrix an auditor wants, in a form nobody in your org can query.
Deciding on an AI solution starts with two factors: where the capability should live and how much freedom it needs while running. Use this guide to assess your needs.