Logo
AppDeploy logo

Apple device management and private apps

Live

AppDeploy

Manage your iPhones, iPads and Macs, and give your people their own branded app store.

AppDeploy puts device management, private app distribution and release controls in one workspace for iPhone, iPad and Mac. The first 5 devices are free, then £1 per device a month, with every device feature included at that one price. Your branded app store and release controls are £29 a month, with or without devices.

Visit AppDeploy

Live at appdeploy.scotitech.com

AppDeploy console

Live

01 / Devices and apps

AppDeploy branded app store showing ClarityPath and other approved business apps

Devices

5 free, then £1

Devices

iPhone, iPad, Mac

Free

First 5 devices

Then

£1/device/mo

App store

£29/mo

99.9%
Availability SLO
450+
Apps installed
~14 days
Typical enterprise rollout
Apple MDM Vendor
Verified enterprise distribution partner

The problem

Company devices and private apps turn into manual work.

  • New laptops and phones are set up by hand, one at a time.
  • Private apps reach staff through scattered links, codes and instructions.
  • Leavers keep devices, licences and access for longer than they should.
  • Auditors ask who owns each device and whether it is encrypted and up to date, and the answer lives in a spreadsheet.

With AppDeploy

Apple Business stays underneath. AppDeploy does the work.

  • Devices bought through Apple Business appear in AppDeploy and set themselves up the first time they are switched on.
  • Apple Business apps, Custom Apps, App Store apps and Web Clips install on the right devices automatically.
  • Offboarding is one flow: wipe or reissue the device, take back app licences and keep the record.
  • Every device has an owner, a plain health status and a history an auditor can check.

One workspace

Set up devices, deliver apps, and prove it.

Most teams juggle a device tool, an app portal and a spreadsheet for the auditor. AppDeploy, built and operated by ScotiTech Solutions Limited, replaces all three. Company devices set themselves up, apps arrive on the right phones and laptops, and every change leaves a record you can hand to an auditor.

See AppDeploy device management

iPhone, iPad and Mac

One console and one price for every Apple device your company owns. A Mac counts as one device, the same as an iPhone.

Built on Apple Business

Apple Business stays the source for your devices, apps and licences. AppDeploy syncs it on a schedule and does the rest.

People, not serial numbers

See every device and who it belongs to, with a plain status: Healthy, Action required or Not reporting.

Evidence on tap

An asset register, daily compliance history and device records for SOC 2, ISO 27001 and Cyber Essentials, ready to download or send to Vanta.

Capabilities

Everything your Apple devices need, at one price.

Zero-touch setup

Devices bought through Apple Business appear in AppDeploy on their own and set themselves up with your settings and apps. Any other iPhone, iPad or Mac enrols with a link.

Security baselines

Ready-made security settings for iPhone, iPad and Mac, passcode rules on Apple's declarative method, an app allow-list for company phones, and compliance rules that flag any device that drifts.

FileVault and Activation Lock

Turn on FileVault on company Macs and keep each recovery key in escrow. AppDeploy keeps the Activation Lock bypass code, so a leaver's Apple Account can never lock a company device.

Updates with deadlines

Set macOS, iOS and iPadOS update deadlines, and keep Mac App Store apps and the Mac packages you upload up to date by a date you choose.

Your brand on every device

Lock-screen message and Mac login text, company wallpaper, and device names such as ACME-MAC-0042 that match your asset register, applied again automatically after an erase.

Remote actions

Lock, Lost Mode with your message, erase, restart and shut down, Return to Service, single-app kiosk mode and Mac Remote Desktop, each with a reason and an audit record. Erase can need a second admin's approval.

People and device health

Every device has an owner and one plain status: Healthy, Action required or Not reporting. Device and compliance alerts arrive in Slack, Microsoft Teams or your webhooks.

Compliance evidence

Daily compliance history, an asset register download, the full software list on company-owned devices, and device records mapped to SOC 2, ISO 27001 and Cyber Essentials controls.

Connected to your stack

Send device records to Vanta, export them for Drata, require a managed device with Okta Verify, and sign admins in with Google or Microsoft.

Apps on company devices

Install Apple Business apps, Custom Apps, App Store apps and Web Clips without a prompt on supervised devices, with managed app configuration, apps staff cannot delete and notifications they cannot turn off.

VPN, certificates and security agents

Push VPN settings and certificates, and deploy your chosen security agent to company Macs with its permissions approved in advance, so it installs without prompts.

Offboarding and switching

Offboard a leaver in one flow: wipe or reissue their devices, take back app licences and keep a record. Move company devices on iOS, iPadOS and macOS 26 from another tool without erasing them.

Who it's for

Built for three kinds of team.

AppDeploy works for any organisation with Apple devices. These three get the most from it.

