Most website problems are born before anyone opens Figma.
The owner thinks the new site needs better leads. The designer thinks the problem is the brand. The developer thinks the project is five page templates and a contact form. The sales team wants better proof. The SEO person is worried about redirects. Nobody is wrong, but nobody is working from the same sheet of paper.
That sheet of paper is the website requirements document.
It’s not a 60-page corporate binder. It doesn’t need legal language. For a small business website, the best version is usually 8 to 15 pages of plain English that answers one question: what does this website need to do, and how will we know it’s done?
That matters because vague requirements are expensive. PMI reported that 37% of organizations named inaccurate requirements as the primary reason projects fail. In a later PMI requirements management report, 47% of unsuccessful projects failed to meet goals because of poor requirements management. Website projects are not immune to that. They just call it scope creep, launch delays, missing content, broken tracking, or “we thought that was included.”
Use this template before you ask for pricing, approve a design, or hand a developer a folder full of random notes.
What a website requirements document is
A website requirements document is the working brief for a website build, redesign, migration, or major improvement project. It defines the business goals, audience, content, page types, technical needs, integrations, acceptance criteria, and launch rules.
Think of it as the job ticket for the whole project. If the site needs to generate quote requests, show distributor locations, integrate with a CRM, keep old SEO rankings, pass accessibility checks, and let staff update service pages without calling a developer, the requirements document says that before work starts.
This is different from a brand brief. A brand brief explains how the company should look, sound, and feel. It is also different from a proposal. A proposal explains what a vendor will do and what it will cost. The requirements document comes before both, or at least before the proposal is finalized.
Google’s Core Web Vitals documentation says pages should aim for Largest Contentful Paint under 2.5 seconds, Interaction to Next Paint under 200 milliseconds, and Cumulative Layout Shift under 0.1. WebAIM’s 2026 report found 56.1 detectable accessibility errors per homepage across the top one million homepages. Statcounter’s platform data is based on billions of monthly page views across desktop, mobile, and tablet. These are not tiny technical details. They are requirements that affect leads, trust, and usability.
When you need one
You don’t need a full requirements document for every small tweak. If you’re changing a headline, adding one landing page, or swapping a few photos, a short work order is enough.
You do need one when the project has real risk. That usually means a redesign, a CMS change, a new lead generation flow, a migration from WordPress to another platform, a multi-location site, a site with integrations, or a project where several people have approval power.
The easiest rule is this: if a misunderstanding would cost more than a few hours to fix, write the requirement down.
That includes marketing requirements too. Portent’s page speed research found that a B2B site loading in 1 second converts 3 times better than a site loading in 5 seconds. Google Search Central says Search Console helps site owners measure search traffic and performance. If conversion speed, search visibility, or tracking matter to the project, they belong in the document.
The copy-and-paste website requirements template
Use this as a working outline. Delete anything that doesn’t apply. Add detail where the risk is highest.
1. Project summary
Project name:
Primary owner:
Decision makers:
Target launch window:
Current website URL:
New domain or same domain:
Primary reason for the project:
Budget range or approval range:
Write the reason in business language. “The site looks old” is not enough. Better: “The site does not explain our service areas clearly, our contact form is buried, and sales reps are getting low-fit inquiries.”
2. Business goals
Pick no more than three primary goals. More than that turns the project into a wish list.
Goal 1:
How we will measure it:
Current baseline, if known:
Target after launch:
Goal 2:
How we will measure it:
Current baseline, if known:
Target after launch:
Goal 3:
How we will measure it:
Current baseline, if known:
Target after launch:
Common goals include more qualified quote requests, better local visibility, fewer bad-fit leads, easier content updates, better hiring pages, cleaner analytics, faster load times, or replacing a hard-to-maintain CMS.
3. Audience and buying situations
Name the people the site has to help. Avoid fake personas with cute names. A metal fabricator, dental practice, roofing company, or B2B service firm needs buying situations more than fictional biographies.
Audience type:
What they are trying to solve:
What they need to believe before contacting us:
Questions they usually ask sales:
Objections that stop them:
Proof they need:
Pages they are likely to visit before converting:
If you sell to more than one audience, repeat the section. A homeowner, property manager, and commercial buyer may all need different proof even if they buy the same service.
