Here are the common checklist to use when gathering requirements for a web application.
User Interface
- Browsers and Future Browser Support (reducing this significantly reduces cost)
Business Functions
- Authentication, Password Reset...
- Workflow
- Reporting
- Number of functions
- Number of screens
- Email Notification
Services
- Server Services
- Client Services
Security
User Security
- Authentication Model (User Auth, Grid Card, Multi-Factor, 2-Factor etc...)
- Role/Group based security
Database Security
- Any legislation for encryption?
Availability
Load
- Current number of users and projected growth.
- Special dates where load is increased.
Uptime
- International users?
- Requires high availability?
- Maintenance windows.