diff --git a/requirements.in b/requirements.in
new file mode 100644
index 000000000..36413d59c
--- /dev/null
+++ b/requirements.in
@@ -0,0 +1,32 @@
+# Run `make freeze-requirements` to update requirements.txt
+# with package version changes made in requirements-app.txt
+
+ago==0.0.93
+govuk-bank-holidays==0.8
+humanize==3.2.0
+Flask==1.1.2
+Flask-WTF==0.14.3
+Flask-Login==0.5.0
+
+blinker==1.4
+pyexcel==0.6.6
+pyexcel-io==0.6.4
+pyexcel-xls==0.6.2
+pyexcel-xlsx==0.6.0
+pyexcel-ods3==0.6.0
+pytz==2020.5
+gunicorn==20.0.4
+eventlet==0.30.0
+notifications-python-client==5.7.1
+Shapely==1.7.1
+
+# PaaS
+awscli-cwlogs>=1.4,<1.5
+itsdangerous==1.1.0
+
+git+https://github.com/alphagov/notifications-utils.git@43.7.0#egg=notifications-utils==43.7.0
+git+https://github.com/alphagov/govuk-frontend-jinja.git@v0.5.1-alpha#egg=govuk-frontend-jinja==0.5.1-alpha
+
+# gds-metrics requires prometheseus 0.2.0, override that requirement as later versions bring significant performance gains
+prometheus-client==0.9.0
+gds-metrics==0.2.4
diff --git a/requirements_for_test.in b/requirements_for_test.in
new file mode 100644
index 000000000..afa944e1c
--- /dev/null
+++ b/requirements_for_test.in
@@ -0,0 +1,15 @@
+-r requirements.txt
+pip-tools==5.4.0
+isort==4.3.21
+pytest==5.3.2
+pytest-env==0.6.2
+pytest-mock==1.11.2
+pytest-xdist==1.31.0
+beautifulsoup4==4.8.1
+freezegun==0.3.12
+flake8==3.7.9
+flake8-bugbear==19.8.0
+flake8-print==3.1.4
+requests-mock==1.7.0
+# used for creating manifest file locally
+jinja2-cli[yaml]==0.7.0