4. Required pages and page types
List page types first, then individual pages. This keeps the project from turning into a messy page-by-page debate.
Required page types:
- Home page, service page, location page, about page, contact page, quote request page, case study, blog post, FAQ, product category, product detail, landing page, careers page, legal page.
For each page type, define the job of the page, required sections, conversion action, SEO target, content owner, and approval owner.
Example service page requirement:
Page type: Service page
Job: Explain one core service clearly enough that a qualified buyer can decide whether to request a quote.
Required sections: problem summary, service explanation, industries served, proof, process, FAQs, CTA.
Primary CTA: request a quote.
Secondary CTA: call the office.
SEO target: one service keyword plus service area where relevant.
Content owner: sales manager.
Approval owner: business owner.
5. Content requirements
Content delays kill launches. Be plain about who is writing, approving, and providing material.
Required content inventory:
Pages that need new copy:
Pages that can reuse existing copy:
Photos needed:
Video needed:
Case studies or testimonials needed:
Downloads or PDFs needed:
Legal copy needed:
Who writes first draft:
Who approves final copy:
Final content due date:
If you have an old site, decide what happens to each important page. Keep, rewrite, merge, redirect, or retire. Do not wait until launch week to answer that.
6. Design and brand requirements
This section should stop subjective arguments, not create them.
Brand assets available:
Logo files available:
Colors and fonts approved:
Sites we like and why:
Sites we dislike and why:
Tone:
Trust signals required:
Photography style:
Accessibility constraints:
Use concrete notes. “Modern” is weak. “Lots of white space, clear pricing cues, real crew photos, fewer stock images, larger mobile tap targets” is useful.
7. Functional requirements
Functional requirements describe what the site has to do.
Examples:
- Contact form sends to sales inbox, stores a backup submission, blocks spam, and records the lead source.
- Quote request form changes fields based on service type.
- Location pages show a map, service radius, local phone number, and local reviews.
- Staff can edit service page copy, FAQs, photos, and calls to action without touching code.
- Blog posts support author, category, publish date, featured image, excerpt, and related posts.
- Thank-you pages fire conversion events for form submissions.
- Site search returns services, blog posts, and locations.
Write these as outcomes, not tool choices, unless a tool is mandatory. “Must integrate with HubSpot” is a tool requirement. “Must send quote requests into the CRM with source, service type, and location” is the business requirement.
8. SEO requirements
SEO cannot be stapled on after launch. It needs redirects, content structure, metadata, crawl controls, internal links, and measurement from the start.
Required SEO items:
Current rankings or pages to protect:
Keyword themes:
URL structure rules:
Redirect plan required: yes/no
Metadata rules:
Schema requirements:
XML sitemap required: yes/no
Robots.txt changes:
Canonical rules:
Internal linking requirements:
Google Search Console access:
Google’s documentation says Search Console can show which queries bring users to a site, analyze impressions and clicks, and help submit sitemaps. If the site is being redesigned, those measurement basics should be part of the launch checklist, not a follow-up task.
9. Performance, accessibility, and device requirements
This is where a lot of projects get vague. Don’t write “site should be fast.” Define what fast means.
Performance targets:
LCP target:
INP target:
CLS target:
Image compression rules:
Third-party script limits:
Accessibility standard:
Keyboard navigation required:
Form label requirements:
Color contrast requirements:
Mobile breakpoints to test:
Browsers to test:
Google’s Web Vitals guidance recommends LCP of 2.5 seconds or less, INP of 200 milliseconds or less, and CLS of 0.1 or less. For accessibility, the W3C’s WCAG 2.2 standard organizes requirements around perceivable, operable, understandable, and technically reliable user experiences. Those standards give your team something real to test against.
10. Integrations and ownership
Integrations create hidden work. List them early.
Required integrations:
CRM:
Email marketing:
Analytics:
Call tracking:
Booking tool:
Payment tool:
Inventory or ERP:
Live chat:
Review platform:
Authentication:
Hosting owner:
Domain owner:
DNS owner:
CMS admin owner:
Plugin or license owner:
Ownership is not boring paperwork. If the domain, hosting, analytics, or key plugins sit under a vendor’s account, the business may have trouble switching partners later. Write ownership rules down before the project starts.