Companies with private apps

Give your people a branded app store for your private and internal apps, and manage the devices they use for work.

Startups setting up company devices

Set up company Macs, iPhones and iPads as the team grows, with the device evidence a SOC 2, ISO 27001 or Cyber Essentials audit asks for. Free for up to 5 devices.

App agencies and Apple IT firms

Refer clients to AppDeploy or resell it with your own support. Your partner workspace is free.

How it works

From sign-up to a managed, audit-ready fleet.

01

Start free

Create a workspace, connect Apple Business and enrol your first 5 devices free. Every feature is open for 14 days, with no card needed.

02

Sign in your way

Admins sign in with Google or Microsoft, or with a password and two-step verification. Enterprise adds SAML/OIDC single sign-on and SCIM.

03

Set your baseline once

Choose security settings, update deadlines, FileVault, wallpaper and lock-screen text. Every new device gets them automatically.

04

Hand out devices

Devices bought through Apple Business set themselves up out of the box. Any other device enrols with a link.

05

Deliver apps

Assign apps by group, open your branded app store to staff, and ship each new build through Release Guard.

06

Prove it

Download the asset register and compliance history, send device records to Vanta, and offboard leavers in one flow.

Delivery

Three ways an app reaches a device.

Getting an app into AppDeploy and getting it onto a phone or Mac are two separate decisions. Pick the route that matches how much control you have over the hardware, and run all three side by side.

1

Branded app store

Staff open your company app store, on your own web address if you want, and install what they are entitled to. Nothing is installed on the device beyond the apps themselves.

  • Works on personally owned devices
  • No enrolment and no supervision required
  • Role-based access, so people see only their apps
  • Every install recorded in the audit trail
2

Silent install on company devices

Assign an app and the device installs it on its own. No prompt, no tap and no App Store visit for the employee.

  • Install triggered over Apple Push Notification service
  • Assign by group, so new joiners receive the set automatically
  • Install state reported back for each device
  • Apps staff cannot delete, with notifications kept on
3

Zero-touch enrolment

Devices bought through Apple Business appear in AppDeploy on a schedule and pick up your default setup. The employee unboxes, joins Wi-Fi, and the device arrives configured.

  • Apple Automated Device Enrollment, synced automatically
  • Setup Assistant panes skipped as you configure them
  • Supervision with management the employee cannot remove
  • Return to Service readies an erased device for the next person

The branded app store reaches any number of people with no enrolment and no per-device fee. Device management is £1 per device a month beyond the free 5, and it installs every app on enrolled devices, Apple Business apps included.

Read the full delivery guide

Release controls

Ship apps like releases, not like emails.

Assigning an app is the easy part. Knowing it arrived, catching a bad build before it ships, and proving all of it afterwards is what AppDeploy's release layer does.

Release Guard

Every artefact is preflighted before it can reach a device: identity, version, signing validity, OS support, and what changed since the last release. A failed check blocks the push, and a check we cannot perform says "unknown", never "passed".

Rollout rings

Ship to a first group, expand when you choose. Maintenance windows, deadlines, pause and resume, and a failure threshold that pauses the rollout by itself before more devices get a bad build.

Deployment answers

Every device that hasn't converged tells you exactly why (not assigned, blocked release, device offline, retries exhausted) with the evidence behind it and the one action that fixes it.

Risk Forecast

Before a rollout starts: licence shortfalls, incompatible devices, expiring certificates and stale device data, each with the number of devices affected, never a vague warning.

Evidence Packs

One download proving what was released, to whom, and with what outcome, checksummed so an auditor can verify it independently. Included with Distribution.

Straight from your pipeline

Ship builds from CI with the release upload API, the AppDeploy GitHub Action, Fastlane, or Zapier and Make.

We replaced three different manual processes with a single AppDeploy workspace. Our IT team now ships updates to 40+ employees faster, and install-related support is much easier to manage.
Rohit Ahlawat

Rohit Ahlawat

Director, Aviskaar Enterprises

Built with enterprise security from day one

  • Encrypted in transit (TLS + HSTS) and at rest (AES-256-GCM under a separate key-encryption key).
  • FileVault recovery keys and Activation Lock bypass codes are held in escrow under their own keys, and every reveal needs a fresh two-step check and leaves an audit record.
  • PostgreSQL row-level security forced on every tenant table, so isolation is enforced by the database, not only by application code.
  • Admins sign in with Google, Microsoft or two-step verification. Destructive actions need a reason, typed confirmation and step-up re-authentication, with optional two-person approval.
  • Append-only, exportable audit trail; deterministic deployment decisions with no AI in the loop.
  • Hosted in Glasgow, UK, with encrypted off-site backups in the EU. GDPR DPA, India DPDP and CCPA coverage published. No certification badges we do not hold.

ClarityPath case study

An App Store setback became a clearer, controlled route to users.

