List the constraints. This means existing systems the software has to talk to, the data you already hold and its condition, compliance requirements, traffic expectations, which devices matter and stacks you cannot change.