What does a company need before it buys your mobile app?
When a company moves from a few personal subscriptions to a real purchase, new people join the decision: IT, security, finance and sometimes legal. This page lists what they check, the purchase routes available for mobile apps, and how to prepare answers before the first questionnaire arrives.
What do companies check before buying a work app?
Companies check whether staff can sign in with company accounts (SSO), whether IT can install and remove the app on managed devices, where data is stored and who can see it, how users are added and removed, and whether they can pay by invoice with a contract. Larger firms add a security questionnaire, a data processing agreement and insurance or audit evidence.
You do not need every item to win the first company accounts. You do need honest answers to all of them, and a plan for the ones you have not built.
Company plan request
Admin console
How can a company pay for a mobile app?
Mobile apps have more purchase routes than web software because the app stores sit in the middle. Pick the routes that match your buyer's size and process, and check current Apple and Google terms for each storefront you sell in.
| Route | How it works | Suits | Watch out for |
|---|---|---|---|
| Personal in-app subscriptions | Each user pays through the App Store or Google Play | Individuals and very small teams | No single bill; expense claims per person |
| Team plan bought on the web | A lead buys seats by card on your site; staff sign in to the app | Teams of 3 to 50 | Storefront rules on linking to web purchase; check current terms |
| Company plan by invoice | Contract or order form, annual invoice, purchase order | Companies with procurement | Needs admin console, user removal, payment terms |
| Private or custom app | A version distributed only to named organizations | Large customers with special builds | Extra builds to maintain; see managed distribution |
| Reseller or partner | A distributor or integrator bills the customer | Regulated or industrial buyers | Margin to the partner; less direct contact |
On Apple platforms, custom apps can be distributed privately to specific organizations through Apple Business Manager or Apple School Manager, then installed by device management or with redemption codes. On Android, Managed Google Play lets you publish private apps to up to 1,000 organizations, and they appear in each organization's EMM console. Most companies will be happy with your public app plus company sign-in; the private routes are for special cases explained on managed distribution.
What is on a typical procurement and security checklist?
The list below is a composite of what IT and procurement teams commonly ask for work apps. Not every buyer asks every question, but having a written answer to each saves weeks.
| Area | What the buyer asks | Minimum good answer | When to build more |
|---|---|---|---|
| Single sign-on (SSO) | Can staff sign in with company accounts? | Supported providers listed, or date it is planned | When several company deals ask |
| User lifecycle | How are leavers removed? | Admin can remove a user and their access at once | Before the first invoice customer |
| Device management (MDM) | Can IT install, configure and wipe the app? | Works on managed devices; managed configuration if supported | When IT deploys to company phones |
| Data residency | Which country is data stored in? | Name the regions and providers you use | When a sector or country requires it |
| Access and roles | Who can see what? | Roles for admin, manager, member | Before multi-site accounts |
| Audit log | Can we see who changed what? | Exportable log of key actions | Regulated or safety buyers |
| Data processing terms | Do you sign a DPA? | A standard DPA ready to send | Before any company with a legal team |
| Invoicing | Can we pay by invoice and PO? | Annual invoice with payment terms | From the first company plan |
| Offline and records | What happens without signal, and how long are records kept? | Clear offline behaviour and retention settings | Field, safety and compliance apps |
Device management is changing for smaller buyers too. Apple Business, available since April 14, 2026, combines Business Manager, Business Essentials and Business Connect with built-in device management and Managed Apple Accounts. A 30-person contractor that never had an IT department may now manage its iPhones, and will start asking the device questions above.
What does a company purchase look like in practice?
FixRoute, a fictional field service app, had 14 technicians from Brookvale Mechanical, a fictional HVAC contractor, on personal monthly plans. The service manager asked for one bill. Here is the sequence that followed, with the questions that came up at each step.
- Week 1. Service manager requests a company plan through the in-app form. Sales replies within the hour with pricing for 40 seats and the public security page.
- Week 2. The contractor's outside IT provider asks about SSO, device management and where data is stored. Two answers are on the security page; data location is answered by email.
- Week 3. The owner asks for an annual invoice and a cancellation clause. FixRoute sends its standard order form and DPA.
- Week 4. Contract signed; personal plans are moved to the company account and the technicians cancel their store subscriptions with a guided message.
- Store billing
- Own work orders only
- SSO and admin console
- Dispatch board
- DPA and invoice
Answer the questions in the order the buyer asks them.
Operations asks whether it works, IT asks whether it is safe, finance asks how to pay. Prepare a short answer for each before the first call, so the champion is never left waiting.
What mistakes slow down company purchases?
- No public security page. Every buyer then sends a long questionnaire, and each one takes days.
- Overpromising. Saying yes to data residency or SSO you do not have can cost the account at renewal.
- Double billing. Staff who keep personal store subscriptions after the company plan starts will ask for refunds. Plan the migration.
- Custom builds for one customer. A private build is a second product to maintain. Use it only when the public app with company sign-in cannot work.
- Ignoring the small buyer. Not every company has procurement. A ten-person firm wants a card payment and a receipt, not a contract.
- Trade-off: annual invoices improve cash flow and retention, but monthly card billing removes friction for small teams. Offer both, at different sizes.
What should you measure in company purchasing?
| Metric | Question it answers | Where to find it |
|---|---|---|
| Company plan requests | Are teams asking to buy? | In-app form and website form submissions |
| Time to first reply | Are we fast enough? | CRM timestamps |
| Security questions by topic | Which answer is missing from our page? | Sales inbox tags |
| Days from request to signature | Where does the deal wait? | CRM stage history |
| Seats at signature vs active seats at 90 days | Did the company actually roll it out? | Billing and product analytics |
| Personal subscriptions migrated | Did we avoid double billing? | Store and billing records |
For the step before this one, see internal champions; for the commercial model, team and company pricing.
Frequently asked questions
Do I need SSO to sell my app to companies?
Not always. Small companies rarely ask. Mid-size and larger companies often require it, so list your plan for it on your security page.
What is MDM and why does it matter?
Mobile device management lets a company's IT team install, configure and remove apps on company devices. Buyers want to know your app works on managed phones.
Can companies pay for an app by invoice?
Yes, if you sell company plans directly. Many work apps keep individual plans in the app stores and invoice company accounts. Check current store terms for your storefront.
What is a custom app on Apple platforms?
An app distributed privately to specific organizations through Apple Business Manager or Apple School Manager, then installed by device management or redemption codes.
How many organizations can get a private Android app?
Managed Google Play lets you publish a private app to up to 1,000 organizations, where it appears in their EMM console.
What is data residency?
The country or region where customer data is stored. Some sectors and public bodies require data to stay in a particular country.
Do I need a data processing agreement?
Companies with a legal team usually ask for one. Have a standard version ready rather than drafting one per deal.
What is Apple Business?
Apple's platform for businesses, available from April 14, 2026, combining Business Manager, Business Essentials and Business Connect with built-in device management and Managed Apple Accounts.
Sources & further reading
Regulator rules, platform policies and local data change. These sources let you check the facts on this page, last checked October 6, 2026.