ClarityPath's public App Store review exposed a familiar problem for specialised products: a useful app can still struggle to explain its distinction inside a crowded category. Rather than reduce the product to another public listing, AppDeploy created a branded route where its purpose, access model, and installation journey can be understood before a user begins.

  • The review challenge made the product-positioning and distribution problem visible early.
  • AppDeploy presents ClarityPath inside an organisation-branded app store with clear platform and access context.
  • Direct sharing and QR access give approved teams one consistent route instead of fragmented links and instructions.
Explore ClarityPath
ClarityPath App Store review challenge documented during the product launch journey

Pricing

Simple, transparent pricing.

Every plan starts with 14 days of everything, no card needed. Prices exclude VAT and other sales taxes; pay in pounds, US dollars or euros.

Free

No card needed
£0

Up to 5 devices, for as long as you like

Everything a small team needs to manage its first company devices.

  • Up to 5 iPhone, iPad and Mac devices (a Mac counts as one device)
  • Zero-touch setup through Apple Business, or enrol by link
  • App installs on enrolled devices, Apple Business apps included
  • Web Clips sent to enrolled iPhones and iPads
  • Security settings, update deadlines, FileVault, lock and erase
  • 10 apps and 5 teammates
  • Self-serve guides and the status page

AppDeploy

14-day trial
£1/device/mo

Beyond the free 5 · or £10 per device a year · no base fee, no minimum

Every device feature, for as many devices as you need, at one price.

Everything in Free, plus

  • As many iPhone, iPad and Mac devices as you need
  • People, device owners and a plain health status
  • Asset register, daily compliance history and SOC 2, ISO 27001 and Cyber Essentials evidence
  • Vanta, Drata, Slack, Microsoft Teams and Okta Verify connections
  • Offboarding in one flow and Activation Lock escrow
  • Mac app updates with deadlines and security-agent presets
  • Admin sign-in with Google or Microsoft
  • Unlimited apps (fair use) and email support

14 days of everything, no card. Afterwards the workspace stays on Free unless you choose a plan. Monthly, no minimum, stop at any time.

Distribution

With or without devices
£29/mo

or £219 a year · $39 or €35 a month

Your own branded app store and release controls, the same price whether or not you manage devices.

  • Your branded app store at /w/your-slug, or on your own domain
  • App Store-style browsing and install guidance for staff
  • Release Guard, rollout rings and one-click rollback
  • Risk Forecast and Evidence Packs
  • Release upload API, GitHub Action, Fastlane, Zapier and Make
  • Unlimited apps (fair use) and email support

Enterprise

Custom

Terms by agreement

For organisations that need company-wide identity, directory sync and contractual commitments.

  • Everything in AppDeploy and Distribution
  • Enterprise SSO through SAML/OIDC with WorkOS
  • Directory Provisioning (SCIM) for identity providers
  • Scheduled user and group sync with Joiner / Mover / Leaver rules
  • Android signed APK delivery
  • Invoice / purchase-order billing
  • Guided onboarding: named technical owner, handover, 30-day review
  • Contractual SLA with service credits, negotiated against the published 99.9% SLO
  • Executed DPA, quarterly sub-processor review, security questionnaire response

Custom pricing · No commitment · Live within 2 weeks

FAQ

Good to know.

Does AppDeploy replace Apple Business?

No. Apple Business stays the source for your devices, apps and licences, and they stay yours. AppDeploy syncs it on a schedule and adds device management, your branded app store and release controls on top.

Which devices does AppDeploy manage?

iPhone, iPad and Mac. A Mac counts as one device, the same as an iPhone. Android app delivery, as signed APKs, is available with Enterprise.

Does AppDeploy make us SOC 2 or ISO 27001 compliant?

No tool can do that on its own. AppDeploy gives you the device evidence those audits ask for (owners, encryption, updates, the asset register and daily history), sends it to Vanta, and exports it for Drata and your auditor.

Can we move from another device-management tool without wiping devices?

Yes. Company devices on iOS, iPadOS and macOS 26 move to AppDeploy without being erased, using Apple's migration support.

Does AppDeploy include antivirus?

No. AppDeploy deploys your chosen security agent to company Macs with its permissions approved in advance, and the full software list shows it is installed on every device.

What happens after the 14-day trial?

Every feature is open for 14 days, with no card needed. Afterwards the workspace stays on Free, with up to 5 devices, unless you choose AppDeploy, Distribution or both.

Can I see an app store before signing up?

Yes. Open ScotiTech's own branded app store at appdeploy.scotitech.com/w/scotitech-solutions to see app discovery, install guidance and branding.

Run your Apple devices and private apps from one place.

Start free with up to 5 devices, with every feature open for 14 days and no card needed, or talk to our team about a larger rollout.

Visit AppDeploy