List the constraints. The list covers existing systems the software has to talk to, existing databases and their quality, security and compliance rules, traffic expectations, which devices matter and any technology you are committed to.