11. Security, privacy, and compliance
The right level depends on the business. A basic service business needs less than a medical, financial, or ecommerce site, but every site needs a minimum standard.
Security requirements:
SSL required: yes
Backups required:
Update responsibility:
Admin access rules:
Spam protection:
Privacy policy needed:
Cookie consent needed:
Accessibility review needed:
Industry compliance concerns:
Incident contact:
The Verizon 2025 Data Breach Investigations Report analyzed more than 22,000 security incidents and over 12,000 confirmed data breaches. You don’t need to turn a small website brief into a security manual, but you do need to decide who owns updates, backups, access, and recovery.
12. Acceptance criteria
Acceptance criteria define what “done” means. This is the part that saves arguments near launch.
Use clear pass or fail language.
Example acceptance criteria:
Home page is approved by owner and marketing lead.
All required page types are built and populated.
All final copy is loaded into the CMS.
Forms send to the right people and store backup submissions.
Analytics and conversion events are tested.
Redirects are loaded and spot-checked.
Core templates pass mobile review.
Accessibility blockers found in review are fixed or documented.
Site has a backup and rollback plan.
Client has admin access and basic CMS instructions.
Do not launch because everyone is tired. Launch because the acceptance criteria are met.
Requirements document vs RFP vs scope of work
These documents overlap, but they are not the same thing.
A requirements document describes what the website needs to accomplish. It belongs to the business, even if an agency helps write it.
An RFP asks vendors to respond to the same project. It is useful when you are comparing multiple partners.
A scope of work defines what the chosen partner will deliver, how much it costs, what is excluded, and how changes are handled.
For a small business, the clean order is: requirements first, proposal second, scope of work third. If you skip the requirements step, the proposal has to guess. If the proposal guesses, the scope usually gets messy.
The one-page scorecard
Before you approve the document, score it. A good requirements document should make the project easier to estimate, build, test, and launch.
Score each item from 0 to 2.
0 = missing
1 = partly defined
2 = clear enough to build or price
Project goal is measurable:
Primary audiences are defined:
Required page types are listed:
Content ownership is clear:
Functional requirements are written as outcomes:
SEO migration needs are defined:
Performance targets are stated:
Accessibility expectations are stated:
Integrations are listed:
Ownership of domain, hosting, CMS, and analytics is clear:
Security and backup responsibilities are clear:
Acceptance criteria are written:
A score under 16 means the project is still too fuzzy. A score from 16 to 21 is workable, but expect some discovery. A score of 22 or higher gives a vendor enough structure to price and plan with fewer assumptions.
Mistakes to avoid
The biggest mistake is writing requirements that sound precise but aren’t. “Build a conversion-focused website” sounds serious, but it doesn’t tell anyone what to build. “Every service page needs proof, FAQs, a quote CTA, and conversion tracking” is better.
Another mistake is letting tools drive the brief too early. WordPress, Webflow, Shopify, Astro, or another stack may be the right answer, but the requirements should explain the business need first. If staff need to edit service pages every week, that matters more than arguing about the CMS before the workflow is clear.
The third mistake is ignoring launch and ownership. Many website plans stop at design approval. The real project includes redirects, tracking, forms, DNS, backups, training, and post-launch fixes. If those are missing from the requirements, they will come back as surprises.
FAQ
How long should a website requirements document be?
For most small business websites, 8 to 15 pages is enough. A simple brochure site may need less. A migration, ecommerce site, or multi-location site may need more. The goal is clarity, not length.
Who should write it?
The business owner, marketing lead, and web partner should all contribute. The business should own the goals, audience, approvals, and constraints. The web partner can help translate those into technical, SEO, performance, and launch requirements.
Should requirements be finished before hiring an agency?
They should be finished enough that agencies can estimate the same project. You can still pay a strong agency for discovery, but you should not ask for fixed pricing from a vague paragraph and expect clean numbers.
What if we don’t know all the answers yet?
Mark unknown items clearly. “Needs discovery” is better than pretending. A good requirements document separates known decisions, open questions, and assumptions.
Need help turning this into a build plan?
If your website project has too many loose pieces, goals, pages, SEO, forms, analytics, integrations, and launch details, we can help turn it into a practical plan before money gets wasted.
Start here: tell us what you’re trying to build.